Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/2610a058-f412-3ea2-9d2c-e62411e2b78b.roa
File:                     2610a058-f412-3ea2-9d2c-e62411e2b78b.roa (raw, json)
Hash identifier:          1AIVQqAB4A7Zqm5b9WYflu0er/Fs+3rAPuIU5rwtOrg=
Subject key identifier:   70:DD:7D:BD:36:9D:D8:8D:2C:EB:E0:01:99:0D:D5:ED:CF:5F:41:86
Certificate issuer:       /CN=fccf3604-03c5-4074-aed5-6cf7161bf156
Certificate serial:       010D0C9F4328584CEFF245ED9164BD2C5AA24F00
Authority key identifier: BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/2610a058-f412-3ea2-9d2c-e62411e2b78b.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     399250
IP address blocks:        104.224.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:45:ed:91:64:bd:2c:5a:a2:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccf3604-03c5-4074-aed5-6cf7161bf156
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=bc25029b-47f4-4c06-bf76-1db13bc9460f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:28:61:2b:e9:ec:1a:f9:9f:69:ec:10:2c:80:
                    66:fb:56:dd:5e:81:6d:fc:2d:2a:50:cb:e2:f4:23:
                    5b:1a:14:4e:a4:7d:88:87:3e:2e:fd:54:5a:22:22:
                    08:3f:ca:db:9c:05:9c:2d:01:ce:f6:3a:b1:a8:25:
                    80:1b:9e:a4:cf:19:f7:cd:ba:8f:61:5e:b3:e7:7a:
                    6c:4b:be:b4:ea:90:4c:e4:f1:52:f2:45:00:39:df:
                    9c:53:d0:b0:30:76:da:11:fd:21:95:02:18:45:1e:
                    1f:97:63:f6:41:7b:df:b3:99:26:21:b5:f4:81:64:
                    b1:81:02:10:74:9e:b3:4c:0e:d1:43:6a:8a:fd:25:
                    30:e6:2f:97:f0:4d:46:1b:13:4f:85:5d:a3:7f:09:
                    2c:66:12:0f:de:db:bf:76:f8:6a:d7:ce:1e:bf:11:
                    40:a1:06:37:80:3e:e9:89:24:92:e8:da:92:d7:87:
                    c7:61:7f:5f:40:dd:86:d5:92:e6:4a:fb:9b:cd:18:
                    bd:8b:df:e9:6a:87:35:95:e7:eb:f0:19:57:3f:75:
                    b1:85:f3:9b:8a:d8:36:07:f2:23:34:67:34:4a:c4:
                    e8:1a:81:53:4a:0e:dd:6d:5f:36:64:79:e4:2b:df:
                    5f:aa:e9:a5:fa:dc:d5:cb:8b:b1:a1:54:c9:20:d7:
                    2f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DD:7D:BD:36:9D:D8:8D:2C:EB:E0:01:99:0D:D5:ED:CF:5F:41:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/2610a058-f412-3ea2-9d2c-e62411e2b78b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156/fccf3604-03c5-4074-aed5-6cf7161bf156.crl

            X509v3 Authority Key Identifier:
                keyid:BB:3A:1F:F8:92:62:5B:8E:16:42:C4:97:38:65:83:18:83:24:00:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fccf3604-03c5-4074-aed5-6cf7161bf156.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:58:35:80:ec:bb:68:5a:e8:ed:4a:e6:51:bf:62:d9:ec:e9:
         00:4e:bd:10:ab:38:32:c1:f4:d5:8d:d3:01:d7:9e:e0:17:a5:
         08:f6:55:ca:25:88:12:ca:d9:6e:01:16:7c:a2:c2:bd:d5:79:
         d6:b3:e1:ef:2e:2a:ac:56:bd:b2:5a:40:2b:7e:3f:b9:6f:dd:
         f8:a5:51:e4:72:a2:73:fb:9a:11:54:4b:e6:ba:42:26:c9:26:
         07:3b:0a:5e:d9:8d:7a:4f:91:fa:c0:8f:92:5e:03:d1:72:59:
         0c:bd:e2:44:ac:8d:17:b9:ee:30:01:9b:fe:9f:2f:34:58:59:
         42:6d:d0:1f:0b:aa:ce:41:ab:7b:44:72:fb:bd:d0:df:f6:bd:
         35:17:70:df:9d:4e:d3:6d:13:9d:65:a5:cc:8d:cc:99:9f:70:
         52:e8:a0:75:e8:73:c5:19:ba:03:ab:32:96:f1:7f:eb:22:9b:
         95:93:78:50:d7:17:9f:77:23:08:51:46:c0:b9:02:c9:8f:5c:
         8d:fb:9d:a8:aa:3b:6c:7d:e9:37:06:14:d0:32:9a:41:3e:57:
         66:a5:19:5d:51:a4:dc:ef:b8:04:91:d1:83:2c:ca:5a:e8:1b:
         5e:ce:eb:27:7f:d4:00:71:34:d2:97:8e:db:81:1d:f5:55:85:
         fe:0e:e2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:42 2026 by rpki-client