Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/1e927ac7-4b4c-3692-bca9-0fcde90a5965.roa
File:                     1e927ac7-4b4c-3692-bca9-0fcde90a5965.roa (raw, json)
Hash identifier:          ET+ZopNj0nf2Sl9bgf8+/bOZ7tMBwrps42jL6+LcZeE=
Subject key identifier:   F5:75:C3:49:C9:D4:BD:4A:55:08:09:5D:4F:AC:27:B2:AA:7F:16:8F
Certificate issuer:       /CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
Certificate serial:       010D0C9F4328584B6BC748CA867FABFBB421C040
Authority key identifier: BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/1e927ac7-4b4c-3692-bca9-0fcde90a5965.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     46208
IP address blocks:        67.214.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:48:ca:86:7f:ab:fb:b4:21:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=a2278346-9e18-4e8c-b461-fde6cdb7dbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:93:01:47:5c:4a:bc:73:72:9f:0f:2b:76:
                    c6:5d:f8:6a:b0:99:c9:07:0a:a2:0f:75:da:b6:42:
                    c2:64:1a:d2:35:86:13:28:ee:b1:a6:52:66:ba:be:
                    70:c0:a5:28:63:fc:a4:2c:6e:0c:90:5e:e3:ca:d9:
                    9f:c9:2d:7e:57:5f:d0:d2:2d:fe:e5:24:a2:2d:6d:
                    e9:63:d4:54:52:40:a1:fc:6d:b7:57:59:cd:d0:c9:
                    23:16:09:33:17:b0:68:db:22:3a:ad:9c:32:0e:1b:
                    7b:63:a1:4a:26:30:aa:6f:08:12:5f:9d:2a:9d:6b:
                    39:d5:f0:3a:a8:73:3d:2a:1e:90:62:a8:9f:f8:5f:
                    87:a9:77:9a:f0:e3:b9:0d:98:e2:2d:05:b1:7b:42:
                    16:e0:0c:f4:07:dd:c6:45:30:f9:bf:c7:bc:a0:51:
                    f0:f2:43:c1:3f:b1:bb:fb:6d:43:9b:5f:4d:ee:2e:
                    cb:ae:ed:06:f1:fb:73:35:e9:b7:6b:6c:74:b3:ee:
                    d3:79:fc:3f:78:cc:f7:23:25:2b:c9:33:87:b5:02:
                    32:57:de:d7:f3:87:a2:5a:b4:26:a7:8c:d7:98:a0:
                    f3:06:c2:39:3d:c9:1b:41:68:33:c4:0a:0d:a9:e4:
                    5a:88:6b:0b:a3:87:a1:68:29:fa:e6:84:7d:a0:e1:
                    3b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:75:C3:49:C9:D4:BD:4A:55:08:09:5D:4F:AC:27:B2:AA:7F:16:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/1e927ac7-4b4c-3692-bca9-0fcde90a5965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:1a:f7:3b:70:2e:d5:86:b6:1c:20:d4:c0:fc:4e:99:53:8a:
         9b:bd:43:9f:73:92:d9:a0:a0:75:53:26:24:db:42:ac:5f:5a:
         af:07:2f:e7:49:fc:23:23:08:b6:08:8c:83:fa:e8:10:42:08:
         2b:0a:15:45:a3:4c:d7:8c:88:dd:c8:10:e8:6a:65:92:bd:d2:
         5b:dd:7a:51:fd:86:22:16:0b:82:bc:67:33:ce:d6:82:6a:3f:
         12:ba:df:8c:26:47:ce:b1:b1:34:3c:af:0d:3e:76:b3:ae:45:
         3a:2f:e9:df:e5:9d:0d:c7:4b:2a:f7:29:d8:55:55:ed:24:bb:
         bf:c7:a0:1d:b1:34:bb:88:0c:7c:af:9f:f5:61:f7:6a:7c:93:
         04:ba:46:2e:7a:fe:0c:c9:81:52:82:a6:c6:73:b0:d3:b1:eb:
         22:72:c6:38:15:f7:c8:58:c0:4a:6c:19:b2:ea:85:2d:98:92:
         6b:6c:5a:3b:6d:74:ae:a3:0c:80:fc:6e:22:d0:b6:84:50:77:
         94:86:af:db:57:54:93:b9:93:fb:fa:64:66:34:03:94:22:e8:
         91:14:37:33:7d:5e:c1:44:82:4e:64:58:31:c7:3c:03:d1:6d:
         2d:df:23:a5:da:3f:ce:01:f6:5a:2d:3b:58:b3:6c:9b:b3:52:
         22:9a:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:37:52 2025 by rpki-client