Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee/714821b4-8fb2-326c-b0e5-911f82c71c81.roa
File:                     714821b4-8fb2-326c-b0e5-911f82c71c81.roa (raw, json)
Hash identifier:          8gZqSNc0VMksRcI0ZHHNAwD5Rg9YeKyAw15Fcjx0VBA=
Subject key identifier:   49:3A:00:DF:45:36:48:8E:86:56:91:1B:3B:61:E5:73:05:38:9E:A4
Certificate issuer:       /CN=96a33eac-0605-4cfb-a30c-9ec72258a7ee
Certificate serial:       010D0C9F4328584CDB0214F6B14C5F1E2A19CA55
Authority key identifier: 23:51:7E:C9:8D:CE:C0:3C:C2:9F:14:34:EA:0C:08:D9:D3:A9:27:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee/714821b4-8fb2-326c-b0e5-911f82c71c81.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     399872
IP address blocks:        104.250.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee/96a33eac-0605-4cfb-a30c-9ec72258a7ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee/96a33eac-0605-4cfb-a30c-9ec72258a7ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:14:f6:b1:4c:5f:1e:2a:19:ca:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96a33eac-0605-4cfb-a30c-9ec72258a7ee
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=a2628f5e-2cf6-4a0a-b818-6824bf76ca4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0a:9c:f1:84:f0:18:4b:76:ee:20:da:7d:a6:
                    49:87:a7:32:cb:41:90:cc:bc:9b:4f:a0:7a:ac:88:
                    77:d5:07:ab:f0:0b:51:3b:00:c9:5b:fd:39:d7:04:
                    25:fc:33:3e:d6:3d:6b:8a:af:f2:a3:77:82:6d:a1:
                    7f:73:5d:9e:95:39:0a:df:a3:93:42:85:c0:d1:41:
                    aa:51:1c:4d:e5:0b:a4:7c:39:9d:9a:eb:fb:73:fc:
                    25:a4:df:2b:39:54:47:8a:d9:19:6a:80:ee:96:3e:
                    e5:3e:eb:1d:a8:41:d0:ea:cd:43:34:68:2a:21:91:
                    81:6c:ab:37:9b:9f:ba:2d:d0:00:e3:f3:4e:5c:80:
                    ec:8e:15:52:99:db:28:8c:c7:69:91:6f:cc:f4:f2:
                    ea:d3:50:f5:0b:20:d0:1e:6a:a8:a0:b1:83:b9:5f:
                    3d:c5:02:c8:f6:55:b2:ab:61:b5:78:67:87:d2:cc:
                    2c:7e:fa:db:09:e8:9e:cb:10:43:03:1b:78:49:a7:
                    d9:b3:8c:2a:6f:01:66:dc:7c:4d:e4:45:1b:42:d9:
                    8a:fd:a6:29:e0:13:26:50:51:b0:62:61:81:72:9f:
                    d1:29:6f:a7:71:7e:4b:fb:b6:63:b2:a7:ae:0d:3b:
                    7b:e7:9f:08:d2:be:55:ac:d9:61:91:61:dd:06:27:
                    2f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3A:00:DF:45:36:48:8E:86:56:91:1B:3B:61:E5:73:05:38:9E:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee/714821b4-8fb2-326c-b0e5-911f82c71c81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee/96a33eac-0605-4cfb-a30c-9ec72258a7ee.crl

            X509v3 Authority Key Identifier:
                keyid:23:51:7E:C9:8D:CE:C0:3C:C2:9F:14:34:EA:0C:08:D9:D3:A9:27:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a33eac-0605-4cfb-a30c-9ec72258a7ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:09:03:52:d1:7e:00:7b:ab:23:67:c7:4c:6f:f8:f8:ff:
         3d:f5:11:98:f9:db:9f:7f:1e:fb:d0:12:88:35:15:8a:0c:31:
         09:be:5e:5d:ed:91:d1:c0:de:ae:68:0e:8c:66:53:ed:c4:11:
         40:ed:96:2c:23:ed:6b:9e:4a:3f:37:d2:c1:32:be:d3:9c:01:
         a0:4d:f0:cf:5a:79:e7:e3:d8:f8:9a:08:f9:12:17:8e:f6:0b:
         f9:1f:82:58:12:54:fb:32:51:08:7e:b5:30:48:79:fd:00:68:
         5e:95:db:eb:4a:f3:be:3e:3f:0e:e2:9f:9d:01:a6:84:e6:5a:
         b8:17:81:46:43:57:ff:ae:40:da:76:b7:f7:53:5d:a3:ab:20:
         1c:eb:44:6d:92:f3:1e:f0:b6:50:48:b3:80:7b:27:75:95:c1:
         4c:67:7b:b2:60:11:02:58:ea:be:e3:aa:30:de:34:08:b2:8e:
         eb:d5:1a:90:21:82:f4:d9:e0:5b:cb:88:bb:81:8a:25:c8:62:
         ae:3a:03:63:78:39:9f:8c:30:99:e0:b7:de:bf:2f:ef:fe:93:
         23:f2:c3:1b:47:71:42:0c:11:8d:44:cb:97:5e:a0:8f:44:5d:
         5d:2f:1f:1c:c7:8d:c4:c8:13:b8:71:f7:f7:46:36:0e:e5:bf:
         9e:c1:c9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:44 2026 by rpki-client