Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/271464d1-f8cb-3425-b761-d634ad58c029.roa
File:                     271464d1-f8cb-3425-b761-d634ad58c029.roa (raw, json)
Hash identifier:          Cq9abEJMRNAxclSJ9LDi5u+zqVbdXiYR1CL5UbTAWfY=
Subject key identifier:   3C:43:0E:EC:2D:C4:9A:62:28:3D:92:9F:3D:CB:2A:85:DD:D5:79:AF
Certificate issuer:       /CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
Certificate serial:       010D0C9F4328584B965132A8BD1A8EA50F458C80
Authority key identifier: B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/271464d1-f8cb-3425-b761-d634ad58c029.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     40755
IP address blocks:        64.49.96.0/20 maxlen: 20
                          67.14.176.0/20 maxlen: 20
                          144.89.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:96:51:32:a8:bd:1a:8e:a5:0f:45:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=7c5c562b-6d18-4224-aa52-4321407dd0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:84:8f:38:ab:f0:2c:10:63:51:c5:04:b6:ea:
                    b1:c9:63:24:77:37:c9:30:dd:1d:ea:5f:4d:8d:60:
                    8b:cf:e1:89:84:c5:7e:c5:3b:a4:f5:2f:c8:f3:1d:
                    76:8d:56:4a:00:67:eb:86:bb:90:4d:34:a2:46:02:
                    76:64:94:4f:6a:cd:7a:d4:3d:94:e3:d1:b2:51:7d:
                    59:29:c6:0a:56:7c:f8:a2:69:a1:da:1e:21:23:f5:
                    61:d8:dd:e9:e3:ff:48:a8:0b:2d:27:7a:04:27:7c:
                    44:bf:aa:bd:c9:b7:01:89:46:98:1d:6e:73:50:9a:
                    5e:8f:96:7f:30:ae:63:23:44:d2:99:81:b0:ce:af:
                    ee:33:76:bf:36:05:32:17:9a:52:56:1d:05:20:44:
                    53:eb:07:71:17:31:a4:07:11:8b:c2:86:59:5e:45:
                    1e:7f:7c:a3:26:41:3f:86:1a:9a:34:f3:e2:03:a0:
                    91:1b:f5:3d:d8:b1:74:c7:34:66:60:05:e5:18:ab:
                    15:21:e9:96:fc:99:95:0c:b4:43:22:0f:9c:c6:bf:
                    9f:af:1f:8d:13:10:ca:aa:9b:fe:29:73:0d:74:d2:
                    ae:66:53:6c:27:48:df:f3:b8:e5:f7:cc:59:0c:82:
                    8f:d0:42:90:1b:6b:79:ac:6d:2d:1e:71:d0:ec:65:
                    f8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:43:0E:EC:2D:C4:9A:62:28:3D:92:9F:3D:CB:2A:85:DD:D5:79:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/271464d1-f8cb-3425-b761-d634ad58c029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.96.0/20
                  67.14.176.0/20
                  144.89.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:9a:fc:f1:12:0f:64:ba:92:80:28:03:96:cf:aa:8c:64:aa:
         d7:06:bc:20:dd:cf:e2:94:46:04:2c:88:4e:01:1d:c7:dc:bf:
         49:19:84:74:f1:4b:ca:08:7a:bf:0e:b7:05:88:98:a9:df:45:
         0d:06:56:50:7f:9c:1b:14:ff:ec:09:f9:34:c4:95:44:46:41:
         77:fc:00:73:7c:82:e0:b9:5a:18:5e:9b:4a:51:a9:5e:76:44:
         89:7a:35:d0:aa:78:48:25:63:99:b7:7d:c7:c9:e4:a8:92:f3:
         32:c2:01:1f:fc:30:8d:39:53:f9:50:48:9a:7f:f3:7b:3b:76:
         b7:f5:2e:48:f8:ad:e3:1a:73:a3:ed:09:f4:24:8d:54:69:ad:
         2a:13:10:7c:a3:13:0e:30:35:d2:6c:f8:a7:5a:a7:7a:81:79:
         60:db:e2:b2:62:08:fd:6e:9e:dc:76:e0:ea:83:bc:b2:1f:bd:
         aa:4a:ba:f5:c0:70:0e:06:2c:68:e3:92:f1:eb:7f:8e:b9:ac:
         8b:4b:1b:b5:79:e3:2a:d7:f9:d3:d2:96:b1:49:60:04:57:60:
         77:53:c9:ff:a5:83:e7:f5:d5:6a:5f:4e:fc:cd:e6:f0:30:21:
         95:fe:04:85:8b:ae:8a:e4:89:35:fc:09:a4:95:30:11:49:40:
         9b:2e:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:23:46 2025 by rpki-client