Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196/28780fc3-8f41-3f2f-a4be-7892a154e5ef.roa
File:                     28780fc3-8f41-3f2f-a4be-7892a154e5ef.roa (raw, json)
Hash identifier:          twz0q73iHpnyiBOdu9cFQlXXmWfz+ZOXHxnOsX0dBoY=
Subject key identifier:   01:C2:AD:28:BF:04:9C:6D:FE:25:B7:26:13:5A:EF:C3:21:D9:67:07
Certificate issuer:       /CN=68acbe9e-7969-4867-8c30-4486b8a16196
Certificate serial:       010D0C9F4328584CED277367C0B45E78A4C1A1E0
Authority key identifier: 60:A1:19:29:47:F5:B3:73:65:B3:E6:5A:CC:46:BE:76:0D:05:6B:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196/28780fc3-8f41-3f2f-a4be-7892a154e5ef.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     399062
IP address blocks:        23.134.116.0/24 maxlen: 24
                          2602:f6ee::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196/68acbe9e-7969-4867-8c30-4486b8a16196.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196/68acbe9e-7969-4867-8c30-4486b8a16196.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:73:67:c0:b4:5e:78:a4:c1:a1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68acbe9e-7969-4867-8c30-4486b8a16196
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=ddb91d52-5e7b-405d-a019-83594a3039df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ab:a3:d5:42:3f:cc:b8:fe:17:41:b2:3a:ba:
                    17:8f:c8:20:bc:22:d8:34:94:b3:ea:02:93:32:a8:
                    4e:a1:ac:d0:68:6a:55:dd:2d:e2:0f:7c:38:3f:96:
                    d0:fe:50:01:05:b4:8a:1c:9f:3a:67:d7:40:71:71:
                    6a:cc:7b:9b:b3:84:1c:cc:c3:ff:f8:fb:54:a9:24:
                    aa:13:52:96:b8:b5:64:e6:55:af:40:36:f7:bd:2e:
                    fa:7a:09:9e:b9:6c:da:1f:46:df:bb:8f:76:8c:0f:
                    1f:88:35:da:39:a8:e4:31:e7:99:94:3a:aa:33:b7:
                    01:74:a8:3f:ed:81:1a:5a:54:37:11:09:9a:09:db:
                    44:9a:c9:2c:67:6c:40:ff:13:88:40:17:10:8d:22:
                    6e:63:71:d6:4c:ed:f6:ba:54:b3:e7:d9:ac:1a:23:
                    1b:bb:1f:0b:18:2f:e4:d1:8d:fc:1e:e3:ad:59:e2:
                    7e:a1:09:37:72:88:e5:4e:ac:93:e7:41:ee:9c:ff:
                    a8:50:12:9e:08:4d:dc:05:00:f4:89:c6:a6:f7:e4:
                    f1:09:7d:4d:8c:08:f0:6b:36:69:38:e1:56:00:f2:
                    18:bd:c0:ff:f2:e9:2b:2e:38:3b:ad:d4:11:85:68:
                    55:06:1c:39:b4:bd:1c:1b:67:e7:60:5b:1a:ca:55:
                    fe:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C2:AD:28:BF:04:9C:6D:FE:25:B7:26:13:5A:EF:C3:21:D9:67:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196/28780fc3-8f41-3f2f-a4be-7892a154e5ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196/68acbe9e-7969-4867-8c30-4486b8a16196.crl

            X509v3 Authority Key Identifier:
                keyid:60:A1:19:29:47:F5:B3:73:65:B3:E6:5A:CC:46:BE:76:0D:05:6B:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/68acbe9e-7969-4867-8c30-4486b8a16196.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.116.0/24
                IPv6:
                  2602:f6ee::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3b:a3:21:5a:ef:cb:53:c5:f0:18:6a:92:9e:ca:40:77:8f:
         62:5e:79:f1:a6:7d:45:6d:25:9d:74:0e:bb:6d:03:52:33:b7:
         73:3a:fd:91:7e:6f:60:bd:60:ef:da:2d:ce:c0:d9:62:d0:a0:
         67:68:e3:4d:4c:8e:80:3a:25:07:d4:10:34:d7:54:6e:88:53:
         4c:2e:ac:63:4d:f9:10:e0:f7:ae:da:74:63:21:35:06:dd:b5:
         e4:fe:60:43:58:f3:16:ee:8a:56:53:0d:f9:5a:d5:9f:16:1d:
         49:5d:34:ef:13:7d:e8:2f:ec:12:47:6c:65:82:08:69:43:63:
         fc:89:71:c6:66:ef:06:37:f5:a6:3c:e2:ad:50:1e:ca:2f:b9:
         0d:e9:3a:24:cf:3b:62:78:53:2d:73:af:2f:05:05:3d:d9:26:
         0e:09:14:28:0d:e4:4d:ea:47:ef:c9:a1:ed:ec:5a:8c:ba:c6:
         cd:ec:dc:ec:46:88:5a:48:31:b7:cd:53:85:b8:8f:4a:a4:23:
         2b:ba:57:cb:5c:6c:08:46:cd:95:fa:3e:a1:8c:7d:9a:07:9c:
         28:17:cf:35:59:08:bc:71:99:7a:2b:67:4c:48:e0:c9:d8:23:
         a0:10:b7:95:b1:80:cd:68:ee:14:cc:74:85:f4:56:fe:f8:eb:
         d4:17:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:23 2026 by rpki-client