Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/07371b5d-f179-3164-afcb-bd24a204b59d.roa
File:                     07371b5d-f179-3164-afcb-bd24a204b59d.roa (raw, json)
Hash identifier:          inzJHz9jVA8ED5twYRVe0Lz9BDiIugWX3c2FzHnx1Zs=
Subject key identifier:   44:CC:68:87:44:39:64:6B:CA:30:26:55:DB:50:7C:E8:8F:FE:42:05
Certificate issuer:       /CN=6bbd9f4b-4a94-4f33-8f7b-4372f7e43443
Certificate serial:       010D0C9F4328584D95EFF81BF34DC3A57EC4B540
Authority key identifier: 39:41:91:70:BC:76:AD:15:EF:26:F2:A4:72:9B:13:C4:29:DA:AC:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/07371b5d-f179-3164-afcb-bd24a204b59d.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     394962
IP address blocks:        172.110.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f8:1b:f3:4d:c3:a5:7e:c4:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbd9f4b-4a94-4f33-8f7b-4372f7e43443
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=395f9bf5-9777-4026-8025-ceb06fb4e555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:3f:16:ac:f8:44:8e:b4:3e:d3:97:77:a1:
                    8e:d3:5b:90:ec:9e:cf:9c:7d:0d:c8:42:62:ba:da:
                    7d:b6:5f:7c:59:b6:dc:7e:8e:b2:9f:84:ed:06:d4:
                    92:dc:2d:92:fd:0b:3c:9e:43:cb:5c:e4:f0:bd:6a:
                    1a:fb:72:6d:80:e0:43:5b:89:ca:6b:fe:d2:46:fd:
                    3e:8b:b6:88:a8:31:ab:27:84:44:2e:d5:47:9f:fd:
                    a2:9b:31:42:45:d1:97:e3:c2:13:ff:4c:7f:17:89:
                    c3:8b:6f:62:9b:57:19:df:65:a5:59:6c:b7:2a:b9:
                    2d:17:95:5f:63:59:ef:14:5b:63:2f:87:17:b5:92:
                    ea:ae:dd:90:dd:fc:86:99:6e:a7:51:f8:0f:10:07:
                    95:38:05:30:0f:ee:91:c4:e4:3d:ef:b6:3c:55:81:
                    f5:3d:97:35:56:10:3f:1b:01:36:a8:33:21:2c:a7:
                    0c:f3:d5:79:ef:78:4e:03:bb:63:0e:17:b8:17:28:
                    87:30:b2:c2:5f:72:78:c5:ce:b7:2c:d2:7c:a7:b3:
                    0f:28:28:72:4b:26:0c:24:df:4f:5b:66:33:4c:9c:
                    10:5a:ee:d6:98:92:19:39:e2:4d:fc:56:10:ba:fa:
                    de:b9:c6:2d:87:65:4d:59:09:87:3e:ea:20:73:8b:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:CC:68:87:44:39:64:6B:CA:30:26:55:DB:50:7C:E8:8F:FE:42:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/07371b5d-f179-3164-afcb-bd24a204b59d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.crl

            X509v3 Authority Key Identifier:
                keyid:39:41:91:70:BC:76:AD:15:EF:26:F2:A4:72:9B:13:C4:29:DA:AC:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6bbd9f4b-4a94-4f33-8f7b-4372f7e43443.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:85:88:3f:49:af:8d:62:18:68:29:36:2e:fb:21:00:2e:99:
         40:09:bb:1f:86:80:f1:f0:fe:42:bd:36:85:5c:1d:5b:65:fb:
         00:23:39:7c:c5:06:5a:95:1a:24:d7:e9:fb:b1:6f:92:f5:c6:
         e1:fd:5d:3e:ae:7a:11:a5:e9:83:0d:40:bc:db:be:a0:53:16:
         6d:01:51:5c:24:74:be:df:b1:50:74:a9:d7:0f:0b:c9:46:af:
         51:d2:99:84:51:b2:02:97:2b:a1:18:14:31:c8:46:00:dd:f4:
         f0:38:97:6f:a0:51:e6:2d:b3:2e:ed:30:3b:c9:a6:b2:93:78:
         71:6c:da:e7:c3:73:30:2c:19:f8:10:e0:7b:3a:e5:fa:2e:4c:
         f1:83:ce:54:e5:d3:c7:fe:1d:b2:f4:67:14:89:f7:cf:a7:4f:
         f1:fc:18:95:f7:a3:69:d1:a8:8f:55:29:d8:cf:25:c6:3f:7c:
         7d:74:97:10:b4:5a:cf:78:d7:42:1e:62:e4:88:f1:2b:22:0b:
         0e:d5:9f:c1:87:f5:e8:7d:28:d3:61:1b:15:0a:08:af:41:52:
         dd:ae:e9:25:a0:4e:62:75:a6:51:40:6e:4f:fa:e6:d6:62:34:
         80:5d:13:c8:b1:4e:07:09:eb:3e:fc:d5:c4:b4:1a:f9:91:d2:
         d4:e7:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:05:41 2026 by rpki-client