Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4e61d2a2-1b38-3f54-b4f1-8da351e02331.roa
File:                     4e61d2a2-1b38-3f54-b4f1-8da351e02331.roa (raw, json)
Hash identifier:          +cf8PPqi2Xn3ZaQLU6ArSPJ4edMO1E5ugiGcC3KWRsI=
Subject key identifier:   A3:C9:75:FA:57:AA:4D:EC:F1:9D:8C:1C:85:D7:6F:B4:14:6D:EB:C3
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B1806C3B31607BEF2240E8900
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4e61d2a2-1b38-3f54-b4f1-8da351e02331.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     62610
IP address blocks:        128.14.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c3:b3:16:07:be:f2:24:0e:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=6e11ee3a-6797-4ef4-a600-d3f0cb63b472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:28:a4:d3:1e:dd:1a:c7:07:32:91:f2:e0:
                    46:0b:4a:fb:4f:85:b8:30:8e:0b:b6:47:ca:fb:6f:
                    1a:84:fb:09:33:4e:de:43:22:ce:48:51:18:4f:ee:
                    69:e4:80:d5:47:43:3b:63:69:9c:d5:cb:4f:d1:ce:
                    98:35:44:13:b6:02:86:74:2a:22:0b:e7:90:70:82:
                    53:41:f5:2a:12:3f:f4:7e:dc:fd:64:b3:29:67:ae:
                    57:aa:e7:8e:27:20:c0:37:1a:82:c3:89:69:36:3b:
                    ff:8a:b4:12:93:d9:11:92:51:e1:ab:31:70:76:eb:
                    6e:31:3a:93:d4:72:83:61:f4:c4:5b:78:0d:c5:46:
                    45:bb:b4:eb:cf:d3:51:cd:b3:b9:23:3e:ea:ac:88:
                    fc:bb:c6:15:ee:25:10:93:8d:33:ff:8b:ce:70:1a:
                    21:d0:0f:20:9f:9f:48:29:98:4b:1a:76:35:cf:52:
                    dd:54:1b:13:8b:3d:a5:58:4e:92:21:3c:5e:e1:58:
                    a1:7c:98:36:8e:80:f8:53:f7:64:f3:e1:4e:17:5c:
                    7f:ec:6e:fa:79:55:8c:f2:90:12:6f:41:38:df:91:
                    9f:1e:3d:62:c5:47:51:25:99:dd:45:da:bb:8d:af:
                    ff:5e:e2:08:8f:b9:b5:7c:1d:0d:e2:f3:11:28:f3:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C9:75:FA:57:AA:4D:EC:F1:9D:8C:1C:85:D7:6F:B4:14:6D:EB:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4e61d2a2-1b38-3f54-b4f1-8da351e02331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:6e:6c:b2:0e:be:4d:ce:b4:96:75:6e:22:86:ef:73:68:a4:
         08:8e:dd:d4:b9:48:1b:cd:27:d7:e9:fd:b1:67:f3:1e:f2:0d:
         22:ca:b1:02:ed:1e:9c:b3:81:66:bb:7f:28:70:fe:39:5b:cd:
         59:59:af:d4:07:55:d0:6b:bd:bd:fc:00:c0:27:fb:c3:41:8c:
         de:82:5a:16:cf:14:94:f9:d0:e9:7f:e8:b6:51:66:ff:4b:4a:
         6a:e7:d1:40:90:23:40:0a:f4:ef:5f:08:20:b3:9e:64:7a:a2:
         17:1a:fc:63:8d:7a:bf:63:e6:0a:60:9a:ed:08:b7:f2:1c:39:
         2e:1a:dd:8b:bc:b0:87:e3:6f:33:a3:c1:cc:94:69:fd:e0:30:
         1a:99:a6:4e:67:49:a9:3d:8a:5b:73:ad:6e:ca:d7:b8:8b:cb:
         74:80:b7:1e:9f:ee:69:3f:0b:4c:7f:5f:ef:4b:4c:11:5b:ef:
         11:a5:52:5f:fb:4d:e1:68:49:08:fc:0c:de:43:90:f4:7d:86:
         c0:29:d2:41:ae:61:cd:74:2d:e5:ce:12:fd:dc:55:1e:80:df:
         2a:09:15:95:72:5c:21:9a:87:63:0d:a7:51:90:72:71:1a:51:
         c5:16:5c:73:9a:e7:a8:60:19:f2:f1:c3:47:01:1a:7c:ed:ae:
         ff:9e:25:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsOzFge+8iQOiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
NmUxMWVlM2EtNjc5Ny00ZWY0LWE2MDAtZDNmMGNiNjNiNDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXEopNMe3RrHBzKR8uBGC0r7T4W4MI4LtkfK
+28ahPsJM07eQyLOSFEYT+5p5IDVR0M7Y2mc1ctP0c6YNUQTtgKGdCoiC+eQcIJT
QfUqEj/0ftz9ZLMpZ65XqueOJyDANxqCw4lpNjv/irQSk9kRklHhqzFwdutuMTqT
1HKDYfTEW3gNxUZFu7Trz9NRzbO5Iz7qrIj8u8YV7iUQk40z/4vOcBoh0A8gn59I
KZhLGnY1z1LdVBsTiz2lWE6SITxe4VihfJg2joD4U/dk8+FOF1x/7G76eVWM8pAS
b0E435GfHj1ixUdRJZndRdq7ja//XuIIj7m1fB0N4vMRKPMUDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKPJdfpXqk3s8Z2MHIXXb7QUbevDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNGU2MWQyYTItMWIzOC0z
ZjU0LWI0ZjEtOGRhMzUxZTAyMzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA4MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF1ubLIOvk3OtJZ1biKG73NopAiO3dS5SBvNJ9fp/bFn8x7yDSLKsQLt
HpyzgWa7fyhw/jlbzVlZr9QHVdBrvb38AMAn+8NBjN6CWhbPFJT50Ol/6LZRZv9L
Smrn0UCQI0AK9O9fCCCznmR6ohca/GONer9j5gpgmu0It/IcOS4a3Yu8sIfjbzOj
wcyUaf3gMBqZpk5nSak9iltzrW7K17iLy3SAtx6f7mk/C0x/X+9LTBFb7xGlUl/7
TeFoSQj8DN5DkPR9hsAp0kGuYc10LeXOEv3cVR6A3yoJFZVyXCGah2MNp1GQcnEa
UcUWXHOa56hgGfLxw0cBGnztrv+eJTQ=
-----END CERTIFICATE-----
Generated at Sun Sep 7 01:57:49 2025 by rpki-client