Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bbc6343f-a0eb-3c46-8dd5-9023d58323f0.roa
File:                     bbc6343f-a0eb-3c46-8dd5-9023d58323f0.roa (raw, json)
Hash identifier:          rTvyM7OGMFNoLJ0Qenk9lPPS0qv8AWWylFIYQgElNSA=
Subject key identifier:   2C:B2:35:87:8F:AC:03:31:B1:69:28:B7:0C:8C:8A:60:1B:AA:72:C7
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584EA787F07369CC0C03D4E8C580
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bbc6343f-a0eb-3c46-8dd5-9023d58323f0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     2914
IP address blocks:        108.59.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:f0:73:69:cc:0c:03:d4:e8:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=63eed9fd-d56d-4450-b2bd-22746b0bf5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dd:ec:5e:ea:a8:61:e7:b4:19:5b:2f:c8:43:
                    cf:57:c2:78:77:cc:2d:ab:14:2f:68:89:d7:21:34:
                    d9:5f:f6:26:6c:e9:d8:2c:89:ff:b5:e3:cf:25:8a:
                    59:d2:f4:25:a5:72:7f:c9:29:31:be:13:f7:4b:8e:
                    8d:38:d0:29:d3:99:73:d8:b0:e7:14:b0:4a:a1:a7:
                    92:73:b6:26:a0:57:21:b6:19:5c:66:6e:9c:a9:b5:
                    fe:58:f5:c9:b3:f8:8e:f1:06:a8:7c:52:2d:92:4a:
                    ab:2f:cc:b6:c3:a0:f0:9c:69:56:db:d6:7c:04:04:
                    5d:ef:fe:55:0f:45:b7:7d:a8:e1:a0:4d:32:13:d1:
                    26:d0:5c:92:8d:e2:24:52:d3:08:b9:b8:fa:85:66:
                    fe:4b:79:2a:2b:73:3d:64:5c:05:ca:57:a7:b4:09:
                    86:b3:4e:10:8b:4b:63:e6:7c:b2:02:79:09:ba:b2:
                    46:ad:e0:98:d6:1c:e7:4d:f8:98:e3:25:45:40:67:
                    79:42:e3:78:74:c7:c8:c0:46:76:7e:07:0b:f2:d2:
                    18:1c:7b:de:36:9a:cd:2c:80:1f:14:65:e6:db:f1:
                    b2:3e:11:83:94:c1:e4:5a:cc:77:c7:24:fa:63:50:
                    4a:26:37:43:72:3f:d8:ec:56:9d:f1:6b:90:53:0d:
                    e7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B2:35:87:8F:AC:03:31:B1:69:28:B7:0C:8C:8A:60:1B:AA:72:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bbc6343f-a0eb-3c46-8dd5-9023d58323f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9a:a5:d4:a4:14:4b:c5:a1:a4:4d:c1:d5:ce:ae:66:47:b1:
         cf:ea:aa:02:ca:b7:f0:3f:ad:c4:d1:9f:6d:08:13:27:64:bc:
         15:a5:50:f9:40:34:46:d6:e8:8c:5b:35:d5:b5:89:e3:9d:07:
         ba:ee:29:4b:76:df:f4:cb:17:3c:91:66:a7:58:8d:02:9e:2f:
         ff:fe:d6:5f:d0:0f:c2:4d:37:bc:81:57:eb:da:d0:95:1e:60:
         40:f5:35:63:ae:da:28:a4:5c:b0:82:ca:fc:6f:94:c0:ce:44:
         05:06:06:9c:bd:45:9f:ee:10:07:d1:c1:52:78:39:66:28:34:
         28:cf:a2:e9:e7:5b:24:69:3f:ba:9a:5e:4c:73:67:d4:0f:0a:
         7e:57:ad:81:f0:55:10:e2:13:f2:f5:f0:1f:b5:c8:69:8b:1c:
         24:a0:60:4a:66:2d:af:a5:56:35:90:dd:64:d9:a2:cf:08:a3:
         90:03:32:80:84:bf:90:7b:38:8d:0d:50:de:f9:36:9d:e2:f8:
         e7:b3:2b:60:c3:e8:99:94:a5:e0:bc:7e:f4:4b:91:8b:dd:9b:
         ce:ac:bd:ef:ac:8a:bb:5d:b0:55:5b:13:98:4b:44:39:d3:5b:
         67:38:7f:d3:aa:c8:9d:26:37:b6:b7:af:2f:2c:e8:8b:00:01:
         23:60:d9:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh/BzacwMA9ToxYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA4NTZjNjUtYjVmNC00NjY2LTkxYzQtNDA3ZDg5MGQ0
NDk0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NjNlZWQ5ZmQtZDU2ZC00NDUwLWIyYmQtMjI3NDZiMGJmNWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN3sXuqoYee0GVsvyEPPV8J4d8wtqxQvaInX
ITTZX/YmbOnYLIn/tePPJYpZ0vQlpXJ/ySkxvhP3S46NONAp05lz2LDnFLBKoaeS
c7YmoFchthlcZm6cqbX+WPXJs/iO8QaofFItkkqrL8y2w6DwnGlW29Z8BARd7/5V
D0W3fajhoE0yE9Em0FySjeIkUtMIubj6hWb+S3kqK3M9ZFwFylentAmGs04Qi0tj
5nyyAnkJurJGreCY1hznTfiY4yVFQGd5QuN4dMfIwEZ2fgcL8tIYHHveNprNLIAf
FGXm2/GyPhGDlMHkWsx3xyT6Y1BKJjdDcj/Y7Fad8WuQUw3nkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCyyNYePrAMxsWkotwyMimAbqnLHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1
NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdkODkwZDQ0OTQvYmJjNjM0M2YtYTBlYi0z
YzQ2LThkZDUtOTAyM2Q1ODMyM2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA4NTZjNjUtYjVmNC00NjY2LTkx
YzQtNDA3ZDg5MGQ0NDk0LzAwODU2YzY1LWI1ZjQtNDY2Ni05MWM0LTQwN2Q4OTBk
NDQ5NC5jcmwwHwYDVR0jBBgwFoAUpe9ENo4gPLQM77IPE52juNreiWkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDg1NmM2NS1iNWY0LTQ2NjYtOTFjNC00MDdk
ODkwZDQ0OTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbDv1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACeapdSkFEvFoaRNwdXOrmZHsc/qqgLKt/A/rcTRn20IEydkvBWlUPlA
NEbW6IxbNdW1ieOdB7ruKUt23/TLFzyRZqdYjQKeL//+1l/QD8JNN7yBV+va0JUe
YED1NWOu2iikXLCCyvxvlMDORAUGBpy9RZ/uEAfRwVJ4OWYoNCjPounnWyRpP7qa
XkxzZ9QPCn5XrYHwVRDiE/L18B+1yGmLHCSgYEpmLa+lVjWQ3WTZos8Io5ADMoCE
v5B7OI0NUN75Np3i+OezK2DD6JmUpeC8fvRLkYvdm86sve+sirtdsFVbE5hLRDnT
W2c4f9OqyJ0mN7a3ry8s6IsAASNg2Zg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:31:30 2026 by rpki-client