Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/68c7cef3-ad21-3620-9cf2-1ece7789aa58.roa
File:                     68c7cef3-ad21-3620-9cf2-1ece7789aa58.roa (raw, json)
Hash identifier:          l7mhiclMSDzMjgPFw3I6buZXkcPoko/e8ZXUhMlAIqs=
Subject key identifier:   9A:EE:7A:8F:9C:AA:09:7D:8B:B8:E2:2E:1C:51:9B:65:CC:FA:F0:B7
Certificate issuer:       /CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
Certificate serial:       010D0C9F4328584C7D7C6E2015A8FB1B3B5DFF80
Authority key identifier: EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/68c7cef3-ad21-3620-9cf2-1ece7789aa58.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     399883
IP address blocks:        104.247.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:6e:20:15:a8:fb:1b:3b:5d:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e08e0de-ab5e-4883-8f09-7d9570f20186
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=8c444470-61a1-4c08-afa3-baa8bdbc16da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:40:0b:d2:10:c6:e9:90:a9:47:ee:1b:07:
                    a9:db:28:43:38:eb:d3:4f:eb:5b:e5:5b:51:64:77:
                    ac:f9:87:10:20:2c:66:57:6e:f8:98:c5:b7:55:d3:
                    0e:b8:a0:4a:62:fb:e5:58:4a:a7:c7:ab:1f:c5:66:
                    89:35:26:b0:00:05:d6:8e:30:ad:9c:d2:b2:a8:ec:
                    d2:1b:1f:e6:af:61:12:17:ae:e2:ac:bc:81:59:1e:
                    24:02:c5:d1:53:f1:36:59:4f:a5:44:60:0a:0b:51:
                    00:0f:9d:4d:c8:ca:77:e9:b3:cd:76:4a:e2:a7:ea:
                    98:f0:a3:76:b6:9e:bc:13:e1:08:84:25:6a:72:21:
                    64:bd:e3:81:b1:90:29:eb:69:28:bf:e5:75:8e:1a:
                    c4:a6:7e:d7:b4:78:3a:0e:ab:d7:06:fa:4a:03:e4:
                    35:b2:24:cf:cd:f3:9d:2f:a6:21:89:74:94:fc:65:
                    24:7b:2d:e2:e7:7a:7e:df:22:ea:b4:e3:2c:e5:c0:
                    79:9d:5b:62:26:50:40:1f:09:dc:b7:d2:8c:d0:6b:
                    e5:59:54:00:c4:ef:21:04:25:82:77:fa:8b:20:8a:
                    8d:e8:9b:a3:d9:a6:09:17:ad:58:54:5d:6a:2b:a7:
                    43:5f:81:22:11:59:be:02:7a:11:9d:db:db:ea:9d:
                    76:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EE:7A:8F:9C:AA:09:7D:8B:B8:E2:2E:1C:51:9B:65:CC:FA:F0:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/68c7cef3-ad21-3620-9cf2-1ece7789aa58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186/6e08e0de-ab5e-4883-8f09-7d9570f20186.crl

            X509v3 Authority Key Identifier:
                keyid:EB:68:A0:A5:A5:32:61:F3:8C:B3:90:3E:0F:47:EA:49:2F:B3:86:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6e08e0de-ab5e-4883-8f09-7d9570f20186.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:bd:08:7f:39:02:60:9e:ea:83:e3:63:19:b0:5b:f9:24:cb:
         f6:a8:7f:07:49:de:94:37:b1:fc:da:ff:72:23:40:4c:82:9c:
         d4:3b:b2:f2:02:0c:b4:c0:2d:71:e6:a3:67:69:43:76:76:0f:
         ec:e1:39:50:28:36:89:f5:57:e2:c2:84:58:9a:7f:b9:9a:17:
         f2:fb:cd:a5:48:91:f8:a2:b2:82:6b:31:63:ed:3a:21:da:77:
         2e:c1:53:66:65:31:12:7d:d3:6f:de:63:1f:c3:4c:e5:ca:ed:
         5d:1d:39:aa:99:d6:1a:0e:cf:e6:ce:0e:ff:cb:a9:01:24:64:
         d3:4d:56:03:ae:89:38:5b:8f:1b:87:64:c7:25:c5:a6:77:3f:
         f1:36:0f:6b:19:1f:eb:e4:a4:94:92:12:5b:cc:c6:07:42:bc:
         63:49:47:64:75:2e:e4:75:1c:be:79:b8:c8:13:e5:eb:2f:f5:
         10:56:38:5f:0f:02:04:ae:e5:96:55:81:78:d1:8e:5b:0b:f3:
         79:e0:05:93:b0:83:29:b0:3a:d2:91:77:b6:41:9f:51:8f:46:
         c8:48:fb:9c:d9:52:64:cc:ed:68:a6:4f:3b:6e:f4:00:82:f6:
         7a:41:1e:f0:02:d8:12:b7:4b:ba:82:92:f8:03:d7:a8:bc:40:
         da:ce:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 01:15:48 2026 by rpki-client