Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4d504c1e-1cd5-3327-9e71-f08e5d8a21cf.roa
File:                     4d504c1e-1cd5-3327-9e71-f08e5d8a21cf.roa (raw, json)
Hash identifier:          PdEiGsFasQOLAG6zSe00yKpgrSl7qh69u8y6z9iM0DA=
Subject key identifier:   89:BF:82:26:16:1D:95:0B:75:04:65:B6:9F:3C:A4:94:B2:51:F4:9B
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584B1C36BA48FB7E358AE1995180
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4d504c1e-1cd5-3327-9e71-f08e5d8a21cf.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     11135
IP address blocks:        66.193.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:ba:48:fb:7e:35:8a:e1:99:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=df732193-04f8-4096-8945-325a21fc26ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:17:a7:ba:26:0c:a2:79:ea:09:75:49:cf:a7:
                    21:db:5a:c2:5e:74:ca:4f:8c:1b:2a:d0:8f:2b:b7:
                    87:b8:2c:c9:e9:85:2d:65:3d:a7:98:c7:2f:0f:c5:
                    9c:f9:e9:a1:be:62:9b:d9:67:5c:39:e9:59:10:b5:
                    f1:e9:a3:51:72:12:97:42:7b:ca:ef:39:b6:cd:22:
                    eb:62:b9:64:34:5a:56:fd:dc:8f:da:cf:4a:83:7a:
                    d3:b6:33:5e:b8:9f:96:7b:00:f7:d8:1c:5e:95:87:
                    e6:e8:01:af:dc:d4:9c:cc:a5:5d:22:d2:dd:90:5a:
                    21:f0:55:5e:14:55:90:45:98:2a:60:6e:6a:bc:c3:
                    27:53:8e:d8:3a:99:b3:c1:7e:74:ac:de:98:d6:da:
                    ba:7b:56:79:e5:fb:58:50:e5:68:b8:bc:c5:5e:db:
                    3d:a6:64:f3:b9:a2:63:cf:2a:ca:40:b0:ec:f6:03:
                    5d:f3:c4:d0:e7:a2:04:d5:24:e5:ab:93:3a:c3:16:
                    44:69:08:83:9f:c5:92:c2:79:ff:a2:91:9b:7b:00:
                    9d:cc:ac:fd:39:f3:a4:db:ca:2f:7b:f2:ea:74:8a:
                    5f:e5:95:46:fd:28:a8:26:98:8a:1a:b1:65:16:c3:
                    eb:57:0f:4a:91:61:35:d5:6a:27:d8:a4:9a:4f:11:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BF:82:26:16:1D:95:0B:75:04:65:B6:9F:3C:A4:94:B2:51:F4:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4d504c1e-1cd5-3327-9e71-f08e5d8a21cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.193.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:38:5b:fa:f7:73:9a:d6:0c:23:44:37:cc:a4:99:84:cb:a8:
         1a:d1:03:54:31:e9:7d:df:71:a9:c8:39:00:60:0a:f1:21:38:
         f8:17:c2:b9:39:c8:70:1a:9d:42:aa:17:75:9a:ad:87:00:92:
         17:db:60:88:ed:ad:2b:69:08:e8:c6:bb:3c:a8:bc:0d:ed:34:
         ea:b7:50:72:9d:17:e5:fc:e7:45:bf:97:21:76:f6:9a:8d:3e:
         05:be:82:66:b9:3c:e2:ca:5f:49:75:25:19:c8:dd:e2:4b:6e:
         d9:cb:46:16:e7:b7:97:9b:78:cb:bb:42:8a:e7:cf:7b:2e:ab:
         5a:7e:58:32:c3:c2:ac:17:95:db:c3:61:ce:17:47:15:e0:29:
         e5:28:cf:c0:a4:a7:26:c2:06:eb:93:3d:2b:94:e4:7c:f2:bd:
         98:70:c9:ef:83:d4:ee:b5:a4:51:8a:37:4d:10:7e:3b:bd:6d:
         5c:a1:ea:a6:82:85:22:0a:61:8f:32:0f:12:dc:de:74:41:a6:
         63:73:9a:21:03:c1:d0:2e:15:09:d7:6c:a6:dc:b5:4e:6a:d4:
         de:f8:1d:10:68:cf:af:03:0b:e0:aa:cc:cb:e5:a4:17:c0:1b:
         e8:79:db:88:d2:3b:66:52:6c:de:7c:03:eb:72:4f:84:95:8f:
         22:3e:a3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:10:54 2025 by rpki-client