Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa
File:                     d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa (raw, json)
Hash identifier:          7GpfWcvXJBa6NCOzsPAa6WujNrhHsVG0NggTF54PDeQ=
Subject key identifier:   87:F6:D2:C9:19:94:8F:50:83:BA:AA:A6:A0:CE:1C:96:70:1B:FF:D3
Certificate issuer:       /CN=bc6884d6-b11e-4280-9c4c-8177287d9869
Certificate serial:       010D0C9F4328584B0746B0EFBF856D68221E4000
Authority key identifier: 15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     396982
IP address blocks:        74.120.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:b0:ef:bf:85:6d:68:22:1e:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6884d6-b11e-4280-9c4c-8177287d9869
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=cb2fc25d-96cc-4245-a1da-dd39d64e1195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:45:f5:6a:3f:22:6c:46:7f:1e:68:1d:3d:e4:
                    86:50:f1:f8:4d:62:13:48:11:08:67:02:fe:3a:44:
                    c9:e6:02:fc:99:2e:f2:3a:f3:e5:9d:f1:a8:f9:b8:
                    25:21:13:22:84:b8:00:f7:41:63:09:ea:22:c6:52:
                    e4:4d:28:43:96:91:3e:e1:8c:7e:b1:7b:2f:38:e0:
                    ed:aa:b1:92:e9:d1:b6:b2:63:79:cb:94:94:c7:6b:
                    0c:1d:c2:bf:f1:df:e1:83:60:ea:f6:d7:c2:71:e6:
                    ae:53:a9:65:c9:23:91:26:09:f7:7d:57:45:2b:8b:
                    39:50:bc:e5:70:3b:2c:cf:0a:5d:c3:55:e5:2c:06:
                    58:57:4c:1c:9e:74:70:43:08:af:2b:83:af:84:46:
                    49:7b:78:42:b7:79:ec:73:6c:6f:83:a5:9c:0e:ac:
                    8e:49:a2:b0:1a:f3:08:e5:f7:61:e8:69:10:8f:ba:
                    98:87:35:61:24:06:57:84:78:ed:a8:4b:7b:6e:b0:
                    f0:24:14:89:93:7d:91:98:ce:f3:23:df:27:b2:e7:
                    b3:46:af:27:3d:b2:07:54:6c:61:e8:3f:47:53:b6:
                    cf:8f:b5:2c:75:69:3f:5a:e7:d0:32:57:1f:14:fd:
                    08:6c:e7:97:5b:39:94:43:ff:b1:70:4c:e4:42:04:
                    c1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F6:D2:C9:19:94:8F:50:83:BA:AA:A6:A0:CE:1C:96:70:1B:FF:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/d18c2d05-c95b-3673-893c-f2c5d5ffa612.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869/bc6884d6-b11e-4280-9c4c-8177287d9869.crl

            X509v3 Authority Key Identifier:
                keyid:15:C8:EE:BC:17:5F:6B:10:C3:DC:7A:CF:57:D4:D1:F3:90:0F:0E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc6884d6-b11e-4280-9c4c-8177287d9869.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:9b:31:dd:94:9b:56:33:68:f4:80:64:7a:3a:73:f7:21:a3:
         4a:94:a6:cf:6c:92:da:e1:36:4a:e3:dc:70:cb:12:64:a8:2a:
         a2:85:d2:ce:95:f2:9f:1d:c6:df:c1:b2:01:df:c5:26:0d:36:
         a2:c7:8d:77:a1:b1:9c:b8:4f:91:8e:36:09:35:05:02:83:39:
         6a:14:a4:ad:4e:3b:9a:d5:1f:31:03:18:17:15:58:9e:6a:a4:
         10:11:22:72:3b:19:95:fe:75:66:d6:96:96:9a:00:cc:f8:7d:
         d6:99:78:49:ca:12:c9:34:42:e4:c7:34:ab:7b:7e:70:a6:39:
         16:fb:08:41:14:d6:89:f6:0b:7f:dd:7d:98:37:1e:25:c8:f6:
         64:1f:5c:dc:ae:80:12:69:68:8d:7a:7c:aa:bb:3b:55:41:0c:
         57:3d:c7:be:43:7d:04:64:e8:17:bd:37:c4:1a:ee:43:73:cc:
         ae:c4:4c:41:fd:f1:cd:c1:3c:0f:d0:b0:1b:46:57:a6:ab:36:
         13:e2:07:78:e6:24:ec:0c:2b:c7:70:1f:a8:76:c7:e4:21:a6:
         3d:10:39:21:d5:25:a7:f8:a3:02:b5:3d:f5:77:83:d1:ef:60:
         3d:48:1a:62:bb:58:52:0a:f8:d0:ab:e4:87:7a:0c:89:1a:ae:
         03:b3:7d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 21:05:35 2025 by rpki-client