Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/d80a2159-d927-35e8-bb93-b67e02d8813c.roa
File:                     d80a2159-d927-35e8-bb93-b67e02d8813c.roa (raw, json)
Hash identifier:          twQY3JgyODRDeyK6M/py4oiAe1nvGQpTsWYMNt4qOI4=
Subject key identifier:   5C:1B:1F:CD:D5:7A:83:5B:D5:0F:EF:D3:F1:32:4F:87:07:25:68:42
Certificate issuer:       /CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87
Certificate serial:       010D0C9F4328584CD5217C824FAC584A8A888500
Authority key identifier: 59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/d80a2159-d927-35e8-bb93-b67e02d8813c.roa
Signing time:             Wed 11 Feb 2026 23:29:17 +0000
ROA not before:           Wed 11 Feb 2026 23:29:17 +0000
ROA not after:            Tue 12 May 2026 22:29:17 +0000
asID:                     152900
IP address blocks:        104.250.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d5:21:7c:82:4f:ac:58:4a:8a:88:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87
        Validity
            Not Before: Feb 11 23:29:17 2026 GMT
            Not After : May 12 22:29:17 2026 GMT
        Subject: CN=037dc770-7781-499c-9286-b370255876bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:df:c3:e8:11:1e:5c:18:b3:6b:f7:15:d1:
                    f1:29:ec:ed:8f:74:d2:90:69:1a:81:ae:81:30:2b:
                    b8:b9:0c:9f:50:41:0d:a5:64:16:e6:a0:a4:8c:82:
                    0d:45:e9:63:75:67:60:a7:2a:4c:c8:51:4d:f3:41:
                    6b:03:ea:ab:76:77:8f:c1:2e:c5:4d:30:37:4b:bb:
                    15:69:52:9f:8f:72:66:45:02:a4:9d:54:98:cf:b0:
                    5e:83:5b:99:79:7c:02:a1:d1:b4:a6:d2:bf:25:9d:
                    ae:12:52:94:c7:54:5c:65:c6:f3:44:f8:42:d5:12:
                    68:ef:b4:d4:73:12:66:06:fd:93:e4:78:81:84:b7:
                    bb:cd:77:6f:65:65:f5:41:21:e7:be:5a:62:bc:5c:
                    66:56:bf:89:e4:53:7a:e4:69:58:0a:f5:fe:c5:91:
                    fd:6f:33:b2:49:cc:31:4f:86:2e:ee:0d:59:c9:75:
                    45:fd:55:b8:a2:f0:b5:bb:cd:e5:41:af:42:b4:7e:
                    2b:93:60:3d:06:df:1e:8a:c0:8d:5d:88:b9:fa:6e:
                    8c:9a:2b:b2:10:5f:3a:d2:87:26:f3:a6:77:20:ed:
                    d2:0d:0d:8a:0c:57:3f:93:84:02:22:da:2c:83:6c:
                    fb:ac:0f:27:8f:65:83:ea:27:72:1c:f6:12:cb:c6:
                    ea:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1B:1F:CD:D5:7A:83:5B:D5:0F:EF:D3:F1:32:4F:87:07:25:68:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/d80a2159-d927-35e8-bb93-b67e02d8813c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.crl

            X509v3 Authority Key Identifier:
                keyid:59:F5:B4:F5:AE:20:9D:77:C3:7E:7C:BF:A5:F9:4D:24:B6:D3:78:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4e6d31d-38f1-4a9f-90a5-78ad33f2fc87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:ae:08:73:fa:30:f4:cd:87:b7:ba:29:c5:26:33:33:22:
         78:b4:8f:c3:d7:00:80:f5:69:21:b6:ea:3e:bb:61:a7:f8:93:
         df:5a:cf:e5:d7:d4:76:b1:8c:a3:bc:67:59:0e:b3:27:5b:52:
         bf:68:23:1e:73:11:c5:58:d7:17:59:81:30:77:d9:67:fd:0c:
         5e:67:e2:d5:cd:18:48:a5:cb:07:39:36:fc:2e:99:08:84:79:
         1b:01:6d:d6:df:b5:59:67:16:6e:eb:7d:90:25:14:b9:15:dd:
         fd:24:23:48:7d:02:cd:4e:5c:6f:59:82:74:71:09:67:79:6a:
         b3:4f:07:68:3c:c2:4e:93:21:d9:98:94:dd:e4:16:0f:a7:bb:
         79:6f:60:fd:bd:d0:51:50:45:81:41:d2:af:ed:c8:f0:5d:6d:
         21:63:2d:a7:02:81:e5:13:f2:0e:80:b7:65:af:0b:d7:1e:6c:
         ec:e3:a7:90:4f:f2:5b:e1:18:c1:71:60:af:19:30:72:2b:f4:
         b4:91:21:33:21:72:41:37:f3:e0:c4:1c:19:f2:99:ee:6c:b1:
         e5:48:8c:ad:b4:68:b8:0f:2a:20:a0:eb:18:31:6a:69:d5:4c:
         ef:f9:18:ee:9f:ef:d3:32:c6:2f:d6:1c:44:55:a3:26:08:b0:
         b5:c7:12:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:32:23 2026 by rpki-client