Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa
File:                     facec0c3-3e20-3ab9-92ff-cea91868e688.roa (raw, json)
Hash identifier:          Pt6nhk6RkjmkM2mxfHKamS4HHSWWs9CQ9LZ3uRq2HD4=
Subject key identifier:   3B:68:9C:62:11:1F:DC:9E:D5:0D:DF:E8:53:4E:CE:2E:6D:7B:27:AB
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584CBDB1F63881E7ED1D6284D980
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     7015
IP address blocks:        23.249.160.0/24 maxlen: 24
                          23.249.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:f6:38:81:e7:ed:1d:62:84:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=119acb55-8130-4b9e-b4bb-263267c30c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:28:93:a2:f7:59:65:07:be:a8:d2:f9:09:
                    a8:7c:f4:ab:e6:c0:5b:3c:70:f8:ff:48:5c:87:c9:
                    87:5b:ae:35:8b:48:6e:55:2f:20:15:9c:84:0c:65:
                    8b:d2:f2:62:bd:4b:4d:ea:2d:aa:c8:a6:83:83:25:
                    83:d6:6b:6d:fa:21:d0:54:70:8a:5a:9d:99:08:da:
                    ab:ac:fe:7b:c5:c2:cf:c2:ea:76:70:63:f6:57:40:
                    b0:0d:2f:69:c9:e9:80:52:d1:72:11:6f:7e:f5:f9:
                    a9:19:84:82:8e:3f:bd:ca:0e:e4:4e:89:6d:88:3c:
                    af:3a:0d:75:28:11:d4:cf:15:77:2f:34:f5:b6:d1:
                    b2:b4:94:81:39:d6:c7:9a:26:ef:81:9a:1b:ac:15:
                    7e:f0:38:b0:a8:46:1e:66:b2:74:df:10:fc:5e:c4:
                    30:39:0a:7f:cc:01:6c:a6:95:9e:56:81:46:05:93:
                    d3:71:59:e9:b6:81:82:39:97:4d:7c:a0:10:a6:d9:
                    25:47:57:89:d4:58:19:74:ac:3a:bc:23:e1:58:08:
                    e2:87:9e:29:7d:42:0d:6d:81:b8:b9:4e:b6:c5:bd:
                    76:9b:16:be:48:79:6f:c7:bb:80:9f:d9:1e:e2:33:
                    26:85:2d:38:4f:a4:df:7d:27:e2:3a:e8:0c:50:3d:
                    37:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:68:9C:62:11:1F:DC:9E:D5:0D:DF:E8:53:4E:CE:2E:6D:7B:27:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/facec0c3-3e20-3ab9-92ff-cea91868e688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.160.0/24
                  23.249.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:f4:65:a9:9d:ee:4a:b0:04:5c:63:eb:99:34:9b:a6:e8:62:
         20:cb:60:eb:ae:03:6e:47:04:34:40:bd:b6:85:42:09:b6:7f:
         ed:5f:19:29:ff:9d:fa:8a:c2:af:ea:81:f5:7a:48:01:9d:bf:
         78:0a:28:f0:39:1c:7f:25:32:1d:d5:d8:63:8c:a6:2a:f8:31:
         7a:02:da:f8:76:a3:3e:59:d7:74:1f:28:a4:80:34:0c:01:b1:
         ad:de:c7:32:b8:b2:1d:88:e7:aa:ff:18:f8:4a:ff:0f:7b:39:
         1d:81:90:37:90:e3:d7:8b:44:58:3a:61:3e:d6:ad:37:51:57:
         b0:44:3a:31:b6:bd:f6:b8:63:77:d1:89:d0:ca:3d:fc:3c:51:
         b9:f8:7f:52:37:06:c6:e9:b2:8e:66:65:14:ad:58:57:15:1e:
         67:aa:39:43:34:ca:7f:ca:09:8e:2c:b6:23:3e:51:17:97:50:
         bf:d3:b1:1a:37:8d:ca:ae:71:b6:56:6d:e7:10:48:5c:e9:0f:
         cd:f0:33:99:e5:ca:2a:de:e2:cc:67:d9:99:76:f4:34:d7:ea:
         60:4b:24:d8:ba:ca:32:ba:03:d7:f0:c9:02:b3:a0:e8:11:13:
         da:c7:7b:89:72:7d:68:e0:74:0f:96:61:c8:d7:76:56:e6:49:
         d1:c7:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:32 2026 by rpki-client