Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/dc48dc16-b6a6-3b9d-aa2a-b92d6cea9d5b.roa
File:                     dc48dc16-b6a6-3b9d-aa2a-b92d6cea9d5b.roa (raw, json)
Hash identifier:          gEdJ637VcC79y6GMjWeU81+KewSNiXKlkNgMNoHB5gs=
Subject key identifier:   8B:B3:C2:E3:CD:34:D4:69:AA:F3:34:35:34:A8:26:5C:1E:B8:10:45
Certificate issuer:       /CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
Certificate serial:       010D0C9F4328584B9656364D2FAC05A8FD348180
Authority key identifier: B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/dc48dc16-b6a6-3b9d-aa2a-b92d6cea9d5b.roa
Signing time:             Mon 20 Oct 2025 18:52:40 +0000
ROA not before:           Mon 20 Oct 2025 18:52:40 +0000
ROA not after:            Sun 18 Jan 2026 19:52:40 +0000
asID:                     40755
IP address blocks:        67.14.176.0/24 maxlen: 24
                          67.14.177.0/24 maxlen: 24
                          67.14.178.0/24 maxlen: 24
                          67.14.179.0/24 maxlen: 24
                          67.14.180.0/24 maxlen: 24
                          67.14.181.0/24 maxlen: 24
                          67.14.182.0/24 maxlen: 24
                          67.14.183.0/24 maxlen: 24
                          67.14.184.0/24 maxlen: 24
                          67.14.185.0/24 maxlen: 24
                          67.14.186.0/24 maxlen: 24
                          67.14.187.0/24 maxlen: 24
                          67.14.188.0/24 maxlen: 24
                          67.14.189.0/24 maxlen: 24
                          67.14.190.0/24 maxlen: 24
                          67.14.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:96:56:36:4d:2f:ac:05:a8:fd:34:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdcc2e2-c99a-4bc5-8c10-f78c4275050a
        Validity
            Not Before: Oct 20 18:52:40 2025 GMT
            Not After : Jan 18 19:52:40 2026 GMT
        Subject: CN=20beb82c-91f9-4801-b575-6f73ab0d4b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:53:1d:e0:f8:8c:dd:97:6f:f3:b0:45:4a:73:
                    0c:7c:69:94:36:a9:2f:23:90:e5:a1:b4:2a:8e:77:
                    97:b7:94:b3:d6:e3:42:a6:77:f6:53:13:29:99:80:
                    e3:39:b8:fd:f3:ec:06:e4:b7:74:94:3e:90:9b:65:
                    5b:cc:a5:17:40:31:e8:ae:dd:d7:63:b6:ec:f9:a9:
                    db:c9:9c:b9:db:6a:c4:a8:7d:5b:59:95:49:7d:a2:
                    03:6d:40:c9:05:c4:f2:4a:a2:83:49:4b:8b:dc:7c:
                    b2:d6:4a:cc:28:73:99:b7:fc:8f:f8:77:c0:c3:b4:
                    cb:19:6b:47:f7:71:56:ff:76:a9:41:1e:2e:b4:93:
                    09:d7:97:87:ac:9f:1d:ab:8a:47:ee:62:c6:98:25:
                    9d:f7:38:01:24:2e:1c:a1:69:b0:a7:41:20:06:3f:
                    33:c6:80:5b:d1:43:41:00:38:02:01:47:fd:95:83:
                    78:fa:df:24:5c:9f:32:30:2c:54:4d:49:13:be:fe:
                    1b:69:36:eb:24:6c:3f:b7:4b:10:29:47:f9:a5:27:
                    39:34:cb:db:c3:9f:e1:86:b0:79:21:ae:a2:7a:3b:
                    f8:ba:ab:2f:ba:5f:39:64:10:38:ec:b2:97:af:11:
                    db:71:45:1d:9d:e2:d0:4a:13:04:43:76:18:45:0d:
                    cf:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B3:C2:E3:CD:34:D4:69:AA:F3:34:35:34:A8:26:5C:1E:B8:10:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/dc48dc16-b6a6-3b9d-aa2a-b92d6cea9d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.crl

            X509v3 Authority Key Identifier:
                keyid:B7:49:5B:25:C2:C3:4E:84:0F:EC:3E:9F:7E:E4:B8:5A:C4:00:D6:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abdcc2e2-c99a-4bc5-8c10-f78c4275050a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.14.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:81:44:23:03:5e:1f:41:92:fb:ed:3e:07:2a:a0:20:96:c0:
         df:93:11:75:c9:de:35:25:b5:50:84:18:2d:25:1c:5a:d8:2b:
         b3:80:52:5b:b7:ee:78:5c:44:09:ed:c2:1d:e7:41:58:74:de:
         eb:89:73:68:31:58:5a:6f:79:ab:67:97:83:09:bd:ee:b1:27:
         62:7b:4b:54:8b:a5:c9:52:bf:94:8a:0a:12:7f:0b:1d:ff:e8:
         b8:7e:a0:43:4f:d5:65:c4:d0:25:b6:87:29:3f:39:bc:f1:dd:
         43:a7:4e:21:1e:4a:1b:e3:de:19:50:ea:9d:90:cc:1f:83:73:
         91:74:21:e6:a9:78:c9:45:cc:27:68:22:e2:b7:d5:9b:26:91:
         69:7d:2d:7a:2d:19:e7:ab:65:bc:0b:f9:fd:fc:4a:71:e3:d1:
         29:f0:4e:bd:5c:4d:fc:28:19:ee:f1:3c:da:2c:3c:5f:6b:19:
         4f:12:44:0c:c7:c4:5e:87:91:eb:9e:5e:92:48:56:a6:4d:68:
         8f:1a:23:64:a0:eb:9e:f8:bf:9b:55:9c:7f:50:57:ff:57:c6:
         76:ad:03:6c:11:1d:4f:9a:d9:ca:b8:b3:bb:ee:d1:a1:76:2f:
         2c:62:69:46:9f:cc:44:55:c0:f3:2e:c5:e7:1f:6b:b4:1f:34:
         a4:68:16:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:04:25 2025 by rpki-client