Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/29480296-b0b5-34db-9646-fe6f1c9a64f3.roa
File:                     29480296-b0b5-34db-9646-fe6f1c9a64f3.roa (raw, json)
Hash identifier:          PpdFuIWGWCN5jUEopPhcD/WiEhbw5mEAcMYCIMK2QSs=
Subject key identifier:   D4:70:FC:14:AF:9E:BD:5F:C3:88:20:4D:03:DC:E9:8F:26:CF:B3:D9
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584CEAF95463762CED3304230F00
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/29480296-b0b5-34db-9646-fe6f1c9a64f3.roa
Signing time:             Thu 19 Feb 2026 19:16:10 +0000
ROA not before:           Thu 19 Feb 2026 19:16:10 +0000
ROA not after:            Wed 20 May 2026 18:16:10 +0000
asID:                     397373
IP address blocks:        108.59.243.0/24 maxlen: 24
                          108.59.246.0/24 maxlen: 24
                          108.59.247.0/24 maxlen: 24
                          108.59.248.0/24 maxlen: 24
                          108.59.249.0/24 maxlen: 24
                          108.59.250.0/24 maxlen: 24
                          108.59.253.0/24 maxlen: 24
                          108.59.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:f9:54:63:76:2c:ed:33:04:23:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Feb 19 19:16:10 2026 GMT
            Not After : May 20 18:16:10 2026 GMT
        Subject: CN=81125adc-215b-4897-a990-4e564fece24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:d5:88:b8:a6:32:c3:c2:94:68:53:e2:59:
                    09:ad:e8:e5:e1:78:9e:6f:24:65:98:64:70:5b:57:
                    28:b2:03:10:bf:35:a9:14:5b:93:b4:37:72:67:e6:
                    40:3a:42:96:d0:59:7a:b4:2e:e0:b3:a6:ff:91:7a:
                    8b:3d:43:89:ba:de:fc:b6:79:c8:0b:99:aa:de:bc:
                    11:ba:9d:6f:a5:f3:6f:ee:b5:1d:72:78:4f:a6:84:
                    7e:45:a2:38:77:b9:d0:dd:c3:e6:03:1b:98:be:16:
                    46:7c:fe:c8:c6:8f:ca:ec:ac:1a:7c:0b:92:e0:5a:
                    92:92:3f:e4:41:df:72:d1:0a:32:5c:05:6d:0c:b6:
                    ce:6a:8a:fb:54:06:ca:69:0f:d2:fb:c4:e2:6e:7f:
                    26:80:e4:9e:a6:31:1b:dc:29:8a:04:43:57:2e:c1:
                    67:01:9f:86:94:b1:46:04:9d:70:96:8d:85:3e:46:
                    cc:23:b3:3f:9c:62:41:03:a6:0d:13:73:1d:4c:5b:
                    fa:79:e1:d0:8b:c7:a7:df:43:fb:9e:82:c6:e7:30:
                    4a:3a:65:16:5e:bf:6e:56:97:c9:42:75:32:1c:9a:
                    bd:75:0d:62:4d:76:c1:e6:a5:bd:63:71:4c:0c:0e:
                    a0:8b:05:71:2d:4e:fd:48:de:88:a0:80:fe:90:5b:
                    f1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:70:FC:14:AF:9E:BD:5F:C3:88:20:4D:03:DC:E9:8F:26:CF:B3:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/29480296-b0b5-34db-9646-fe6f1c9a64f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.243.0/24
                  108.59.246.0-108.59.250.255
                  108.59.253.0-108.59.254.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:5c:f7:63:2f:a5:d1:af:a3:dd:1f:0e:0d:c0:2f:56:75:c0:
         03:41:4a:8c:c4:19:6a:71:c2:a3:dc:83:d0:6e:2a:84:b0:6f:
         e9:1f:6d:39:d5:bf:17:15:f0:82:ee:3f:eb:41:44:b5:fe:20:
         39:7e:d7:a6:2a:d0:fe:16:ec:59:7e:25:74:8b:17:7f:0b:67:
         b9:83:6e:87:8e:34:1c:a2:5a:8d:7a:d6:59:c3:56:29:0a:ea:
         4d:cf:5a:cf:a4:78:a0:aa:fd:56:61:2e:bb:d4:6b:0d:f4:a2:
         9d:83:9f:56:08:48:40:d9:02:57:e1:b8:3e:7d:a1:53:43:f0:
         2c:05:36:19:e2:35:bb:14:5a:e4:d0:aa:49:fa:a7:e2:7f:19:
         e2:37:d6:b7:61:3f:ff:fd:2e:e2:0a:3f:25:f4:44:20:b6:09:
         f0:d9:53:1f:a3:22:3f:bf:b1:d2:96:67:34:b2:51:d0:3a:fb:
         7e:17:55:78:75:13:86:1c:30:73:09:85:e7:8a:1b:0e:1c:17:
         cf:23:eb:b7:80:b1:88:09:62:ee:1f:ef:f8:ae:0b:33:38:cc:
         2f:c5:31:72:47:5c:c2:99:a6:67:f8:5d:21:7a:68:29:66:27:
         65:ad:87:7d:09:2f:9f:e9:b1:f0:34:67:87:be:e6:4b:5d:64:
         de:84:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:23:43 2026 by rpki-client