Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6fd8038d-ae7b-33c2-a8e7-3f3c96242e03.roa
File:                     6fd8038d-ae7b-33c2-a8e7-3f3c96242e03.roa (raw, json)
Hash identifier:          kLppuas75j4JhSWtpPUN+E59fd9H2mpgNIeFIOB9RKg=
Subject key identifier:   C3:21:83:AD:55:00:A9:B9:9E:B2:ED:55:C0:40:2F:DF:C5:12:58:16
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584BAA97BBB8862C4839912AC56C
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6fd8038d-ae7b-33c2-a8e7-3f3c96242e03.roa
Signing time:             Tue 28 Oct 2025 01:00:31 +0000
ROA not before:           Tue 28 Oct 2025 01:00:31 +0000
ROA not after:            Mon 26 Jan 2026 02:00:31 +0000
asID:                     55156
IP address blocks:        66.194.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:97:bb:b8:86:2c:48:39:91:2a:c5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Oct 28 01:00:31 2025 GMT
            Not After : Jan 26 02:00:31 2026 GMT
        Subject: CN=683802e3-3f8b-4840-94f4-48d56291d47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b5:bc:03:2b:60:38:bd:88:63:36:99:71:37:
                    06:1c:66:75:53:c3:40:d9:81:f7:58:db:17:cd:97:
                    51:25:38:b9:b1:20:ad:c4:6b:88:de:46:15:9b:0a:
                    f1:7e:fc:fb:e2:0f:e4:ff:b9:38:f6:32:77:9c:cc:
                    02:19:8e:c9:b4:78:70:5d:e5:e5:cc:04:2b:8d:ee:
                    79:ae:2b:3e:4a:ab:c3:14:c4:37:1f:23:e9:45:da:
                    24:32:15:a1:e1:cb:da:84:36:47:0f:0c:54:18:5f:
                    1e:6e:51:4d:17:9c:cd:22:30:54:8a:23:04:1d:13:
                    e9:5b:98:8a:4e:c3:8c:3e:7a:7a:3f:e9:cc:99:6f:
                    fb:43:b1:cb:57:04:e7:72:f8:0e:90:24:de:0d:d4:
                    3f:ae:0e:b1:1c:e9:b9:a9:8d:4a:41:02:e4:cf:dc:
                    90:e5:a5:33:ff:23:a6:2b:40:dc:03:58:0e:3a:c4:
                    68:7c:62:55:1b:22:f4:74:41:a8:d4:6d:04:76:92:
                    85:c7:7f:e2:cf:dd:fe:22:d1:c8:56:a5:88:9e:a7:
                    df:41:9e:49:79:11:83:bf:6f:94:f9:79:d0:f8:2d:
                    16:63:41:59:c7:6b:6c:d8:8f:8a:c3:fa:c6:a7:b3:
                    73:a5:55:cd:04:f2:38:99:58:07:1b:b4:0b:26:65:
                    b0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:21:83:AD:55:00:A9:B9:9E:B2:ED:55:C0:40:2F:DF:C5:12:58:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6fd8038d-ae7b-33c2-a8e7-3f3c96242e03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.194.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:0f:f2:46:8c:c9:b6:07:b0:08:50:20:4a:ad:e3:71:e9:97:
         46:9b:1c:14:59:fb:28:6b:df:0d:ea:58:5f:6b:2c:67:55:11:
         41:6f:5e:a1:87:0a:b6:a6:79:0d:74:00:71:c0:f8:f9:89:60:
         43:ff:f2:11:3d:32:b1:f9:25:4b:6f:bd:9e:ae:8b:9f:0d:a1:
         aa:75:f5:49:ae:12:a2:21:e3:1d:36:0b:0b:a1:dd:a0:02:9e:
         06:10:8d:8e:fe:e2:6c:f0:43:22:ae:b6:e4:b5:be:a4:7b:e5:
         45:20:ee:0d:82:79:6f:30:e9:9e:be:88:b0:71:43:40:2f:41:
         11:58:2f:5f:d0:32:e2:0b:f9:4e:ae:ec:71:73:64:da:52:7e:
         1b:4e:9d:b8:7b:bf:5c:83:aa:b1:2e:13:d9:c1:3d:45:d5:3d:
         c9:a3:27:2f:3f:d1:c8:23:4c:97:74:a2:85:da:63:cd:49:ed:
         75:e8:a1:5e:7c:ac:c5:74:9a:8f:d6:69:8a:2f:89:5b:91:2e:
         ee:71:ce:3e:93:fe:cf:7a:f0:18:af:5e:83:72:d0:89:54:33:
         ac:c1:15:1f:da:2c:bb:c6:87:26:dd:e9:3e:57:82:9d:e3:cd:
         c1:4b:0c:cc:16:79:94:25:aa:14:f5:71:6b:59:4d:92:46:94:
         c8:d9:40:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:38:25 2025 by rpki-client