Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28914dd1-0593-3a05-8bae-dc7ef054b587.roa
File:                     28914dd1-0593-3a05-8bae-dc7ef054b587.roa (raw, json)
Hash identifier:          L/XTVPBLy6QNVQRErgPoOZn9SiyeMRV5Cn/iEF23svY=
Subject key identifier:   CC:F9:6B:8A:69:B0:61:AF:7F:3C:AB:42:F5:19:3B:2E:02:F3:AD:9C
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584D83CAB15B5DAFD03AC07B0860
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28914dd1-0593-3a05-8bae-dc7ef054b587.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     26744
IP address blocks:        68.170.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:b1:5b:5d:af:d0:3a:c0:7b:08:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=118e3c17-ca83-4e89-816c-41e44d6e0583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:a8:94:ff:48:b0:62:a4:7f:49:4c:66:02:
                    05:92:63:e8:47:a7:e1:dc:87:8e:a8:32:14:39:f4:
                    4f:81:27:45:cb:a2:d6:94:15:12:43:a4:ae:66:e4:
                    b8:af:ff:a0:25:a0:90:a5:20:8b:b7:c9:f5:17:45:
                    47:50:40:d9:34:13:98:c4:72:19:0a:40:b8:fa:53:
                    4e:13:8c:0d:b1:50:2b:93:17:57:d7:03:8b:9d:fb:
                    1b:2a:bc:df:8d:d2:b1:cb:38:dd:9a:cb:56:1a:60:
                    df:e5:5a:3c:ab:20:a7:e0:b5:c3:23:91:6a:4d:8f:
                    e1:94:fd:91:5f:ad:c7:71:4d:dd:bc:e6:5f:87:4c:
                    8a:aa:04:f9:29:f6:72:7a:f2:5f:67:a0:f1:30:fa:
                    5f:28:aa:2b:c3:cf:d8:1b:3a:78:63:47:25:9f:c9:
                    f2:d7:e7:24:2a:fc:29:61:a9:04:2a:8a:08:b2:28:
                    41:ac:5e:75:68:ea:d7:3b:6d:ef:1a:b4:30:35:e9:
                    37:62:79:cb:6c:db:f4:0d:14:60:f3:b3:53:d6:89:
                    d9:c0:a2:49:15:1c:d1:f7:6b:8d:db:91:67:8b:f3:
                    c9:80:8c:24:fc:d5:0c:25:72:b4:45:69:d6:38:3e:
                    57:25:3f:42:1c:c3:87:50:f4:60:81:f4:da:2f:d4:
                    49:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F9:6B:8A:69:B0:61:AF:7F:3C:AB:42:F5:19:3B:2E:02:F3:AD:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/28914dd1-0593-3a05-8bae-dc7ef054b587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:5f:cb:cf:22:6b:93:fa:f0:aa:38:1c:e3:d9:52:38:fd:e8:
         51:b2:7e:a5:f7:00:54:fd:94:0d:64:91:51:b0:9b:8f:c8:c3:
         6d:c9:60:fb:d1:cc:02:70:45:f2:ae:8e:ca:00:db:ed:1e:dd:
         05:9a:3f:b9:f4:3b:e7:c3:c6:65:d0:91:60:1d:4c:94:8b:51:
         22:61:11:b2:b3:d4:28:ba:f2:09:ad:80:d4:56:38:04:ef:b3:
         cf:72:fc:88:bb:ce:59:49:f3:42:32:fb:73:c1:57:a5:ae:60:
         f8:bc:31:5d:8c:00:6f:4e:43:db:66:4e:3b:ad:9c:cf:e2:d9:
         cd:05:0e:87:f7:1a:d4:37:d9:ff:2d:22:73:51:a1:ab:56:77:
         38:4d:08:d8:22:ce:3f:7e:5e:27:c6:53:12:21:70:4c:ba:9a:
         8b:f1:8a:02:d5:83:f3:75:5a:85:41:64:2f:90:d1:56:f7:c5:
         39:aa:a0:cf:f3:3e:f8:3a:d3:fa:db:70:0d:00:f0:c9:d9:65:
         e2:4f:81:26:98:d5:39:f1:94:a0:43:b7:26:60:4b:6f:c3:c0:
         22:c5:51:a6:c3:f0:fe:2c:d0:3b:66:83:3b:32:4e:7f:40:a6:
         55:27:91:b5:aa:64:e9:1d:df:65:ea:e6:26:92:f7:ac:90:14:
         b8:da:a1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:45 2026 by rpki-client