Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/a1cff476-7509-34bc-b0b3-5ba1d0d2afed.roa
File:                     a1cff476-7509-34bc-b0b3-5ba1d0d2afed.roa (raw, json)
Hash identifier:          SAHEb06FPff/rJoRJVrG8tsG74xUS2uQVZUkGw37lZ8=
Subject key identifier:   0F:09:6B:B7:5A:E6:48:47:10:24:99:2A:8C:99:BD:E3:C0:4D:12:B0
Certificate issuer:       /CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87
Certificate serial:       010D0C9F4328584CDC67591F79BD79E81C777000
Authority key identifier: 59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/a1cff476-7509-34bc-b0b3-5ba1d0d2afed.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     55280
IP address blocks:        104.250.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:59:1f:79:bd:79:e8:1c:77:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=bf17fa80-c64f-4af7-9c8b-715ab4f14e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1e:58:67:0d:fc:85:82:5f:fb:e7:f0:88:bb:
                    df:c6:83:8d:83:f5:70:89:d2:1e:14:2c:61:1b:aa:
                    2e:13:97:38:1c:72:6d:bc:6a:45:c9:a7:fc:85:33:
                    e9:cc:76:bf:24:22:48:0d:d9:6f:61:a1:b1:a4:02:
                    6c:95:7c:2c:57:4b:08:df:87:ad:9a:8f:c2:64:f7:
                    eb:7d:63:3c:e3:a8:0c:a2:df:f4:d0:7f:99:8f:15:
                    34:cb:8b:00:2c:05:72:a8:df:9a:c3:89:e0:66:2a:
                    95:c1:e7:f1:e2:fa:13:d7:49:35:5a:41:d6:b9:cc:
                    69:52:34:37:16:c8:eb:33:03:c1:a8:93:0f:79:ea:
                    56:f7:85:2e:a4:66:b7:b3:f9:2e:5e:d9:d4:ce:18:
                    10:81:85:c2:54:bc:6e:60:0a:26:df:c1:5e:64:c0:
                    8a:58:13:e6:7c:2a:fe:19:5f:26:bb:01:73:50:af:
                    63:49:b2:f6:54:96:21:93:f0:a2:c9:34:10:b7:5a:
                    88:b3:4e:8a:c3:15:2b:24:7f:ac:c2:37:1b:8f:b4:
                    89:92:15:30:d3:e3:69:16:fa:a5:a5:87:ec:ca:4c:
                    93:2a:9c:94:74:53:d2:25:44:2d:72:ef:6e:fc:e2:
                    5e:1c:c4:e2:0d:d4:6c:66:93:5a:90:ba:dc:72:05:
                    98:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:09:6B:B7:5A:E6:48:47:10:24:99:2A:8C:99:BD:E3:C0:4D:12:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/a1cff476-7509-34bc-b0b3-5ba1d0d2afed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.crl

            X509v3 Authority Key Identifier:
                keyid:59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:09:90:3e:a8:52:6e:3a:08:55:fc:9b:b7:42:13:85:a7:
         2c:e7:e5:ef:3b:57:28:db:97:3b:da:b8:ea:8d:65:52:fe:db:
         7f:2d:14:37:ae:99:f5:26:18:7a:4c:c7:44:78:0e:1d:05:6b:
         b9:6c:9f:be:91:6d:7c:cc:5f:fa:c4:66:d4:d0:c3:22:9b:80:
         0b:21:78:3d:e6:2b:23:07:f4:69:88:3d:3c:40:47:c4:e2:4d:
         87:e1:01:6c:84:83:7c:48:b5:a9:77:fd:47:89:58:0c:0f:9c:
         63:e1:78:43:af:84:08:5c:c7:d0:b1:9c:5f:7c:16:0d:68:dc:
         f8:1d:bb:5a:69:ff:c7:ce:1d:19:0f:5a:ba:b5:48:97:0c:07:
         0a:4c:90:ce:29:06:21:d1:3d:72:f9:e3:2e:b7:a2:c9:57:80:
         fe:c5:88:4e:94:6e:dd:da:e3:43:cb:3a:35:9e:be:90:27:fa:
         85:36:61:1a:15:bd:41:7f:f6:67:38:7a:f0:58:54:e3:df:8e:
         2d:bd:1f:b0:8f:28:ca:af:42:27:ee:fc:60:a7:68:c0:ff:42:
         0e:02:98:42:e8:72:c6:a4:49:65:20:f9:ec:48:b8:ab:46:f4:
         d7:c4:ea:8c:d3:fa:c5:60:c4:46:e8:c0:9f:f1:cd:a0:a3:9b:
         3d:3a:8b:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ1kfeb156Bx3cAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRlNmQzMWQtMzhmMS00YTlmLTkwYTUtNzhhZDMzZjJm
Yzg3MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
YmYxN2ZhODAtYzY0Zi00YWY3LTljOGItNzE1YWI0ZjE0ZTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB5YZw38hYJf++fwiLvfxoONg/VwidIeFCxh
G6ouE5c4HHJtvGpFyaf8hTPpzHa/JCJIDdlvYaGxpAJslXwsV0sI34etmo/CZPfr
fWM846gMot/00H+ZjxU0y4sALAVyqN+aw4ngZiqVwefx4voT10k1WkHWucxpUjQ3
FsjrMwPBqJMPeepW94UupGa3s/kuXtnUzhgQgYXCVLxuYAom38FeZMCKWBPmfCr+
GV8muwFzUK9jSbL2VJYhk/CiyTQQt1qIs06KwxUrJH+swjcbj7SJkhUw0+NpFvql
pYfsykyTKpyUdFPSJUQtcu9u/OJeHMTiDdRsZpNakLrccgWYNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8Ja7da5khHECSZKoyZvePATRKwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNGU2
ZDMxZC0zOGYxLTRhOWYtOTBhNS03OGFkMzNmMmZjODcvYTFjZmY0NzYtNzUwOS0z
NGJjLWIwYjMtNWJhMWQwZDJhZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTRlNmQzMWQtMzhmMS00YTlmLTkw
YTUtNzhhZDMzZjJmYzg3L2U0ZTZkMzFkLTM4ZjEtNGE5Zi05MGE1LTc4YWQzM2Yy
ZmM4Ny5jcmwwHwYDVR0jBBgwFoAUWfW09a4gnXfDfny/pflNJLbTeCowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNGU2ZDMxZC0zOGYxLTRhOWYtOTBhNS03OGFk
MzNmMmZjODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPp4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJK5CZA+qFJuOghV/Ju3QhOFpyzn5e87VyjblzvauOqNZVL+238tFDeu
mfUmGHpMx0R4Dh0Fa7lsn76RbXzMX/rEZtTQwyKbgAsheD3mKyMH9GmIPTxAR8Ti
TYfhAWyEg3xItal3/UeJWAwPnGPheEOvhAhcx9CxnF98Fg1o3Pgdu1pp/8fOHRkP
Wrq1SJcMBwpMkM4pBiHRPXL54y63oslXgP7FiE6Ubt3a40PLOjWevpAn+oU2YRoV
vUF/9mc4evBYVOPfji29H7CPKMqvQifu/GCnaMD/Qg4CmELocsakSWUg+exIuKtG
9NfE6ozT+sVgxEbowJ/xzaCjmz06i4o=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:30 2026 by rpki-client