Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28b676d6-b3ca-3467-b06b-9ad5dfba3943.roa
File:                     28b676d6-b3ca-3467-b06b-9ad5dfba3943.roa (raw, json)
Hash identifier:          6ErMRQMY774A74d2Uj1C5cz/AjbkNu5jM0wSzxE4ZoY=
Subject key identifier:   51:14:90:DD:D8:B8:50:F3:35:D6:93:80:66:1D:FA:7C:4A:BB:55:CA
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584D012DED97FD9291F5D342BA98
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28b676d6-b3ca-3467-b06b-9ad5dfba3943.roa
Signing time:             Fri 27 Feb 2026 18:09:55 +0000
ROA not before:           Fri 27 Feb 2026 18:09:55 +0000
ROA not after:            Thu 28 May 2026 17:09:55 +0000
asID:                     10753
IP address blocks:        23.26.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:01:2d:ed:97:fd:92:91:f5:d3:42:ba:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Feb 27 18:09:55 2026 GMT
            Not After : May 28 17:09:55 2026 GMT
        Subject: CN=7d2be3e3-cf67-492d-af85-51d342a47f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d8:cc:46:8f:08:95:05:40:53:2a:e0:58:96:
                    35:1a:1c:ed:0b:9e:ce:9d:72:5c:7f:28:9b:88:8a:
                    8a:62:84:43:4e:96:3f:0d:19:58:2a:84:6f:17:da:
                    9d:ee:5a:ab:6f:70:5b:3b:10:78:6b:6f:28:4d:a6:
                    e6:a5:bb:69:4a:01:b7:1e:7d:05:25:75:1f:48:3c:
                    47:ed:30:a2:d2:57:46:82:c8:fe:96:d2:76:e0:7d:
                    c1:89:f4:30:ed:31:2d:37:cb:1c:ff:b3:eb:ff:45:
                    7a:e3:e9:47:8d:ae:50:8c:58:ae:f3:11:e6:a7:dc:
                    57:96:a2:70:85:bd:71:94:38:f4:04:c7:71:5b:92:
                    41:73:0c:30:22:7a:7e:1f:90:4c:8d:c5:8b:75:6f:
                    26:71:b8:0c:bf:cc:af:3a:9b:80:13:60:89:0d:f4:
                    fb:b7:3e:db:ef:96:94:cf:9d:93:69:f3:f6:8c:21:
                    4b:fb:42:a0:9b:1f:f7:41:9d:4a:75:02:a1:f8:de:
                    5c:ba:a7:5e:4a:31:68:f6:ea:e1:82:0b:ed:27:2e:
                    e2:0e:a6:b6:94:36:61:0a:39:11:a9:69:1a:43:24:
                    59:a8:c1:0f:4a:89:06:84:83:1c:25:78:aa:46:6e:
                    21:17:47:18:ee:19:f8:96:97:46:60:91:87:eb:e2:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:14:90:DD:D8:B8:50:F3:35:D6:93:80:66:1D:FA:7C:4A:BB:55:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/28b676d6-b3ca-3467-b06b-9ad5dfba3943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:43:18:bd:97:19:29:d0:28:f8:d1:43:42:bb:11:09:2c:b9:
         14:ff:81:69:24:39:c0:53:66:de:06:a1:1a:d2:e7:79:a1:86:
         c0:47:20:73:b1:2d:51:dc:89:f2:f9:6f:6c:fb:11:02:ff:bb:
         3e:0e:3b:6c:bc:60:03:f1:65:a4:96:c1:15:f8:09:68:9e:d8:
         68:1e:b4:21:fc:24:c9:63:6c:73:22:e6:3d:fa:0c:a1:fa:b3:
         32:ed:5b:5c:c1:83:4f:2e:6d:01:af:0d:4b:d8:55:85:92:4d:
         66:01:61:97:f0:55:ff:49:62:e8:9f:53:96:a4:2e:77:13:b3:
         5b:36:3b:d4:39:71:cb:d9:8f:6a:32:95:35:e9:87:4c:47:ce:
         50:35:b2:8b:a1:48:22:a2:fc:00:24:f7:02:c5:12:2b:5c:79:
         ca:73:67:f4:4a:6a:21:5f:81:07:48:22:f8:5b:a0:95:4d:7e:
         70:7e:68:34:04:e4:56:9d:d7:2c:e5:64:2e:36:f3:d7:5e:e2:
         68:cd:d0:11:07:5b:46:b9:55:8b:17:1a:10:6d:16:e3:95:71:
         85:1e:3b:69:85:c3:64:f9:33:21:7f:22:a9:87:9f:98:04:1c:
         69:5c:e3:9c:c3:7f:68:20:ac:2e:e0:a2:e3:99:3d:67:70:f8:
         c4:92:ba:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 09:07:42 2026 by rpki-client