Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa
File:                     28986011-044d-3ddc-91d9-ea7ed00e5470.roa (raw, json)
Hash identifier:          2AE6I+t2njWhHZuFvz41n4ERfLBYpo3rjNknppB7cCo=
Subject key identifier:   D0:8C:94:AE:8D:FE:29:E8:62:4E:9C:A9:B6:EC:D7:3C:A8:86:BA:B4
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584CC7774B5230FAE95B41427160
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     36692
IP address blocks:        67.215.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Feb 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:4b:52:30:fa:e9:5b:41:42:71:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=dc6a2d87-dbf6-4d16-b0b1-e6b21de94e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:28:1c:77:aa:8a:6a:e9:e3:d8:fd:8c:50:23:
                    00:ee:42:04:e0:f3:60:72:b7:5c:7d:e4:15:70:10:
                    f9:c8:1f:f3:e8:56:09:5c:aa:c4:90:e1:d8:7c:ec:
                    72:eb:ca:dd:46:da:3d:10:39:3c:18:cb:3b:ab:fd:
                    31:dc:cf:0e:f6:0b:c6:35:7a:3c:77:4a:de:08:e1:
                    be:0e:ca:c1:e8:43:6e:5b:ed:8a:6b:50:ce:e1:cd:
                    5a:21:20:0b:3f:4f:37:98:03:1d:13:e5:a0:03:3f:
                    d4:52:7b:d2:5e:75:f4:95:27:db:c7:fb:27:e1:54:
                    6c:e2:20:1e:2f:5b:1b:a6:7c:44:34:11:6b:9e:1d:
                    61:08:d0:9f:f7:81:bf:84:df:4b:4b:ba:71:18:12:
                    9f:f8:91:2c:a6:0e:d4:f6:54:7f:6c:22:ff:c6:61:
                    10:ef:0a:3e:e1:96:9c:1c:35:c1:d5:a0:0f:d7:d8:
                    5e:20:ed:1e:ed:36:0c:7a:01:d0:3f:9c:cc:ed:1b:
                    d4:70:09:a4:54:c9:bc:48:1f:ab:01:6a:d7:90:32:
                    b2:20:a0:15:b6:c9:72:61:15:e3:6c:85:c4:50:dc:
                    95:04:6b:89:27:1f:83:86:db:25:f0:36:2c:93:f0:
                    27:c8:07:94:4c:05:f5:aa:6b:09:6d:f0:11:f9:1b:
                    ad:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8C:94:AE:8D:FE:29:E8:62:4E:9C:A9:B6:EC:D7:3C:A8:86:BA:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:0a:97:c7:34:70:d0:45:d9:e7:f9:27:fe:ac:c5:64:cf:d6:
         5e:c7:b0:a7:bd:f4:6b:db:e1:7c:61:01:18:52:ca:a2:68:21:
         6d:d8:80:d6:af:f2:36:ae:4f:9c:90:b2:64:56:fb:25:f1:54:
         c9:e7:5a:a9:c4:d7:95:2c:98:dd:5f:ca:a2:3b:ed:9d:32:82:
         5e:b1:fd:4c:22:a7:ac:66:4b:c9:41:f9:de:4a:57:bd:02:ab:
         cb:f9:c9:e0:81:10:70:1e:a2:38:a1:79:e6:65:63:04:69:51:
         0d:43:c6:b3:8c:7b:25:76:76:0a:f4:a0:75:ee:d3:66:5c:9d:
         90:16:60:87:13:ae:97:25:8d:c5:1e:b4:8d:e0:29:91:b3:c0:
         6f:0c:06:13:f8:6c:fc:2e:21:01:92:95:94:7e:e9:f4:c3:bb:
         68:85:f9:bc:da:09:c9:6e:9f:9e:a9:8d:15:d3:eb:ca:18:4c:
         4e:f3:c5:64:3d:b8:86:7b:02:d7:c3:27:b0:e3:56:d9:dc:61:
         22:c5:26:2e:a0:df:40:84:cc:2e:c3:4b:a9:f5:02:49:d4:d8:
         24:e2:a3:b7:8c:14:e6:56:c0:84:dc:33:5a:54:4e:83:88:1b:
         fe:13:89:1a:09:18:45:ad:9f:80:47:0b:2a:34:a1:9b:c9:9f:
         89:ef:43:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:27:10 2026 by rpki-client