Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/24add7ba-9bac-3af0-b7df-7d91081899d4.roa
File:                     24add7ba-9bac-3af0-b7df-7d91081899d4.roa (raw, json)
Hash identifier:          0ygneiZNhR5MnVBLJeuenfHCgoRHplCNDighAv/yZiA=
Subject key identifier:   51:82:46:1F:F0:32:6A:9F:F2:0E:75:EC:4D:C2:B5:40:7A:93:CE:68
Certificate issuer:       /CN=146a096d-134a-4c52-9243-da3981810107
Certificate serial:       010D0C9F4328584CD99CF1D1DC35483EA0A551C0
Authority key identifier: 8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/24add7ba-9bac-3af0-b7df-7d91081899d4.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     26658
IP address blocks:        104.243.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:f1:d1:dc:35:48:3e:a0:a5:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146a096d-134a-4c52-9243-da3981810107
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=b8b5ad69-1b2b-4f13-a478-3faca770411a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:50:7e:14:80:d7:16:42:cb:90:ea:d9:25:5f:
                    60:62:18:25:b5:d7:e2:be:09:86:cf:e4:74:0e:8e:
                    54:21:cf:7f:d8:8c:cf:69:53:84:4e:74:a3:08:81:
                    88:dd:53:86:da:12:2a:25:f8:74:b7:d1:39:42:46:
                    90:4c:e4:26:9c:f9:7b:ef:62:84:e8:3f:ab:a6:a0:
                    23:0d:5a:d3:bb:e1:0d:3d:3f:04:e6:00:16:1a:a3:
                    29:8f:94:a0:a7:71:ab:6b:77:e1:e7:d7:30:cd:f9:
                    12:f9:6b:a8:6f:74:05:7f:81:f7:73:4b:fa:6c:05:
                    5c:b9:94:37:69:a9:73:17:87:58:f3:9b:68:9e:20:
                    28:c3:06:9a:b2:55:28:c1:8f:28:95:86:48:d2:4d:
                    a0:8e:b0:1c:f5:58:65:b7:94:6c:6a:ad:62:37:1d:
                    1d:70:ae:21:ce:1e:95:ce:6a:64:5d:c7:e6:82:e1:
                    e6:a7:54:1c:0b:aa:99:8b:c3:33:83:64:8d:d3:84:
                    f4:60:d4:8c:79:23:74:7a:ae:71:ce:d5:0b:6e:5f:
                    6d:13:07:17:4e:5f:01:ca:34:43:6e:61:d1:ad:03:
                    e1:4d:6c:8f:59:45:1d:09:81:24:8b:29:cb:6f:25:
                    5c:ad:9c:81:e4:02:5a:a6:1d:82:f0:0f:c8:4c:2c:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:82:46:1F:F0:32:6A:9F:F2:0E:75:EC:4D:C2:B5:40:7A:93:CE:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/24add7ba-9bac-3af0-b7df-7d91081899d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107/146a096d-134a-4c52-9243-da3981810107.crl

            X509v3 Authority Key Identifier:
                keyid:8F:11:51:BB:3C:25:40:6A:C7:4F:EB:65:C9:D8:3C:34:D2:A3:A3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/146a096d-134a-4c52-9243-da3981810107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:e6:33:66:b3:87:16:4d:21:c2:9a:ac:31:b6:59:ea:05:f9:
         b7:f3:cc:fd:f8:ad:1c:39:b1:ae:47:29:58:73:f6:7f:96:2b:
         86:1e:d3:f2:1f:b1:52:34:03:89:73:f4:79:c7:e3:44:0a:4d:
         fc:cf:ae:85:f5:37:a3:43:b9:09:f5:10:f5:92:1b:40:2b:7c:
         28:91:72:21:98:19:42:1a:85:53:70:aa:71:99:e2:e4:6f:e4:
         ca:a1:d6:e6:15:7d:e6:f3:43:e6:10:1a:a8:d6:51:7f:88:a8:
         cf:02:63:18:43:fc:20:69:66:3b:f2:25:d9:92:fd:ed:04:b4:
         d7:b9:84:70:de:1c:50:2b:09:5b:99:c7:67:0a:ce:91:b1:bb:
         c4:13:19:60:10:ea:30:a5:74:39:15:85:dc:42:db:1b:4e:a2:
         dd:fd:ff:2a:f1:62:2b:c8:af:bc:f8:5b:ec:10:c0:fb:8f:89:
         d2:7d:00:f7:df:b4:3a:b7:2c:87:07:7c:a9:08:15:eb:ef:ab:
         15:fc:0d:27:33:db:b7:da:69:0a:b1:a9:4f:3b:8f:e6:ed:e9:
         ef:ef:51:d6:0b:a0:86:68:b9:26:fb:28:cf:50:3b:e8:8f:e8:
         66:b5:b9:4e:3f:98:3a:b8:9b:6b:59:83:21:65:4c:41:e1:52:
         21:54:9a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:25:33 2026 by rpki-client