Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff1cfbd7-5401-37fb-8d72-01ff328edc0a.roa
File:                     ff1cfbd7-5401-37fb-8d72-01ff328edc0a.roa (raw, json)
Hash identifier:          H8SfCBydCdtxE4m0z7n5oTEkPsNomScV+vpq0emVn4g=
Subject key identifier:   00:FC:38:5A:B2:DD:82:40:19:03:FA:D4:7C:0D:3F:33:85:4E:C7:DE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CE1FCD6F2C5960CCD1D183A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff1cfbd7-5401-37fb-8d72-01ff328edc0a.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     7725
IP address blocks:        50.168.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:d6:f2:c5:96:0c:cd:1d:18:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=9c1c66d3-8a4b-43df-983c-7bab18d48317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f1:de:2d:1b:60:81:85:c9:85:74:3e:61:41:
                    27:45:b8:5d:02:80:5f:3b:61:cb:b9:34:c8:df:ed:
                    ec:20:f4:1c:50:d6:29:cc:1a:83:4e:b3:86:ee:7b:
                    42:99:d0:58:97:4d:a4:2a:82:2c:39:fa:6c:0b:6b:
                    c4:1e:03:8a:42:a6:1a:83:f5:d1:cd:92:dc:af:bc:
                    0b:f9:d8:33:24:ae:fe:51:0b:56:cf:90:aa:c9:29:
                    af:f6:a1:3d:7d:d4:68:7a:94:e1:ce:88:26:02:2c:
                    4b:3a:1b:9e:b1:ae:a0:e9:f7:08:d1:75:12:4a:51:
                    ea:d3:f0:e5:71:05:da:11:73:cc:0a:ab:bd:9a:96:
                    cd:37:87:fb:b3:8e:47:fc:85:92:0c:cd:a3:70:20:
                    42:df:b8:c2:51:fd:d0:4c:a3:22:7b:ef:77:72:10:
                    e9:8c:9d:47:f4:b7:d1:d3:65:50:e1:f0:0e:d6:fa:
                    80:5d:c4:32:6a:9d:5d:e6:59:37:c1:9a:6e:b4:5f:
                    fb:28:f6:0c:bb:4d:b8:58:c6:8a:ad:32:5f:7c:c4:
                    cb:a3:72:81:a4:23:d5:8d:5a:1e:c4:eb:03:a4:0e:
                    72:6c:3e:b7:1b:6f:c1:71:98:eb:26:75:be:47:9b:
                    e5:a4:d0:d2:68:ee:33:0a:f8:62:95:f3:b6:2a:7f:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FC:38:5A:B2:DD:82:40:19:03:FA:D4:7C:0D:3F:33:85:4E:C7:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff1cfbd7-5401-37fb-8d72-01ff328edc0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.168.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b1:98:de:c6:30:1b:61:37:37:c9:2b:58:6b:af:ee:04:12:
         52:97:6c:14:fc:4f:2b:6e:71:40:91:2a:a0:45:a9:33:8d:6e:
         98:b9:40:1f:78:69:48:a3:6d:e9:08:80:a0:0b:ae:fb:5a:23:
         75:ad:69:08:bf:59:bf:1a:a7:15:9f:47:b3:40:65:91:b5:1b:
         f4:5f:8f:9c:99:72:94:df:6c:2f:ed:6f:0e:78:83:c3:e0:a5:
         70:58:3c:cb:f8:21:ad:d3:b8:c7:7d:e3:a8:15:d6:97:51:7a:
         41:a0:00:e5:6e:5c:3f:c2:ad:a2:c5:52:fe:7e:0c:5e:1b:46:
         07:48:de:02:ff:8a:fd:2c:a2:34:80:49:32:5c:38:7f:c4:89:
         2c:b4:67:cb:6c:f7:3d:e3:2d:52:5c:1c:44:dd:d8:c9:ca:5c:
         55:61:9b:91:9a:28:0a:fb:fd:7d:7c:22:ff:90:45:a8:9f:0a:
         fb:f8:7b:1e:d3:22:d6:1d:52:60:2a:6e:7f:eb:87:97:89:5b:
         6f:26:ab:55:33:fe:a4:de:ec:0e:cc:80:39:df:74:95:9a:dc:
         18:b5:63:e8:42:69:41:c4:00:a7:f7:f1:39:03:58:db:e6:2e:
         15:2f:d6:33:17:02:08:0f:d1:85:19:bc:82:14:53:ba:2d:10:
         4e:8d:5b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:34:22 2026 by rpki-client