Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5c105505-6c94-3c17-8a70-01babf353232.roa
File:                     5c105505-6c94-3c17-8a70-01babf353232.roa (raw, json)
Hash identifier:          U6V0de9IcbMRzrJJ8PuZRhfL1EcS74zuR1vCOAkxTXY=
Subject key identifier:   14:EB:9C:64:90:3A:1C:34:F5:3A:08:B5:87:70:C9:A9:7B:1A:2D:D9
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B1806CBD659818454747DACC0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5c105505-6c94-3c17-8a70-01babf353232.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     62610
IP address blocks:        128.14.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:cb:d6:59:81:84:54:74:7d:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=512ace8e-eb5b-4c45-90fa-cf74b8fd93fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:53:06:1c:51:15:a8:b2:bd:6c:21:31:98:74:
                    47:ae:20:85:f3:de:99:2a:80:cf:6b:12:89:b9:4f:
                    e2:2c:b1:04:5e:81:f2:c6:eb:38:e1:13:af:82:ca:
                    f0:f2:7f:a9:63:c1:56:01:34:b2:ca:60:70:4a:f8:
                    74:25:38:ef:11:b8:a3:ac:22:90:4a:6f:e0:28:54:
                    f7:bc:76:3e:3a:4a:cc:c3:e8:04:b3:53:80:82:29:
                    0a:12:52:f9:22:1e:66:29:25:46:28:bc:ca:fe:38:
                    fa:ad:87:27:eb:1b:8a:65:53:05:7a:c5:a2:73:52:
                    21:7a:e0:4e:c2:4b:a3:5f:d0:a5:ad:4d:c9:6e:f7:
                    8e:37:36:4c:71:b8:f6:0d:08:95:c0:b4:21:41:53:
                    6d:e3:01:1c:ce:26:d8:94:a2:b5:fd:21:a4:ef:50:
                    09:40:58:34:65:17:35:7e:b9:7c:2e:06:1b:38:9a:
                    de:e6:62:2a:6d:7d:1e:7c:27:f0:2e:8b:11:c9:3f:
                    61:b4:45:0f:f3:36:ba:2a:dd:5f:28:6a:ec:0b:40:
                    e6:bc:cf:8f:ef:b4:b5:77:d9:db:eb:c3:86:78:e0:
                    28:b1:96:42:e3:3f:37:cf:ed:d5:a2:c5:e5:74:3a:
                    b8:b6:5e:39:76:c7:27:d9:67:b7:ff:3a:31:b0:25:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EB:9C:64:90:3A:1C:34:F5:3A:08:B5:87:70:C9:A9:7B:1A:2D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5c105505-6c94-3c17-8a70-01babf353232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:3a:2a:1c:84:e7:31:29:0e:55:af:ec:3f:b8:b9:0e:8c:e2:
         55:0a:d7:ca:f0:de:d2:0a:28:e7:81:df:d6:ad:ee:07:b3:10:
         f9:08:0b:72:a2:95:77:51:10:fd:b0:97:61:90:ce:7e:bd:fa:
         08:5b:0c:ce:a7:f3:80:a0:22:cb:29:40:7b:69:16:6d:3b:fc:
         f6:a1:96:a5:b9:b7:a2:d8:f5:ac:b4:f0:45:8f:5e:b2:0d:03:
         a7:ab:8c:ef:91:94:2a:39:9e:2f:b0:42:8b:75:79:b7:7d:e4:
         05:71:2f:6a:10:43:2a:79:c4:bc:7e:85:19:09:89:f6:55:00:
         97:0f:20:1e:cc:4a:a8:d7:ea:fa:c7:a0:f5:53:c7:c4:4a:ef:
         9b:86:a9:ca:c3:eb:d7:e0:e5:a1:96:0e:76:51:a4:db:66:5a:
         3e:9e:09:82:14:66:90:3f:e3:c8:f7:fe:44:8f:e7:77:13:cb:
         48:19:8f:10:58:9e:6f:2b:14:08:b3:c3:77:d0:48:39:b5:56:
         fd:c3:0c:a3:6c:ac:f6:2f:f2:be:7b:ff:0f:3c:29:d0:1e:b4:
         10:31:89:b1:a8:26:30:ae:58:f9:d2:e4:39:7a:03:64:56:1d:
         22:81:86:b3:32:82:3c:8e:5c:99:1c:44:79:5f:f1:fa:91:ae:
         17:60:36:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 02:05:59 2025 by rpki-client