Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56588bee-0151-3526-84ef-5faf988bdba3.roa
File:                     56588bee-0151-3526-84ef-5faf988bdba3.roa (raw, json)
Hash identifier:          H13OLwUj1ZwS9nprGQPDqdwShLTLsm4iBNDI64eMRVY=
Subject key identifier:   27:EC:80:7A:71:37:EC:AA:B6:C0:70:CF:33:53:AF:B4:4C:17:BD:5B
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584B7F525D69BD9582B619672140
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56588bee-0151-3526-84ef-5faf988bdba3.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     7029
IP address blocks:        67.214.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:5d:69:bd:95:82:b6:19:67:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=d44e59dc-240d-43ae-9219-d22e6ff7c4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:18:69:bf:bd:dc:a8:f9:03:96:85:ba:0a:bc:
                    3d:72:a4:67:7f:d4:fc:e5:a0:84:af:ed:37:d7:da:
                    9b:6d:bf:c4:f5:c3:f8:c0:0e:98:c7:06:9c:7a:ba:
                    f3:3d:9c:81:38:42:d4:ab:07:bb:7a:16:96:d2:76:
                    2e:a2:b2:e3:af:b2:5b:bd:68:da:30:41:3e:88:fb:
                    18:6c:97:45:2a:ff:f2:f0:d3:50:56:09:af:f3:99:
                    8e:53:24:9a:89:83:ac:3a:0e:ae:9b:c6:11:9f:01:
                    a2:2b:92:a2:f7:5e:59:21:3e:bd:a7:ad:a7:0d:4f:
                    9b:58:c1:74:90:d3:b8:f6:01:0e:7c:28:56:a1:3b:
                    69:d3:9a:df:21:c5:be:75:a5:67:cc:49:88:2b:da:
                    db:76:e0:11:b7:ba:a6:e0:18:c5:7b:00:70:2f:a1:
                    15:0b:38:91:5e:7a:a1:1b:f1:d3:b0:bd:71:81:7a:
                    6f:00:16:1b:93:8a:19:03:c0:7a:20:96:39:ed:67:
                    db:a2:5e:9a:91:12:15:39:ea:a5:44:ff:98:03:99:
                    86:3a:63:a9:71:19:92:7f:0d:06:c5:97:a5:f9:b1:
                    bc:44:f0:6c:7f:2c:8d:8b:9a:4d:0c:08:0a:51:6b:
                    be:33:e9:78:b9:3f:e7:4b:cf:09:19:ac:76:81:26:
                    86:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EC:80:7A:71:37:EC:AA:B6:C0:70:CF:33:53:AF:B4:4C:17:BD:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/56588bee-0151-3526-84ef-5faf988bdba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:75:61:57:8a:5d:24:f8:bf:f2:e6:f6:b6:23:3c:5d:23:66:
         14:64:76:a4:a4:64:0f:ad:11:84:10:92:d9:97:2d:89:88:c0:
         0f:44:ec:99:59:a7:06:77:84:7b:4c:b4:85:a5:b9:01:2f:3d:
         fa:72:4c:69:bd:ce:13:13:88:a3:b2:39:09:d8:03:0b:d1:f7:
         17:7f:da:88:df:1a:71:b4:38:82:8d:dc:31:04:d4:f6:a5:1e:
         8e:81:d3:7c:d0:80:74:c3:05:c6:07:76:9d:06:65:f6:0e:8f:
         7d:04:74:81:df:e0:ee:91:d4:b1:78:2e:8b:0a:49:5e:1c:f5:
         45:c5:5a:e7:a9:4c:12:b3:9f:ca:45:cc:f5:c9:98:7e:76:14:
         61:07:3f:7f:f1:87:5c:53:a3:e1:50:62:d1:10:46:06:59:17:
         ba:35:dd:3f:88:2c:2e:83:bd:06:b2:4b:48:5f:b5:82:98:ac:
         a8:34:a1:62:06:d9:b3:13:c8:99:ef:da:79:e0:b8:00:68:15:
         0e:3f:a7:34:e6:af:b4:ff:f7:96:75:12:cd:60:99:f9:28:80:
         c9:c8:41:4b:f7:e6:7d:68:27:7a:81:e5:4f:91:1e:4d:bd:0f:
         d4:cb:aa:aa:e4:12:3d:84:e9:f4:6d:e1:57:91:ef:ab:47:36:
         c9:5e:2d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:20:51 2025 by rpki-client