Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b8b71261-d355-3fe6-91c6-ee884c3df2fd.roa
File:                     b8b71261-d355-3fe6-91c6-ee884c3df2fd.roa (raw, json)
Hash identifier:          znDHZAGVWKp47zoQTPbySHGcKq7WsCWLSmwH1m3G0Ys=
Subject key identifier:   D6:44:73:81:96:37:5A:A6:07:85:43:47:C4:D0:9C:0F:04:8D:90:83
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584DB6A28428E0C0A76186425480
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b8b71261-d355-3fe6-91c6-ee884c3df2fd.roa
Signing time:             Sun 03 May 2026 18:06:09 +0000
ROA not before:           Sun 03 May 2026 18:06:09 +0000
ROA not after:            Sat 01 Aug 2026 18:06:09 +0000
asID:                     6079
IP address blocks:        108.59.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b6:a2:84:28:e0:c0:a7:61:86:42:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: May  3 18:06:09 2026 GMT
            Not After : Aug  1 18:06:09 2026 GMT
        Subject: CN=ddcbe4ea-7f83-4013-b464-776601a847b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:70:8e:04:62:f4:e4:f8:12:7f:64:d3:d1:
                    d1:d0:ea:66:00:ed:c3:34:7b:29:c6:cf:ee:c3:e8:
                    af:7a:25:c8:2d:ca:03:18:46:84:6a:f3:69:36:3e:
                    26:69:88:f5:63:28:d3:1e:8c:09:4a:29:06:43:44:
                    ad:c3:14:99:a1:54:3c:c0:be:74:d1:7d:3c:7c:f6:
                    ca:01:13:45:e0:fb:95:f3:c7:2c:5a:13:c5:be:e1:
                    27:d4:96:52:21:4d:4b:4e:e6:1b:3f:2b:75:0c:2b:
                    26:86:be:59:d5:43:69:ef:52:ca:60:27:74:45:50:
                    83:50:2b:3c:a7:b6:2c:a4:59:df:c0:0b:9d:2e:79:
                    d4:c8:13:67:60:c0:4e:21:d9:d9:6f:c7:c0:45:47:
                    0f:44:01:2d:6d:89:4f:94:38:50:a7:4d:ab:b3:ed:
                    be:c0:9f:a8:51:69:41:64:44:98:d6:7d:c3:fa:6e:
                    f4:d8:e4:b9:cf:3d:72:f8:d3:93:cd:25:65:f4:73:
                    26:5f:96:8c:8d:76:08:01:ef:61:6e:d2:06:43:1e:
                    7d:72:f7:18:8f:3c:f3:dd:48:79:63:23:8a:55:8e:
                    d5:c6:f6:91:59:f1:2d:ca:21:14:8e:bb:5d:b1:62:
                    d5:73:75:d3:a9:51:25:bb:d1:53:0f:49:bc:1c:3d:
                    ca:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:44:73:81:96:37:5A:A6:07:85:43:47:C4:D0:9C:0F:04:8D:90:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b8b71261-d355-3fe6-91c6-ee884c3df2fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:4c:23:c7:56:30:ae:c0:33:ec:c1:3a:4b:ea:7c:eb:65:0b:
         4d:52:49:2a:1b:75:3a:b7:54:fe:3b:db:8d:79:f5:f9:be:e6:
         85:6c:d6:71:98:95:77:aa:fb:97:25:74:5d:62:09:c8:7c:70:
         15:97:be:0d:e6:ed:85:f6:93:c9:07:c9:e6:28:68:dd:50:93:
         52:78:98:62:25:48:a6:64:8d:59:41:2c:cd:a5:89:c8:11:d1:
         87:ac:17:59:fa:ee:92:cb:b9:c9:a6:4a:2d:bf:32:6e:f5:29:
         30:c4:dd:51:57:2d:f8:1d:02:43:5f:8f:d7:35:25:57:b8:90:
         0a:0e:6f:6b:14:55:f7:42:5c:9d:f8:08:e9:1c:75:5c:7d:c5:
         c5:f4:e6:4b:a9:7c:e0:17:8f:dd:46:8e:58:ac:07:1a:f7:26:
         e2:aa:ef:dd:5a:02:a8:d7:c2:7e:e7:2a:b2:f1:55:7d:2f:a8:
         5c:68:a6:ec:64:9e:be:9d:a1:ef:a6:8f:d5:d6:dc:b1:27:1a:
         a5:21:c5:ec:a4:3a:8d:b5:27:8b:dc:45:1c:f0:8f:64:dc:a3:
         ef:b1:2a:1f:d7:93:42:0e:0e:e7:b7:7d:69:52:ee:63:2f:75:
         f6:34:1c:43:ad:1f:28:88:0d:5d:b6:ff:5b:57:44:14:4e:38:
         d5:b0:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:16 2026 by rpki-client