Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/5cec75f1-5303-383d-a5e0-219e7f028e15.roa
File:                     5cec75f1-5303-383d-a5e0-219e7f028e15.roa (raw, json)
Hash identifier:          BFStLzGBPaSR13QydKz/1X5L2VbD64UiKHhyJkzkpWo=
Subject key identifier:   08:85:F1:24:1D:11:E0:DB:0C:CF:37:54:5B:7F:4F:11:6E:3C:E6:53
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584CEAC4B25160A6685E93516680
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/5cec75f1-5303-383d-a5e0-219e7f028e15.roa
Signing time:             Thu 19 Feb 2026 17:30:07 +0000
ROA not before:           Thu 19 Feb 2026 17:30:07 +0000
ROA not after:            Wed 20 May 2026 16:30:07 +0000
asID:                     4922
IP address blocks:        104.251.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:c4:b2:51:60:a6:68:5e:93:51:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Feb 19 17:30:07 2026 GMT
            Not After : May 20 16:30:07 2026 GMT
        Subject: CN=86af73f3-4c41-4018-b10e-60b35badd6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d3:cf:b3:cd:b3:31:f1:89:68:b8:cb:22:85:
                    77:e9:d2:48:85:bc:c6:e5:26:3c:89:34:ad:e1:4a:
                    0a:15:7d:79:5a:45:21:2b:58:3a:1d:69:c3:76:90:
                    6a:4f:0b:72:8c:79:ee:dc:4d:16:ba:04:64:03:f8:
                    f7:b6:10:b0:57:40:f8:e3:f4:ec:da:01:22:ab:08:
                    bc:1d:25:88:9a:bb:f1:73:b5:76:c4:06:2e:ca:fd:
                    6b:78:92:75:cd:9b:f6:d5:67:ee:30:0c:43:28:eb:
                    b5:40:a2:e0:b4:b9:10:2c:37:26:e5:9b:89:78:7f:
                    a1:5f:2f:65:8e:1d:c5:b5:7f:ba:6b:ef:17:24:87:
                    b6:d7:fb:0b:13:5c:d1:7d:17:90:7e:37:44:d8:37:
                    a1:bb:3c:bf:2d:f8:6f:d9:1c:a6:e6:e9:78:14:27:
                    92:42:83:d9:df:dc:fa:2d:8f:86:72:94:03:70:94:
                    2a:56:f8:5c:8f:3d:2c:91:62:70:15:46:8d:27:a2:
                    e1:52:1d:e0:fd:67:8c:3a:74:a0:c0:37:97:35:a0:
                    3e:8c:86:4c:2f:36:1d:a3:dd:fd:88:49:f9:b4:0a:
                    ab:bc:3e:50:11:d3:27:02:9f:74:b0:48:09:71:11:
                    8f:f9:21:dd:bf:a9:e4:51:6c:ad:73:59:3f:45:54:
                    d9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:85:F1:24:1D:11:E0:DB:0C:CF:37:54:5B:7F:4F:11:6E:3C:E6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/5cec75f1-5303-383d-a5e0-219e7f028e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.251.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:0d:ef:a2:54:53:d6:ea:a8:40:73:37:61:48:ac:0b:97:e1:
         1b:cf:a2:00:23:aa:ed:a1:93:08:77:d4:e4:37:45:0e:a1:f0:
         0c:e6:d1:00:47:f2:09:06:65:4e:dd:93:3c:f1:eb:27:58:93:
         e7:a7:fd:6e:cc:fa:4f:65:11:fd:2f:da:1a:da:56:f0:50:e3:
         35:b0:6a:9a:d8:e8:5c:8b:98:02:6d:a0:9c:94:ea:37:d5:33:
         14:43:a5:5d:5b:8b:b6:d3:5c:8d:8a:2a:1e:ba:f7:c1:e4:a3:
         2c:6c:13:03:d0:a1:ac:39:59:b0:9e:a0:49:41:5b:4b:a4:89:
         34:0c:b4:33:58:85:a0:54:ba:ba:b3:1c:fe:59:9c:c4:b7:19:
         df:93:65:9d:b0:7a:80:46:fd:2a:d1:9d:95:90:9f:97:dd:f2:
         a2:e4:13:15:0b:8c:e0:90:ef:b8:3d:09:28:ba:b5:db:30:1c:
         6d:47:be:aa:64:a9:28:13:9e:19:5a:9c:ee:d4:c5:04:ca:61:
         7b:66:ef:14:42:7d:8c:f3:8c:f2:27:b3:e2:c6:19:07:ca:b4:
         66:c6:58:0e:5e:b8:49:e6:f2:0a:98:bc:2b:16:7e:1b:48:99:
         d0:89:b3:b7:03:16:5c:62:82:fa:db:09:c2:f0:48:14:23:4d:
         dc:c1:6b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 02:20:39 2026 by rpki-client