Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f71f08-1cb3-34d0-9506-7b7499438aa5.roa
File:                     14f71f08-1cb3-34d0-9506-7b7499438aa5.roa (raw, json)
Hash identifier:          rrUx6BVZ+WLeGnItDvMDBjeSL97X7fp/ytJ4APRtmBU=
Subject key identifier:   03:C5:0C:81:2E:8B:96:15:F5:FD:67:FE:F6:94:5D:E1:1C:B5:FE:1D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67932477EAB491C942C280
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f71f08-1cb3-34d0-9506-7b7499438aa5.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     701
IP address blocks:        71.250.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:93:24:77:ea:b4:91:c9:42:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=cd465ebf-5907-42c8-8428-d6ba3403c610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:0b:c1:6d:4d:4b:0c:22:3b:6c:f6:58:84:
                    a7:03:fd:be:18:4b:d9:d7:40:8d:55:e4:4f:70:50:
                    1b:9f:fe:15:ac:aa:ae:21:b0:5e:ef:0f:eb:28:06:
                    f7:cf:72:e0:8b:af:ab:d3:9e:04:f2:d5:46:10:30:
                    f9:f6:0a:8b:c3:64:de:2f:ca:47:49:3b:0e:c4:bf:
                    6c:c7:11:20:32:3d:34:45:4e:50:f7:10:c7:20:ee:
                    ff:ff:49:ad:dc:40:99:b4:a4:04:a5:a0:2b:b1:15:
                    38:30:e9:c5:4b:db:6c:3e:46:ec:18:63:82:7e:0a:
                    4d:0b:e5:9a:82:6f:21:ca:e6:68:94:be:37:f0:e5:
                    83:15:ce:10:a7:42:d1:5f:89:3d:76:80:ed:80:ee:
                    2e:5f:dc:7a:57:55:80:21:8d:f2:8c:ff:e9:a5:9e:
                    b1:f7:ac:9c:c9:62:92:15:f0:47:35:34:0d:c1:64:
                    af:52:92:c1:da:c8:e7:63:f3:45:2b:a5:84:4f:4b:
                    f5:62:db:f7:4e:5e:f0:02:01:fb:d2:71:ea:96:d5:
                    4d:d2:d0:86:92:c7:b3:c3:f5:9b:35:6f:1d:c6:b9:
                    41:bf:ca:48:2c:09:0e:f3:70:e2:50:70:87:86:66:
                    7f:a1:ca:c5:40:20:a0:f2:7f:66:cc:89:65:39:da:
                    86:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C5:0C:81:2E:8B:96:15:F5:FD:67:FE:F6:94:5D:E1:1C:B5:FE:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/14f71f08-1cb3-34d0-9506-7b7499438aa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.250.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:98:dd:c5:1d:71:25:64:64:57:04:e6:cd:95:c2:d5:46:78:
         1d:c3:2d:41:2d:4c:e3:c2:83:38:68:e9:ad:e4:74:94:be:cf:
         7a:11:3c:2f:f2:fe:d9:57:26:25:08:bb:93:ec:cb:e1:dc:6f:
         fa:ff:a7:42:d3:67:01:6c:82:49:53:c9:06:c2:43:dd:ac:0e:
         8a:98:43:bc:c7:3c:07:37:df:cc:e0:b2:87:91:f2:4e:ee:1c:
         02:2e:16:49:ff:69:06:98:3e:36:b2:8b:a8:e6:43:2b:1a:99:
         32:af:97:60:f8:a1:d8:eb:1b:eb:b4:b8:2c:98:d9:84:56:7d:
         5f:73:19:06:92:6b:e3:be:e3:b8:44:fd:be:a5:1b:29:cc:6b:
         fc:c3:ca:7a:4e:3b:0f:f7:84:53:dd:9c:31:5b:ac:44:21:3a:
         cb:c1:f0:a9:31:75:13:78:ea:18:ed:10:59:57:a4:60:e7:dc:
         92:78:db:ef:47:da:73:9d:be:6e:83:8e:2b:ec:4c:cb:fb:bd:
         13:2f:9c:21:1b:5b:4b:67:73:5b:c3:45:99:42:02:f5:68:71:
         d7:e3:97:24:e2:a1:04:45:88:de:00:ff:e0:24:c1:ba:53:8a:
         4f:e8:83:0c:76:62:1e:21:d0:e3:3c:8f:2c:e8:5e:5a:a7:50:
         77:b8:0e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 12:21:51 2026 by rpki-client