Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/29480296-b0b5-34db-9646-fe6f1c9a64f3.roa
File:                     29480296-b0b5-34db-9646-fe6f1c9a64f3.roa (raw, json)
Hash identifier:          cM1SHz75R8ZwUZk7yZIqArFuWmLdcHkhA42XSEXTKLA=
Subject key identifier:   36:B1:C1:6F:80:B4:FB:9B:C6:7C:31:12:1A:4A:AF:6F:4A:BD:CA:B3
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584F4989D74DCA3D8C1C00D4E3E0
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/29480296-b0b5-34db-9646-fe6f1c9a64f3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397373
IP address blocks:        108.59.243.0/24 maxlen: 24
                          108.59.246.0/24 maxlen: 24
                          108.59.247.0/24 maxlen: 24
                          108.59.248.0/24 maxlen: 24
                          108.59.249.0/24 maxlen: 24
                          108.59.250.0/24 maxlen: 24
                          108.59.253.0/24 maxlen: 24
                          108.59.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:d7:4d:ca:3d:8c:1c:00:d4:e3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1c714e74-48cc-4648-bdd8-83b906719d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:53:36:3c:b2:d3:b0:3e:95:91:ee:e1:bc:7c:
                    7d:a4:10:ae:f6:30:6c:3d:59:04:f7:d7:c6:91:e3:
                    9e:56:44:a0:3a:00:ea:fe:c6:73:6e:29:94:b3:2f:
                    af:51:77:e8:02:d7:bc:e7:6a:1c:d9:d9:7e:21:84:
                    36:f9:ef:7e:4d:9d:52:33:13:03:24:50:5c:5c:1f:
                    8f:92:06:39:f9:a5:71:65:f5:97:08:b6:33:4d:81:
                    12:f7:3a:3a:7e:95:94:96:d3:83:f6:dc:62:cd:18:
                    38:57:ec:82:6b:df:83:e6:1d:ae:3e:d4:62:a3:04:
                    37:94:2b:61:81:23:a5:d3:e1:ab:88:73:63:c8:2e:
                    e6:35:c6:cc:0e:89:cf:cc:c4:9b:2b:e1:74:f3:bb:
                    b8:54:0f:a4:70:8a:b4:4f:f0:58:7b:20:02:0a:77:
                    43:a3:4d:11:64:78:60:18:24:44:b0:78:93:b6:24:
                    78:87:21:b5:cb:95:dc:cf:d1:7e:30:47:98:be:0a:
                    74:06:be:5c:82:6d:d2:4d:4b:0a:c6:e3:bf:ac:98:
                    9c:5b:a5:2c:6f:76:96:8c:1b:f9:df:76:6a:3a:95:
                    ce:53:c9:50:a8:68:bd:c1:c3:f2:99:46:0e:00:a7:
                    e4:de:60:18:b8:fc:b4:56:6a:69:6e:38:8c:2d:c3:
                    ad:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B1:C1:6F:80:B4:FB:9B:C6:7C:31:12:1A:4A:AF:6F:4A:BD:CA:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/29480296-b0b5-34db-9646-fe6f1c9a64f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.243.0/24
                  108.59.246.0-108.59.250.255
                  108.59.253.0-108.59.254.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6e:9a:e0:d0:2a:bf:48:9d:a2:cb:da:64:b3:62:29:c5:6d:
         82:5e:7f:c9:49:9d:d0:43:64:a8:ef:47:10:fd:eb:98:a4:5a:
         72:47:15:27:b2:3e:92:d5:33:b1:ce:70:25:54:ef:81:26:53:
         d4:b9:1e:86:dc:a2:06:7c:26:1d:47:e8:5a:1b:25:16:57:a0:
         d3:a5:ea:e0:d9:61:6b:8c:4b:9d:cb:1a:bb:2c:77:d2:af:68:
         7d:92:0b:4f:8e:13:63:73:0f:3c:f7:c6:fc:c8:ea:17:e8:ed:
         63:6f:c9:e8:65:c7:a7:93:dd:e7:a9:07:5a:6f:74:1f:47:fe:
         c2:37:de:48:62:5e:6d:5d:bc:81:45:d4:c4:a9:49:de:a9:8c:
         e4:d4:8f:af:cf:03:a3:f6:15:56:69:5e:d9:ae:93:db:7b:2b:
         ea:c3:72:80:fb:ba:a2:43:13:92:f9:46:b3:4c:bc:db:7a:c6:
         ae:b6:42:f8:b0:0e:ec:6c:e4:17:63:f5:3a:26:6e:bd:f3:18:
         b3:8e:ab:b3:c2:65:00:cd:13:9c:21:a0:48:d6:92:f1:a5:48:
         7b:21:14:f9:5f:ec:72:87:c2:f1:4c:1a:09:69:55:6f:58:03:
         f2:b3:bd:7b:eb:21:e6:a8:bb:40:79:f9:05:77:22:6e:e7:53:
         be:7b:ec:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 06:12:12 2026 by rpki-client