Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b44bf69d-312a-3c86-8916-0cfbb6dfe31b.roa
File:                     b44bf69d-312a-3c86-8916-0cfbb6dfe31b.roa (raw, json)
Hash identifier:          Q8VeqYX9m0v+RZl2UYof0L3ph+65MZ2Q+OS7eBn5qZo=
Subject key identifier:   6D:0C:39:86:57:A4:17:F7:22:10:1D:78:43:BF:B2:E7:CB:C6:C9:A6
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584CEAF860683111AC0D46E44C30
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b44bf69d-312a-3c86-8916-0cfbb6dfe31b.roa
Signing time:             Thu 19 Feb 2026 19:14:14 +0000
ROA not before:           Thu 19 Feb 2026 19:14:14 +0000
ROA not after:            Wed 20 May 2026 18:14:14 +0000
asID:                     11426
IP address blocks:        108.59.243.0/24 maxlen: 24
                          108.59.246.0/24 maxlen: 24
                          108.59.247.0/24 maxlen: 24
                          108.59.248.0/24 maxlen: 24
                          108.59.249.0/24 maxlen: 24
                          108.59.250.0/24 maxlen: 24
                          108.59.253.0/24 maxlen: 24
                          108.59.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:f8:60:68:31:11:ac:0d:46:e4:4c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Feb 19 19:14:14 2026 GMT
            Not After : May 20 18:14:14 2026 GMT
        Subject: CN=d9df020f-6d48-4356-87b7-917518c0de9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7b:8e:5b:3c:1b:0b:8a:b9:33:67:ff:77:65:
                    5e:46:79:af:88:1b:e2:5c:ba:e4:9e:9c:88:fe:b3:
                    e1:44:0b:4e:4c:19:21:e2:ee:9d:05:14:ca:be:15:
                    05:8a:3f:57:0d:61:d5:6d:4b:89:0e:ba:42:56:6d:
                    19:6c:63:93:87:95:b5:a8:a7:9d:bc:ee:fb:07:05:
                    55:76:d6:77:b5:5f:84:9a:47:be:3f:4b:a2:d8:04:
                    2c:a9:0e:dd:d7:3e:c1:e4:77:2b:fe:26:e9:70:56:
                    63:35:fb:87:7c:70:bb:74:fd:b5:c1:89:21:d5:30:
                    e7:97:22:e9:f6:76:50:db:38:79:9c:21:1a:b7:b9:
                    d8:23:51:e8:23:1e:3b:df:85:2d:50:fb:9b:0c:08:
                    68:0f:2e:69:2d:79:62:c1:0f:f3:de:72:4d:42:36:
                    44:c9:72:d4:3a:3c:95:69:44:d8:f4:2d:3f:dc:7e:
                    0f:d8:cf:3f:60:df:eb:2b:81:43:ba:ad:ba:fd:86:
                    2d:65:d2:d6:cb:04:30:50:d5:ca:c2:24:b8:b6:c4:
                    55:ec:29:85:bc:4c:52:b8:ab:1b:7a:da:14:89:9c:
                    63:79:3c:ff:d1:5e:bb:c8:d3:71:35:77:ed:89:b2:
                    81:44:cc:f4:1a:95:1a:8c:25:b3:e3:e7:63:9b:2f:
                    60:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0C:39:86:57:A4:17:F7:22:10:1D:78:43:BF:B2:E7:CB:C6:C9:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b44bf69d-312a-3c86-8916-0cfbb6dfe31b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.243.0/24
                  108.59.246.0-108.59.250.255
                  108.59.253.0-108.59.254.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:60:61:fe:a3:dc:e5:8b:2d:e6:ba:a7:3f:59:ba:29:d5:e1:
         d7:37:78:35:f9:e2:aa:ea:57:16:ea:d4:7f:2f:c9:d4:75:15:
         e7:94:d2:12:42:30:71:6d:ea:3e:e4:3a:f4:2a:c6:cb:20:63:
         40:e6:1e:d8:44:a5:57:d1:03:fd:97:27:59:22:3a:55:38:67:
         55:9a:6b:0b:6b:89:d7:6c:57:0f:28:33:2c:b1:af:70:3c:2c:
         c7:a4:0f:0d:cb:bc:20:a5:1b:8b:ee:b2:1d:8f:13:24:42:f8:
         16:83:c0:4b:1b:a4:36:9a:53:42:aa:0a:cc:37:9b:5e:ef:7a:
         be:b1:de:a4:13:2d:19:5b:74:cd:37:0b:e3:61:1f:ad:c4:b3:
         ce:e1:a7:95:f1:3d:a5:9a:6c:90:4f:13:d6:02:2a:2a:2e:2d:
         c9:40:2c:99:ce:51:92:80:81:e3:70:33:e7:3e:dd:24:35:f9:
         e5:d7:b6:b0:4a:2d:8a:ac:c6:54:43:d5:6c:9f:b9:71:94:f8:
         5c:26:fc:d7:5b:50:fb:d7:6e:75:ab:b9:33:c9:12:85:d8:85:
         28:08:a9:be:16:7a:43:df:7b:f2:93:49:08:72:97:5a:83:90:
         f2:e3:76:85:55:8f:19:f3:8a:11:bf:8c:00:fe:b5:da:06:0e:
         e4:02:2b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:42 2026 by rpki-client