Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa
File:                     0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa (raw, json)
Hash identifier:          2lkPziBqYeTQO2CvWXSnGofD0jqP1mRge8U+F+SB5y0=
Subject key identifier:   E7:C6:59:F7:C4:4F:9B:94:ED:60:B1:DA:5D:3E:56:36:F3:4D:DA:45
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584CCE720F162F40AA2E571F2A80
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     397477
IP address blocks:        108.59.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:72:0f:16:2f:40:aa:2e:57:1f:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=51b7bb5e-7695-452c-a777-91d3c8631a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:7d:e7:2d:2d:e1:02:9b:9e:1a:dc:d9:99:
                    68:4d:0b:6d:76:46:30:f1:70:cf:55:bb:c5:db:72:
                    2d:7d:da:f3:af:57:fb:15:5b:13:97:4e:bd:64:fc:
                    d1:e4:1c:cc:dc:24:0b:89:5c:cf:e4:6e:3d:16:1a:
                    83:8d:88:3b:df:83:f2:c3:4f:08:26:e7:5c:7f:50:
                    92:68:6f:dc:29:b3:04:13:61:c7:bf:0b:10:b5:36:
                    dc:31:59:b9:15:b2:29:11:38:af:59:3f:b8:a0:cb:
                    ee:a7:e2:aa:77:53:2d:bb:b4:3b:a4:ed:14:83:be:
                    d7:93:c8:df:de:00:8c:cf:71:bb:ed:a2:34:02:a6:
                    c4:70:01:c7:18:82:86:f4:b9:fa:3c:e1:ad:e3:ba:
                    23:b3:8c:52:b6:02:39:ae:72:03:c6:07:e6:4b:c1:
                    ef:8f:90:42:fe:4d:90:2b:f1:f3:b2:cf:b1:0a:30:
                    1d:43:01:e7:de:ce:42:9b:2d:3f:a9:9b:f4:57:fe:
                    09:95:17:6e:94:c0:7b:e5:8d:bb:97:88:84:a9:6f:
                    0a:a8:cd:22:b1:83:22:6e:b0:4c:e8:4b:45:3f:8a:
                    b1:a4:05:87:32:37:37:e5:51:19:dd:f3:d9:8c:4d:
                    55:5a:3d:c8:c3:d2:21:82:0a:86:46:bd:2f:fe:c7:
                    57:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C6:59:F7:C4:4F:9B:94:ED:60:B1:DA:5D:3E:56:36:F3:4D:DA:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/0afcc72f-4569-3c7a-a33b-6e304c1f1729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:07:2a:d8:dd:14:5f:0d:16:ab:5f:11:4e:b3:f1:ed:8c:81:
         87:50:ad:b4:09:40:24:38:b3:e5:b8:8f:05:6d:6e:ad:9b:54:
         b6:e8:f4:01:28:23:0c:91:28:d3:9c:6c:68:0c:f0:f9:e7:b3:
         31:4c:2e:e4:44:59:20:73:16:e9:87:2b:10:f1:a3:45:43:22:
         cf:cb:da:98:17:da:48:03:5a:e4:f8:79:c8:28:66:24:be:69:
         c3:b3:07:8e:6f:cc:ac:fb:5b:84:5b:6c:d3:0f:53:e8:36:a5:
         7c:fb:a2:4a:34:89:70:a8:b7:15:17:08:a0:59:eb:a9:31:f5:
         fe:dd:61:83:5e:a8:19:fa:a8:2a:52:3a:ae:42:fc:68:4f:dc:
         a1:56:42:5e:88:d3:bd:72:66:d6:cd:ed:aa:7b:eb:cd:70:5c:
         d6:34:ee:5a:c5:b4:bf:90:e4:13:ea:55:cb:ad:07:17:96:5b:
         ab:cd:cd:c2:ad:30:69:65:01:84:96:58:0d:17:ae:10:64:43:
         49:86:39:ca:02:e4:ec:d1:5b:b3:f9:93:07:d3:8c:6a:8d:11:
         ef:a9:b9:1d:a9:fa:e9:c3:6f:a0:61:12:61:76:f8:8c:73:43:
         74:81:da:84:cb:b6:f1:0a:7b:aa:b6:6d:bf:f9:8a:a7:27:c2:
         d4:00:9c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 07:36:53 2026 by rpki-client