Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4e61d2a2-1b38-3f54-b4f1-8da351e02331.roa
File:                     4e61d2a2-1b38-3f54-b4f1-8da351e02331.roa (raw, json)
Hash identifier:          Vvi0UF9gWti+X1lEdVEBL+d6UDauxilEisEpduoEHG8=
Subject key identifier:   61:1C:17:FC:29:A2:CB:BA:C6:FE:F9:D6:9B:1F:9B:B5:B5:90:DA:33
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584957F3F4147465D514C9C74128
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4e61d2a2-1b38-3f54-b4f1-8da351e02331.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     62610
IP address blocks:        128.14.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:f4:14:74:65:d5:14:c9:c7:41:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=99502bb2-8745-4877-b9a6-523ffb472bbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:40:ea:d5:89:56:ad:90:19:9a:37:a2:ca:be:
                    6e:0a:30:f3:cc:3e:77:21:94:0b:15:a7:32:13:45:
                    d2:2e:42:0a:fa:b8:35:b0:10:76:69:92:a9:eb:e3:
                    69:e7:7c:3f:53:24:e7:6c:9e:ef:2a:a0:ec:cb:f4:
                    54:f1:b0:86:a3:df:9f:62:38:7e:07:22:f3:bc:bb:
                    35:12:9c:ca:11:f5:04:be:e4:9d:3c:37:b7:00:cf:
                    59:de:5b:33:b7:cf:df:83:c1:20:54:ee:d5:25:22:
                    47:52:08:11:24:d4:65:b2:80:46:6b:9f:c6:e8:af:
                    d4:1d:5e:14:dd:eb:09:29:f4:08:fd:aa:9a:f1:90:
                    b2:f5:4a:6f:9f:27:0d:19:ce:01:dc:62:d4:5d:cc:
                    ec:76:da:77:f6:84:1f:8a:6e:fd:fa:f5:1e:20:62:
                    a7:85:db:d3:2f:fd:5e:cc:12:02:cc:63:ba:3b:d9:
                    c6:8f:86:33:2e:99:e9:30:53:07:5b:8c:0a:ff:63:
                    34:58:3f:b0:78:d5:db:8f:19:9d:38:68:c1:13:80:
                    10:2d:07:cf:a6:b0:1c:f2:ea:6b:eb:5f:b6:84:95:
                    1c:5d:81:dc:7f:92:4c:34:32:8d:8b:b4:85:ad:51:
                    77:99:0f:e1:9e:45:c0:bc:9c:50:30:b1:62:b5:cc:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1C:17:FC:29:A2:CB:BA:C6:FE:F9:D6:9B:1F:9B:B5:B5:90:DA:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/4e61d2a2-1b38-3f54-b4f1-8da351e02331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f0:61:10:8e:40:a1:b5:84:18:42:3d:b4:33:3c:5e:27:58:
         b9:66:be:5b:0b:92:09:55:7e:1a:8c:45:85:ee:30:a6:15:93:
         77:be:1e:39:25:27:47:03:e1:6e:f9:c0:03:24:e4:4e:2d:6b:
         04:e4:4b:02:e8:32:d2:0f:28:d0:77:6e:45:97:4b:4a:79:c3:
         86:7e:85:17:ab:ca:1c:c8:91:ba:0b:fe:d3:4c:b7:81:0a:a3:
         30:da:05:08:5c:ab:a9:f3:a4:b4:d7:44:bc:00:ac:03:17:e5:
         be:78:7d:dc:62:4d:f4:23:6b:01:62:ad:57:cb:c9:d5:8b:bd:
         b3:7b:f1:bd:9a:44:d5:a2:26:2b:6f:f4:48:7a:20:33:b4:d7:
         26:91:9c:97:33:7d:06:49:4b:8f:95:a0:00:39:32:69:a0:dc:
         71:f0:f7:26:33:30:a4:1d:87:f1:ff:8f:3c:ac:0b:9a:8b:1e:
         29:60:46:24:e3:bb:a3:d6:4b:ec:8f:8a:90:5e:9e:fc:98:3f:
         ca:28:bf:6a:6c:01:a0:9b:c6:8a:fd:25:74:95:6f:12:d8:41:
         1a:aa:bf:72:a7:de:06:3f:f0:5f:ad:8f:fd:48:96:c8:b3:43:
         78:1b:0c:db:ef:bc:a8:f9:e8:71:1c:2b:c7:b3:87:e6:43:3e:
         e5:db:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:44 2025 by rpki-client