Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/681079b7-d96c-37fd-813c-e71ce2e1ed77.roa
File:                     681079b7-d96c-37fd-813c-e71ce2e1ed77.roa (raw, json)
Hash identifier:          vA77ao77y5tnB5ZLKpkXtq30njjZrn2MTwDEqSP0wuY=
Subject key identifier:   3F:73:E7:2B:61:72:4C:05:E3:32:D4:8E:21:3E:01:D2:05:72:67:2D
Certificate issuer:       /CN=08bf980a-30d8-4eb6-80c5-4a9c8d5a352c
Certificate serial:       010D0C9F4328584D02179E44466B7D106380B880
Authority key identifier: 30:F3:CE:9A:E5:60:CE:D9:A7:12:0F:90:BD:88:BA:C2:B9:72:96:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/681079b7-d96c-37fd-813c-e71ce2e1ed77.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     401205
IP address blocks:        23.141.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:9e:44:46:6b:7d:10:63:80:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08bf980a-30d8-4eb6-80c5-4a9c8d5a352c
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=1eadbfeb-f2ca-4cdf-b5b0-9c9ad7226d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:c9:f4:30:4f:6a:8b:a4:ae:e5:54:86:39:
                    fb:32:f9:be:d6:2f:66:ef:95:95:d9:2a:6e:b7:0c:
                    e8:0e:39:17:7e:b0:e1:0e:fc:31:d6:e0:e9:2d:85:
                    ce:8d:e3:db:0f:d5:28:0d:0e:eb:4f:ff:b4:cb:52:
                    8a:63:5e:20:3c:32:dc:42:9d:f5:0b:4e:f3:ff:ab:
                    51:20:48:8b:48:42:47:9a:c7:63:0d:3b:49:6f:7b:
                    78:50:e8:85:47:a1:32:0e:31:25:c1:86:c5:0a:a9:
                    3a:82:8f:e5:04:63:a1:2c:3c:61:48:63:fd:36:1d:
                    61:41:3e:51:ec:52:fa:b1:f5:c8:27:00:84:4e:da:
                    fd:13:18:90:86:a2:f3:ec:10:30:ef:d1:76:f8:a0:
                    0a:fd:4b:88:b6:b9:81:a3:7d:ee:ac:2c:af:fb:dd:
                    c1:da:6a:82:1f:81:1c:8c:17:76:a6:7c:f5:20:19:
                    b9:c1:d7:7c:2a:02:aa:ae:19:c2:eb:b7:0c:74:d6:
                    71:f4:6c:af:78:20:c2:49:56:da:9e:45:07:a5:c6:
                    ed:34:9d:bb:39:8d:d1:46:63:7a:9f:72:8a:17:77:
                    f4:12:a1:80:d1:14:d4:ba:1c:de:35:68:6b:6b:50:
                    92:c0:52:ac:32:a8:3f:11:5f:87:c9:04:96:aa:26:
                    fa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:73:E7:2B:61:72:4C:05:E3:32:D4:8E:21:3E:01:D2:05:72:67:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/681079b7-d96c-37fd-813c-e71ce2e1ed77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.crl

            X509v3 Authority Key Identifier:
                keyid:30:F3:CE:9A:E5:60:CE:D9:A7:12:0F:90:BD:88:BA:C2:B9:72:96:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:50:8f:92:2b:a3:a0:95:77:c5:c8:90:77:30:1d:60:52:ae:
         d4:00:45:61:43:5d:2d:ff:1e:70:b8:19:1c:04:1e:cb:26:e7:
         ca:f7:91:69:c0:88:b7:20:55:73:a6:c9:80:4f:b8:e0:bb:1b:
         30:6a:2c:42:f6:99:34:24:d0:91:44:58:86:7d:09:a5:9a:10:
         8f:0e:a4:f4:9f:50:1f:10:0f:83:b5:e4:d1:73:50:7b:1f:ee:
         e9:a7:cf:b4:3b:45:82:8d:2e:1e:ed:5e:2a:ab:ba:8b:c3:46:
         00:46:ae:84:b1:04:d5:a0:ed:13:d5:9c:e1:5e:5b:28:a5:4f:
         78:3d:b9:e8:47:db:a5:4f:bf:32:34:bb:70:0a:6e:3a:82:48:
         cd:87:f8:ec:99:a4:ba:12:79:81:09:39:93:44:25:51:ad:91:
         df:6f:0e:24:df:35:65:47:07:cb:51:27:7c:0b:dd:8f:a7:44:
         01:ea:96:26:c9:43:aa:6e:0f:ce:23:29:d0:47:0c:e0:a0:9c:
         d2:56:59:99:3a:6f:9f:e1:9a:1f:d4:6b:0d:75:e4:50:12:14:
         0f:91:0a:ae:3e:3e:38:7c:ec:8d:9c:76:f4:c0:b8:32:99:dd:
         93:49:6e:b1:95:64:d4:28:80:8f:39:4d:3e:e2:ef:7d:8c:db:
         b9:75:8e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:01 2026 by rpki-client