Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/85ede40a-8c0f-3b6a-a481-907e30a5fc3a.roa
File:                     85ede40a-8c0f-3b6a-a481-907e30a5fc3a.roa (raw, json)
Hash identifier:          rCqbAx2m/M8000Vk0jZnhzFZ1F0l3Gc/LcuOGm551Vs=
Subject key identifier:   F4:C0:62:D6:9F:7B:E1:25:A8:71:F2:3C:96:C5:FA:B6:AE:3D:35:5D
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285845D933D1D463F5DA9F73F408C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/85ede40a-8c0f-3b6a-a481-907e30a5fc3a.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     62610
IP address blocks:        128.14.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:d1:d4:63:f5:da:9f:73:f4:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=d52d1ef0-85fb-4514-a0e8-277cea0e68f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:19:00:52:2e:60:86:b8:d2:85:99:0f:ea:
                    3a:02:a8:9e:0a:eb:f5:3c:a1:8a:c5:68:d0:e9:15:
                    42:b2:9d:b0:0a:7c:f6:57:14:e8:8b:5b:85:fc:9b:
                    7e:01:05:40:83:fe:10:a9:43:de:ad:82:b7:2b:14:
                    3b:35:36:15:5a:01:d0:6b:ed:0e:12:ba:52:3c:70:
                    d4:84:c3:f2:6b:a4:e8:ee:2c:d8:96:ae:09:7d:08:
                    37:57:99:37:74:38:c0:fe:f8:31:64:98:6a:ed:66:
                    2d:21:9b:f3:95:e9:62:88:a5:93:63:af:e1:52:1a:
                    5b:f2:5f:f7:b9:56:ef:ef:31:a9:de:86:ed:02:54:
                    70:1e:5d:ff:fc:3b:8e:69:c9:62:c7:0f:38:9f:53:
                    8a:84:32:f7:36:33:3c:43:b2:24:46:2b:6e:9a:38:
                    d0:66:0b:fe:6c:a0:e4:85:83:05:4a:9c:4e:68:06:
                    12:0b:71:8a:b6:c8:25:e3:44:24:a8:da:e2:b3:8e:
                    62:a1:cf:bb:01:02:df:c7:1f:07:73:f5:df:2d:44:
                    19:c8:2c:02:c3:b0:a1:3b:bf:23:c2:e8:cc:57:ae:
                    55:f6:58:ae:df:1b:c1:8e:cf:ec:e5:7a:92:46:00:
                    43:9d:de:ae:dd:da:72:a5:59:f6:64:2d:fe:54:6c:
                    ca:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C0:62:D6:9F:7B:E1:25:A8:71:F2:3C:96:C5:FA:B6:AE:3D:35:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/85ede40a-8c0f-3b6a-a481-907e30a5fc3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:b2:08:9a:73:d9:ce:af:83:8d:80:89:b5:35:40:e7:35:2d:
         69:48:11:68:f4:70:47:2c:5d:b9:c3:89:75:d7:4d:c1:25:bf:
         a5:7f:ce:e4:5a:3f:79:81:7c:53:5b:c8:5d:99:3f:97:bd:7f:
         74:9e:62:ab:70:57:77:a1:cc:d2:63:fa:50:7f:4f:99:4e:ea:
         cf:09:ab:61:46:b4:52:82:70:10:c5:a5:e7:e5:2a:cc:82:4d:
         b0:ff:ae:e0:d6:b5:26:e4:36:7a:b7:c6:e5:80:b1:85:77:68:
         54:cd:0b:ae:dc:f2:75:b5:70:6a:e7:ee:7a:7d:a9:81:70:76:
         d3:95:eb:14:12:ef:67:b4:5d:45:aa:78:2f:b7:c3:4c:16:eb:
         96:65:e9:1b:ae:a3:ce:7d:c6:00:b2:5d:f3:28:b1:13:57:35:
         23:9e:3a:05:21:a5:84:06:a1:ab:d1:8a:0d:d2:92:f6:bc:99:
         bd:23:f2:fd:11:e6:6e:39:7c:d9:ee:4e:26:cb:a3:5a:14:53:
         47:c3:bb:52:6e:32:27:9f:90:04:83:a3:ce:34:9a:6f:02:ee:
         68:db:38:fa:48:30:fd:44:7a:25:66:c7:1d:65:ab:0e:f8:e4:
         7b:7f:2b:7c:d3:f8:59:66:41:e2:49:b8:61:da:f6:ce:0c:28:
         98:f8:65:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 07:39:55 2024 by rpki-client on console-ams.rpki-client.org