Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b7106319-0a1b-3f25-8b17-f66c63c9d98f.roa
File:                     b7106319-0a1b-3f25-8b17-f66c63c9d98f.roa (raw, json)
Hash identifier:          usCNSe/Vt2S9OGA4eb7fVGzUdd0ZGuUWFuAzcKSjaCM=
Subject key identifier:   F2:8B:EF:7E:5D:CC:D4:21:F4:29:1D:91:4E:D5:8A:C1:B8:6C:A0:2C
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584B8603700C47F6C334FE2FE980
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b7106319-0a1b-3f25-8b17-f66c63c9d98f.roa
Signing time:             Tue 14 Oct 2025 22:32:57 +0000
ROA not before:           Tue 14 Oct 2025 22:32:57 +0000
ROA not after:            Mon 12 Jan 2026 23:32:57 +0000
asID:                     197555
IP address blocks:        67.214.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:03:70:0c:47:f6:c3:34:fe:2f:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Oct 14 22:32:57 2025 GMT
            Not After : Jan 12 23:32:57 2026 GMT
        Subject: CN=d3defd94-79ba-4112-8055-91ea8716f377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:bc:cd:ca:d1:d1:03:e4:c7:09:03:5d:fc:
                    a2:76:86:b6:cc:ad:cd:b9:9c:98:bd:99:ca:e7:80:
                    0a:fc:f7:ef:13:b7:e2:d4:ec:b8:58:4f:07:1b:c5:
                    3a:7c:d1:6c:c1:3b:95:09:2e:40:f0:a1:e7:a9:66:
                    6c:70:81:46:5b:86:5e:df:c5:fb:cb:c7:7a:69:0a:
                    b2:a8:b9:5c:e8:48:c2:4d:b7:28:01:0f:59:d0:0a:
                    8b:0d:0b:69:5c:c1:80:e8:d7:8e:5e:75:f2:b9:ed:
                    f1:94:db:5b:89:75:8e:b6:45:3f:a8:74:ce:ce:9f:
                    fd:77:16:98:60:26:6d:6f:56:a1:2a:5b:a5:60:b4:
                    20:cf:17:c8:8f:bd:25:d5:1f:73:34:27:db:65:f6:
                    f5:f9:a5:16:b8:48:f1:6b:50:0a:91:ae:73:09:1e:
                    51:86:9f:79:71:bc:1d:1c:62:32:c6:24:10:a3:60:
                    40:e2:73:22:e7:24:17:e4:1b:b7:49:bf:07:e2:26:
                    b2:cf:d6:1c:d1:3f:71:58:50:09:81:76:4b:cb:34:
                    97:59:b3:c9:cf:0b:7d:a3:81:35:6d:40:33:40:2a:
                    57:9e:96:f5:1f:d5:80:cd:61:da:88:71:61:bf:e8:
                    aa:89:51:2b:7d:e2:56:73:a9:25:af:98:c3:2c:65:
                    46:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8B:EF:7E:5D:CC:D4:21:F4:29:1D:91:4E:D5:8A:C1:B8:6C:A0:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b7106319-0a1b-3f25-8b17-f66c63c9d98f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e8:01:01:af:f4:db:42:b0:e0:53:dc:21:18:5d:ef:8b:1c:
         b1:f9:cc:d0:1b:42:06:38:42:28:8c:a3:9c:71:36:21:33:4c:
         e7:13:61:66:ef:f1:d0:7d:fd:de:a7:85:01:47:a4:aa:2d:df:
         a2:16:05:c3:e5:e3:1e:15:f1:11:75:1b:97:26:64:25:b9:db:
         29:53:26:90:e0:0d:49:4d:af:22:a6:3b:27:42:cf:fb:6d:72:
         f7:b8:d3:b8:0e:1d:93:86:0b:f8:e2:4d:d6:68:ea:01:85:ba:
         91:b8:45:80:7c:1d:48:1b:15:54:7a:c6:2c:71:79:98:59:40:
         e7:62:3f:0a:2f:a8:c5:72:58:5b:6c:1e:13:89:c4:01:f7:ab:
         ec:d5:56:bc:13:35:7d:34:31:d4:12:60:16:67:3e:da:bd:35:
         ad:f1:77:fd:8f:51:da:28:23:81:46:77:34:74:d1:48:c5:30:
         e9:68:09:ce:44:c1:8b:3a:28:d6:32:1c:8e:4a:bd:f3:88:7b:
         b7:db:54:9b:16:8e:35:31:cd:4a:f5:6c:63:60:60:52:35:9a:
         e2:36:35:42:86:9d:9e:ce:f4:f1:00:e4:17:ed:c7:c8:f7:f6:
         d4:74:de:d6:81:1c:8d:46:7e:73:68:5f:cf:96:a1:76:89:f2:
         fb:01:9b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:52 2025 by rpki-client