Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb966e1b-fa13-37b0-a49e-0b319577773b.roa
File:                     fb966e1b-fa13-37b0-a49e-0b319577773b.roa (raw, json)
Hash identifier:          j63yTJz5lNI4I9cbkN1NvNTODkJ6PP/ue+9OR64LLMk=
Subject key identifier:   E3:6D:2F:18:8E:82:9B:F4:A6:B8:4A:12:62:EB:ED:D3:97:8E:3B:A1
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584CB121CB1865F117F336982580
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb966e1b-fa13-37b0-a49e-0b319577773b.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     212238
IP address blocks:        104.250.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:cb:18:65:f1:17:f3:36:98:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=863bdccd-e674-4299-9cf3-8d370b2f9fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:04:0e:af:6e:26:71:7f:b5:94:90:98:99:
                    9c:5d:80:dc:c4:86:45:28:e4:40:fb:bb:bd:8a:7e:
                    63:45:14:ab:75:e2:65:a8:39:2f:4c:97:bf:2b:65:
                    44:97:39:66:f0:ba:68:d6:05:bf:7e:05:f2:a1:86:
                    17:85:d7:a2:1d:0e:4d:9c:00:61:6e:46:da:3a:6e:
                    93:aa:3c:21:86:d3:f1:dc:f4:75:d3:6b:87:ac:fa:
                    1b:a9:28:17:99:60:2b:17:7b:13:52:2e:34:00:94:
                    4e:35:ec:78:3b:1e:da:00:a8:5a:15:8a:7e:f9:d0:
                    26:ad:3a:3d:fc:80:49:97:1f:70:89:eb:47:6f:d6:
                    71:e4:fc:d7:a1:d5:ab:78:32:ff:97:65:a2:d6:e5:
                    22:eb:29:60:a8:4b:d3:da:98:60:e5:92:8c:cd:c1:
                    a2:38:93:c8:18:b4:db:44:c5:b7:0d:08:3a:40:e8:
                    f3:3a:d3:99:1f:7f:5b:2d:bc:a3:9b:df:8b:2c:26:
                    7f:30:3a:93:e8:de:bc:ae:2f:a2:9b:7d:99:b5:05:
                    f6:94:d0:09:95:cc:29:b7:de:b4:5b:de:d6:b9:37:
                    a8:ee:5b:fb:8e:98:95:9f:5d:57:10:6e:f4:17:ef:
                    0f:ff:e9:fa:87:58:01:9b:95:22:8c:5c:be:9a:a9:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6D:2F:18:8E:82:9B:F4:A6:B8:4A:12:62:EB:ED:D3:97:8E:3B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fb966e1b-fa13-37b0-a49e-0b319577773b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:59:6a:54:a4:09:bb:52:4b:40:d9:d8:fe:80:5c:36:3a:b2:
         b7:88:1a:82:fd:b2:2b:03:f5:64:a0:81:7f:20:4c:fd:94:c5:
         97:8a:d0:d1:7c:38:5c:94:7a:fa:43:a6:f9:56:68:16:1a:fa:
         db:3b:ef:70:99:63:7b:c0:8d:54:10:66:39:fd:a8:c3:ad:02:
         fd:17:5e:c5:5c:ae:8b:25:9d:7b:9e:70:ef:8e:81:7e:73:37:
         71:3b:f9:1b:eb:5c:84:9a:ca:79:46:5f:40:96:99:97:5f:7a:
         ac:ed:5f:f1:31:4f:57:ab:cc:0e:08:81:c7:e3:68:c0:a1:7c:
         ec:4d:e9:1f:e3:a9:80:09:50:40:1e:37:e2:74:70:14:2d:6a:
         7c:2d:4e:22:96:e8:4c:c3:96:fc:bd:1d:c9:21:d3:8c:4f:9a:
         2b:81:ec:36:a4:3b:d5:2c:a9:af:b0:2c:d5:a6:12:b8:1b:c4:
         a4:6a:f2:7c:76:1b:bc:1e:ad:0b:09:87:78:51:be:a9:bf:52:
         ee:c1:6d:45:85:bb:b2:a6:f2:49:51:cb:54:9b:03:8b:fa:12:
         cb:7c:7c:fe:32:ab:86:e5:f6:6f:aa:96:d5:80:a8:9a:d2:41:
         df:22:4b:bd:2c:e9:e3:c9:78:04:cb:c2:06:8c:21:51:71:ca:
         c0:47:c8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:08 2026 by rpki-client