Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/50bc08f6-6a21-30be-ad0b-ab6a13b6c070.roa
File:                     50bc08f6-6a21-30be-ad0b-ab6a13b6c070.roa (raw, json)
Hash identifier:          UVEpe04nWawq5xG0CrttyIKgFR6E3xpJA2ojJ9dU97E=
Subject key identifier:   28:9C:D0:05:CF:42:2D:88:78:CD:D9:3D:DA:27:92:2C:6E:CA:EB:2A
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584CD13CB196B5F4A8B3E0A10540
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/50bc08f6-6a21-30be-ad0b-ab6a13b6c070.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     21559
IP address blocks:        104.238.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:b1:96:b5:f4:a8:b3:e0:a1:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=4a53e9fe-09e2-4fa3-9fe4-1ea97bbdcf4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:64:a3:1d:9a:59:18:54:72:62:f0:ce:75:01:
                    ca:fd:09:36:17:b0:ed:c7:3d:b1:74:41:74:05:79:
                    9d:18:eb:99:a7:a9:af:8d:47:9f:ac:f2:85:2e:9e:
                    85:b0:a8:30:ec:7e:a3:95:e9:86:c7:1f:e4:7c:6a:
                    e0:f4:70:4b:4a:a8:2e:33:0b:26:fb:63:71:41:75:
                    85:01:93:6f:e2:98:96:74:3f:00:49:d5:ae:ee:ef:
                    3d:27:33:de:d6:4d:fc:cb:7f:06:56:06:3c:36:db:
                    26:e3:fc:32:83:54:6c:93:bd:5e:23:78:3f:39:f0:
                    a1:8e:7f:54:cc:a3:8f:f1:67:0c:3c:ec:da:1c:84:
                    af:93:85:2b:f6:62:e5:6b:3b:2f:f3:42:1f:8d:83:
                    50:f7:69:1c:18:be:7f:d7:32:fc:12:82:c5:7b:4a:
                    f6:f2:22:a8:d5:0c:15:e2:b2:35:34:04:c4:88:ed:
                    99:17:fd:08:dd:ba:2c:4f:65:36:8b:76:50:de:d4:
                    93:36:15:36:b5:c8:48:a1:93:58:93:f5:62:3e:9d:
                    8b:13:0f:b8:fe:bd:94:4c:93:92:a2:f0:e2:68:21:
                    60:2b:c3:14:31:94:77:54:8f:e2:97:19:b2:21:e6:
                    a7:a5:b5:77:eb:0e:97:74:95:7d:a0:55:e8:3a:7f:
                    f2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9C:D0:05:CF:42:2D:88:78:CD:D9:3D:DA:27:92:2C:6E:CA:EB:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/50bc08f6-6a21-30be-ad0b-ab6a13b6c070.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.238.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3f:0e:3e:ec:29:1b:7e:71:12:26:cc:56:9c:3e:96:7e:bc:
         45:f1:b2:cd:a9:91:76:ab:36:7f:ad:51:9c:7b:68:af:28:fa:
         4b:98:02:e1:f7:50:0a:ca:e2:ad:d1:ec:29:51:de:c9:69:2a:
         5e:aa:22:21:72:e2:f1:1c:bb:40:61:9e:eb:79:94:9e:d4:21:
         2d:d8:9b:73:2c:a9:38:7a:12:a5:79:b8:61:89:f0:3e:28:04:
         1d:be:b6:9b:74:4f:87:38:ae:66:61:70:fc:27:ab:32:01:08:
         6b:f5:fd:d2:06:d5:9e:31:11:be:df:2e:fa:b6:c6:1b:97:22:
         93:74:4b:f9:4b:f3:a0:68:b9:1c:8e:c2:ae:b8:5e:e9:5b:f6:
         bd:df:12:92:05:6f:1f:b3:e6:ac:68:d4:28:e4:e7:f4:a3:4c:
         d5:c8:23:ca:44:88:d6:5d:31:b0:db:0b:22:ce:b5:1b:d3:4e:
         26:6d:40:64:dd:7f:c3:38:c5:d8:7c:53:94:d0:d0:48:09:79:
         ef:00:01:68:10:39:a1:c2:42:1d:a0:53:bc:97:2e:90:59:31:
         a3:aa:27:7a:1a:de:2b:2c:1b:54:00:e7:15:98:cb:02:b9:15:
         51:ee:ea:4d:57:50:a4:23:bc:48:3b:3e:d9:44:c1:09:60:44:
         27:06:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:18 2026 by rpki-client