Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2804b41b-25fc-33c8-9634-35f7835977d8.roa
File:                     2804b41b-25fc-33c8-9634-35f7835977d8.roa (raw, json)
Hash identifier:          lvmgBC5tg/dHNVloWI+UZKL00Rgv78oJV32K+Gkf5+0=
Subject key identifier:   FF:26:B6:D3:22:29:0C:02:37:1A:92:C2:54:A0:1B:35:11:97:6C:38
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D362B19A30798C1B60F13F700
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2804b41b-25fc-33c8-9634-35f7835977d8.roa
Signing time:             Wed 18 Mar 2026 17:42:04 +0000
ROA not before:           Wed 18 Mar 2026 17:42:04 +0000
ROA not after:            Tue 16 Jun 2026 17:42:04 +0000
asID:                     20001
IP address blocks:        66.84.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:36:2b:19:a3:07:98:c1:b6:0f:13:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 18 17:42:04 2026 GMT
            Not After : Jun 16 17:42:04 2026 GMT
        Subject: CN=4805590d-eb0c-4b19-bded-5f62e7bd82f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:41:ee:43:bf:fe:79:3d:60:8e:d6:60:de:
                    a5:35:eb:fa:21:89:be:ab:29:94:78:ba:75:8f:ce:
                    94:a4:55:17:34:ae:1e:b7:5d:08:af:bc:12:a4:4b:
                    aa:df:50:f6:5a:0a:f5:54:99:bd:b1:2c:92:37:23:
                    ea:db:a4:b5:e4:93:e4:be:82:3c:91:bc:e1:68:3d:
                    27:95:12:a4:3e:c9:e5:51:4f:d5:7c:61:08:2d:d1:
                    d5:b2:f3:08:41:b4:12:fe:9f:a2:47:c1:f6:bf:47:
                    67:e7:6d:91:bb:20:a3:40:ce:32:44:27:a1:bc:81:
                    d9:e7:a5:81:b2:28:bf:d7:dd:16:59:ec:83:b4:1a:
                    b4:14:9a:68:30:78:b4:7a:56:66:73:c0:bd:9b:dc:
                    eb:4d:c9:b9:4e:38:a9:13:3b:28:22:d0:1d:3c:88:
                    fe:2b:cc:63:59:29:51:42:43:bc:b6:b4:53:e7:37:
                    9f:c2:b2:dc:15:72:d9:7a:4c:a4:88:dd:fa:a1:d2:
                    c4:db:30:cf:56:7e:a5:e8:83:66:ae:8b:df:91:71:
                    d6:08:2a:d6:f5:12:d7:ac:ec:9c:ad:67:75:4f:3b:
                    8b:8c:b6:09:32:9f:91:1e:be:00:61:5b:d7:87:26:
                    6a:c9:eb:b0:e4:4a:66:4a:82:62:93:6f:bf:09:00:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:26:B6:D3:22:29:0C:02:37:1A:92:C2:54:A0:1B:35:11:97:6C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2804b41b-25fc-33c8-9634-35f7835977d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.84.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:75:d1:c3:e9:af:39:7e:13:55:ca:78:74:c6:e2:9d:3c:ca:
         92:3c:77:1b:6c:d5:f8:85:57:33:9d:a3:e3:80:dc:86:cf:f9:
         44:25:c5:6d:58:54:7d:b4:ad:a3:72:c9:34:84:c0:d5:a4:7f:
         a6:9f:11:d1:64:5a:c0:46:c2:0d:61:a5:1b:f5:2b:12:a7:5b:
         a4:7b:d4:cc:a0:1f:63:ff:e7:2b:f0:94:5c:d3:16:28:05:61:
         4e:22:c7:97:6e:23:e5:3c:43:48:f6:34:ae:65:fe:05:92:0c:
         93:49:28:5c:b2:82:08:7f:e2:88:fc:19:5a:78:85:73:a4:16:
         8a:e9:f8:8c:68:67:35:86:6e:d5:d7:64:f3:9b:81:7d:1a:35:
         8c:ed:da:ba:09:72:41:6e:89:f1:94:89:29:0b:8e:56:31:90:
         a2:cb:1b:6c:83:fc:66:9f:eb:e3:59:44:e1:fe:b2:29:22:04:
         d3:82:c6:20:27:78:e6:8f:b7:60:25:92:bc:9d:9d:e7:8c:71:
         f6:07:45:b1:b1:6e:aa:4f:35:2d:d7:ef:39:98:ec:be:3b:b5:
         74:6c:6f:e5:44:b2:6b:c1:25:26:09:16:49:9b:c5:f0:c5:ef:
         95:b4:f4:9a:80:fb:92:74:80:4f:d8:93:62:16:20:5c:82:1e:
         b1:10:11:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:53:34 2026 by rpki-client