Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa
File:                     50ff23d6-c143-3056-90c8-553c1e77ad8a.roa (raw, json)
Hash identifier:          6ND9/doVEKVunHHDiVdEPFBIeZaPPUY1I3XVKe246dw=
Subject key identifier:   8E:C0:33:E7:D7:7B:7F:47:79:6B:14:D3:81:D7:45:82:E4:A5:5B:CA
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584CF4222E52D6A608DCA7725E00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa
Signing time:             Mon 23 Feb 2026 02:00:31 +0000
ROA not before:           Mon 23 Feb 2026 02:00:31 +0000
ROA not after:            Sun 24 May 2026 01:00:31 +0000
asID:                     8100
IP address blocks:        104.238.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f4:22:2e:52:d6:a6:08:dc:a7:72:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Feb 23 02:00:31 2026 GMT
            Not After : May 24 01:00:31 2026 GMT
        Subject: CN=729a22e6-b7cb-4b6e-aa17-7272f893abdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8e:be:03:85:d6:92:41:e9:da:70:7f:38:dc:
                    b6:fe:ce:bc:ef:65:97:9d:38:52:9f:06:60:d4:50:
                    e6:76:e9:b0:db:4c:a3:50:73:c1:b5:7c:84:0a:eb:
                    e2:5c:f8:ae:7c:f3:7a:cc:ba:6a:1b:36:ac:62:ce:
                    ca:17:ae:26:81:fa:29:d5:f6:54:4f:5b:16:f9:f1:
                    ba:7d:36:66:51:7b:31:2e:d3:79:fe:54:a0:d5:1c:
                    76:26:92:07:75:9c:ac:d7:b0:74:6a:91:69:43:32:
                    2c:db:14:a0:ca:08:29:62:e6:e9:42:6c:f6:91:2f:
                    19:7d:58:e9:6f:55:e7:95:fc:a9:d9:1a:92:67:89:
                    3a:62:88:95:ad:c1:4a:5a:6d:73:89:ae:12:1b:9a:
                    ae:e1:f7:49:83:31:e8:3d:35:5e:99:c8:2c:35:0c:
                    e4:93:14:a3:15:49:de:9f:d5:07:5f:77:e6:41:40:
                    28:f4:2e:17:e6:b0:ba:b4:32:b7:d9:c6:9b:92:89:
                    cd:bc:32:3c:ac:67:28:db:eb:73:9b:5f:38:d1:15:
                    8b:ca:a3:02:03:64:40:6c:a3:40:43:92:01:fb:8d:
                    ae:d2:02:ee:d9:3d:73:dd:31:b5:b6:ec:a0:b0:e9:
                    e8:a1:cf:14:07:6c:56:6f:7e:08:16:aa:69:58:93:
                    d4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C0:33:E7:D7:7B:7F:47:79:6B:14:D3:81:D7:45:82:E4:A5:5B:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/50ff23d6-c143-3056-90c8-553c1e77ad8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f6:33:af:b7:d7:6c:45:b0:45:95:59:21:87:e4:02:d9:1f:
         74:53:e7:5f:4b:88:c9:d4:69:4b:2a:59:b6:41:56:26:7c:2d:
         89:55:51:41:64:ab:4d:ea:b5:3d:b2:a1:5e:d5:45:cd:38:12:
         f5:4b:fe:8a:ae:50:5e:e4:39:21:45:ca:69:4d:ab:65:a3:cc:
         50:04:25:a9:71:e9:48:d0:c8:cc:40:b5:88:a1:f9:98:ad:15:
         2c:3d:8b:75:b6:a6:5e:2e:da:87:98:28:24:69:17:bc:bb:4f:
         9b:9a:95:99:17:3f:94:d7:61:c4:b6:e9:79:97:6e:b8:93:bb:
         a7:1d:12:07:45:26:d3:92:e3:56:ef:07:5e:c3:db:c9:14:ec:
         ce:1f:30:38:06:f3:83:7d:7d:24:19:2c:d9:fe:c0:df:40:8f:
         b9:25:4f:46:e6:60:fc:f3:2b:58:b6:5c:29:73:ea:e4:7a:9d:
         cd:24:f1:91:b1:ea:22:3b:1c:8f:88:04:89:77:9b:63:20:5f:
         33:7b:12:54:91:1b:19:c6:8b:4b:89:48:93:ec:cd:59:a3:91:
         cc:28:2b:b5:84:1f:03:a8:67:18:e2:73:dd:01:f3:05:9e:dc:
         65:e4:25:30:bf:b8:93:8a:4b:49:44:6e:65:02:e9:be:0c:6f:
         a0:e3:72:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0Ii5S1qYI3KdyXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk
NzI5YTIyZTYtYjdjYi00YjZlLWFhMTctNzI3MmY4OTNhYmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y6+A4XWkkHp2nB/ONy2/s6872WXnThSnwZg
1FDmdumw20yjUHPBtXyECuviXPiufPN6zLpqGzasYs7KF64mgfop1fZUT1sW+fG6
fTZmUXsxLtN5/lSg1Rx2JpIHdZys17B0apFpQzIs2xSgyggpYubpQmz2kS8ZfVjp
b1Xnlfyp2RqSZ4k6YoiVrcFKWm1zia4SG5qu4fdJgzHoPTVemcgsNQzkkxSjFUne
n9UHX3fmQUAo9C4X5rC6tDK32cabkonNvDI8rGco2+tzm1840RWLyqMCA2RAbKNA
Q5IB+42u0gLu2T1z3TG1tuygsOnooc8UB2xWb34IFqppWJPU4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI7AM+fXe39HeWsU04HXRYLkpVvKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvNTBmZjIzZDYtYzE0My0z
MDU2LTkwYzgtNTUzYzFlNzdhZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO75MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAf2M6+312xFsEWVWSGH5ALZH3RT519LiMnUaUsqWbZBViZ8LYlVUUFk
q03qtT2yoV7VRc04EvVL/oquUF7kOSFFymlNq2WjzFAEJalx6UjQyMxAtYih+Zit
FSw9i3W2pl4u2oeYKCRpF7y7T5ualZkXP5TXYcS26XmXbriTu6cdEgdFJtOS41bv
B17D28kU7M4fMDgG84N9fSQZLNn+wN9Aj7klT0bmYPzzK1i2XClz6uR6nc0k8ZGx
6iI7HI+IBIl3m2MgXzN7ElSRGxnGi0uJSJPszVmjkcwoK7WEHwOoZxjic90B8wWe
3GXkJTC/uJOKS0lEbmUC6b4Mb6DjcjI=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:56:37 2026 by rpki-client