Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/49983501-5530-3388-b854-3db6d5ede801.roa
File:                     49983501-5530-3388-b854-3db6d5ede801.roa (raw, json)
Hash identifier:          +osC6vTYfDnqX8lP81O/aXp2zL3O/tkLNHWYh2uckt0=
Subject key identifier:   06:F5:40:F1:68:9D:7D:88:9F:F9:53:BF:19:9F:B0:7B:3D:64:8B:E0
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584CBAE735F76C00DF1EE97A5CD0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/49983501-5530-3388-b854-3db6d5ede801.roa
Signing time:             Mon 02 Feb 2026 14:00:40 +0000
ROA not before:           Mon 02 Feb 2026 14:00:40 +0000
ROA not after:            Sun 03 May 2026 13:00:40 +0000
asID:                     216314
IP address blocks:        104.250.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ba:e7:35:f7:6c:00:df:1e:e9:7a:5c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb  2 14:00:40 2026 GMT
            Not After : May  3 13:00:40 2026 GMT
        Subject: CN=e3c8a99b-f66c-4d31-bdc6-e60f7e809555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:58:b0:25:7d:3c:dc:6a:61:11:0f:bc:88:6d:
                    26:8a:14:97:e0:aa:1a:21:2e:cb:81:83:e4:24:55:
                    d1:0c:39:c2:fe:65:ac:cc:6b:65:e2:96:c6:c1:e0:
                    3e:ce:a3:ea:01:bb:67:14:cb:86:0a:4f:46:f4:c9:
                    5f:24:ea:16:af:c7:09:79:5c:fb:7d:aa:ac:e3:a5:
                    3d:43:bd:39:e6:d1:13:e2:b6:0e:fd:4d:39:44:99:
                    57:4f:66:3b:b4:db:d8:bc:83:69:46:dc:71:6d:7b:
                    7d:b3:23:4e:bf:81:b9:dd:1f:ba:29:25:56:d2:13:
                    e7:86:89:b3:7e:04:39:f2:4c:e6:5d:ec:f6:dd:39:
                    84:12:51:a5:2d:34:91:4d:99:40:0b:a9:d4:cb:2f:
                    37:64:12:a2:3a:f8:7e:b2:eb:64:4f:d2:dc:38:86:
                    59:36:9a:a9:74:53:4e:aa:b6:aa:b2:d1:49:3d:4a:
                    07:66:cf:6b:48:a1:a7:60:bc:93:aa:ac:d1:04:6b:
                    1b:d7:73:a8:47:35:ac:0a:f4:c0:95:24:e9:d2:8b:
                    f0:9f:ba:00:45:d8:a0:26:08:7b:86:d3:53:eb:0a:
                    20:4b:d1:ec:ad:96:68:b9:3b:92:45:5e:2c:a4:03:
                    5c:ad:71:76:c3:00:eb:93:c1:0a:2e:4a:cd:5d:9b:
                    60:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F5:40:F1:68:9D:7D:88:9F:F9:53:BF:19:9F:B0:7B:3D:64:8B:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/49983501-5530-3388-b854-3db6d5ede801.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d8:3b:fa:a8:5e:6b:75:e3:3e:3c:ca:0d:58:16:8f:3d:26:
         fc:12:dd:30:4d:26:36:3c:c5:20:b0:2a:e4:b5:2c:43:be:79:
         86:8a:8a:72:2d:4e:5a:38:1d:ff:8c:c1:b1:5e:81:0b:26:43:
         1e:4d:ec:50:e5:cc:c2:cb:32:3a:54:5f:11:47:bd:97:a9:32:
         cf:a1:01:fe:d5:c8:81:02:0a:1c:1e:27:c6:5d:60:51:14:a1:
         1b:2b:d2:78:44:2e:94:c1:46:b3:3b:c4:5a:2a:63:08:2d:df:
         ab:f5:25:b5:bc:cb:e6:dc:31:1a:4c:34:e0:e8:51:3b:21:e9:
         2f:04:bf:40:6e:0d:3c:e2:9b:80:27:78:e0:07:35:e6:43:08:
         9b:3a:4e:dc:98:fc:ba:55:59:44:16:29:3f:4b:fd:40:42:aa:
         27:d1:2d:89:f0:18:8e:da:62:ee:26:52:77:19:4c:36:6e:db:
         4e:87:5f:b9:05:78:fe:33:79:c1:21:bc:00:80:1a:c9:32:88:
         44:4d:68:80:58:3d:ad:ae:99:e9:3e:82:55:cc:2b:8a:38:10:
         60:f1:10:f0:a9:81:f2:71:a9:c4:b2:4b:3d:c8:13:dc:59:ea:
         b9:1a:8c:52:b7:0c:fb:16:70:b1:c2:ff:12:9c:d1:ab:e8:0b:
         58:14:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:01:39 2026 by rpki-client