Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/2c0ae8ea-b669-3e54-8772-d45364814725.roa
File:                     2c0ae8ea-b669-3e54-8772-d45364814725.roa (raw, json)
Hash identifier:          f0LUyrhZkOIp5bJdJ5faFKYxFHoNnEe/laKyiFTKSrc=
Subject key identifier:   5B:78:73:F4:52:A4:4B:71:F6:14:9A:33:DF:FA:33:FF:F6:C6:F2:00
Certificate issuer:       /CN=e056707d-838a-4b8b-bd8e-8a874ea0684d
Certificate serial:       010D0C9F4328584D0211E120D3F3C0543AB16180
Authority key identifier: 21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/2c0ae8ea-b669-3e54-8772-d45364814725.roa
Signing time:             Sat 28 Feb 2026 01:49:13 +0000
ROA not before:           Sat 28 Feb 2026 01:49:13 +0000
ROA not after:            Fri 29 May 2026 00:49:13 +0000
asID:                     400011
IP address blocks:        23.155.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:11:e1:20:d3:f3:c0:54:3a:b1:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e056707d-838a-4b8b-bd8e-8a874ea0684d
        Validity
            Not Before: Feb 28 01:49:13 2026 GMT
            Not After : May 29 00:49:13 2026 GMT
        Subject: CN=f10a049c-185e-45f1-a280-57862a058ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:a6:69:ed:42:49:b7:14:33:3d:64:43:9a:
                    cd:86:05:b3:60:e7:53:18:8d:b7:57:f6:02:ea:8a:
                    d7:ec:3a:95:c1:df:31:3d:08:9c:42:85:24:fe:cb:
                    c8:eb:8a:79:bc:e5:0a:b3:5b:aa:50:08:6b:41:51:
                    dd:d1:b2:31:40:75:4c:8c:70:98:2f:e4:89:85:95:
                    7c:99:b0:59:c2:04:6b:fc:70:48:2b:32:7a:52:d6:
                    28:af:62:85:6d:74:7f:1f:ec:14:ec:3d:c1:88:a8:
                    be:ab:49:84:0c:b5:0f:1c:90:65:60:ef:2d:a4:6f:
                    0b:b0:16:69:ef:fe:6d:5c:ab:39:18:91:2b:f1:ee:
                    37:7c:f7:91:fd:a8:eb:d0:59:de:8b:86:8f:53:54:
                    1e:ff:bb:39:3e:c2:23:8f:4f:a7:4b:75:f4:bd:f5:
                    f5:bd:48:29:10:f9:9f:0c:40:a6:1e:1d:22:54:4b:
                    ac:2b:81:db:23:32:b2:7d:a8:24:f6:5f:d7:ed:e2:
                    ad:40:7f:fb:2c:38:8b:74:99:28:b9:c7:3b:fa:3b:
                    d0:9e:a6:f6:8a:50:21:b7:e9:09:53:e3:c9:fe:7a:
                    87:1d:53:14:20:d8:4e:9c:95:13:04:ce:7c:bb:e4:
                    45:80:a6:f5:70:84:cf:9a:56:ed:af:1c:e9:48:53:
                    81:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:78:73:F4:52:A4:4B:71:F6:14:9A:33:DF:FA:33:FF:F6:C6:F2:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/2c0ae8ea-b669-3e54-8772-d45364814725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl

            X509v3 Authority Key Identifier:
                keyid:21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:9e:ca:f9:f5:8a:0c:cf:7d:f4:be:2e:1b:7b:75:06:10:e3:
         33:05:23:09:ac:e8:5b:b1:15:72:4d:bd:aa:82:f3:a4:1b:8c:
         8c:56:54:5c:1a:6d:e7:90:ce:b1:33:63:40:26:b1:b0:f5:14:
         f8:1d:8d:4d:79:74:4c:70:91:ca:8f:fc:96:be:ec:a3:64:a4:
         fc:83:30:07:4e:a6:9a:af:87:e7:e4:13:db:78:0a:ba:46:49:
         b9:61:8b:45:93:bd:26:21:4a:aa:e9:aa:ec:ff:7c:39:fa:aa:
         d7:a9:37:85:d6:52:46:5d:9f:65:27:1f:b0:84:c3:93:17:b4:
         13:d8:02:7c:23:4b:92:51:d6:74:60:82:18:15:ea:e7:3d:1f:
         cd:5d:c1:54:e5:17:d4:d8:1e:ba:e2:e5:2c:c7:73:a7:de:a0:
         03:c9:72:be:8b:2e:86:6d:c6:ed:07:c2:48:4d:9b:4b:05:a0:
         23:c9:33:10:5e:8e:ab:c0:73:f7:8e:72:0a:15:82:dc:d7:a3:
         14:9c:90:61:65:8e:4f:3f:93:61:a3:b9:93:7c:fe:5e:c9:35:
         ac:52:e0:a1:3f:26:32:26:28:01:0c:04:e7:06:57:d6:c9:a3:
         ff:c3:6d:80:bc:3f:2b:97:37:53:68:c3:e3:a3:1b:50:94:ab:
         9c:b3:f4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:32:15 2026 by rpki-client