Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b401c208-0f07-32b6-98e9-ac4862bc0ceb.roa
File:                     b401c208-0f07-32b6-98e9-ac4862bc0ceb.roa (raw, json)
Hash identifier:          S3a/sdCn4lHtUltNTZIi9eRN9Im3Y5RVsUqnay7dxTk=
Subject key identifier:   32:1E:E4:2D:CE:8A:7D:5F:CC:67:A4:03:EE:A5:77:03:DE:86:0A:35
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858489340A951F90997E4CAF1F700
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b401c208-0f07-32b6-98e9-ac4862bc0ceb.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     62610
IP address blocks:        128.14.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:a9:51:f9:09:97:e4:ca:f1:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=62e1da1c-aa9d-418b-aea5-52161db87adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1e:a9:6f:95:3e:7f:cf:d1:66:7f:73:d9:4a:
                    ff:fb:65:47:dc:64:3d:db:f8:1d:16:d8:4c:1e:1f:
                    58:b6:45:1e:71:7e:3e:a7:5a:59:bd:1c:f9:c6:be:
                    7a:61:42:cd:4f:e9:4f:af:7b:47:43:ab:62:2c:18:
                    8c:8f:b2:ad:8f:51:a6:6a:85:ab:c0:60:e7:e6:71:
                    0d:f2:b9:c8:fb:23:f5:64:ab:1f:73:44:8b:ce:fa:
                    6c:cf:ec:7f:35:1e:c5:e8:87:4d:6f:5d:6d:1a:c7:
                    99:ea:32:00:2d:8f:b5:8c:df:74:02:ac:bc:5a:4e:
                    a5:77:2d:59:dc:02:b4:ed:7f:e0:8a:57:e2:7c:c9:
                    99:d1:e5:9e:90:95:a8:64:ef:a8:37:7d:bf:93:fb:
                    03:ea:0f:96:32:c6:09:3a:93:e2:62:bc:9c:77:16:
                    52:bc:80:f0:1b:38:f7:0c:3d:34:8b:95:66:4f:4f:
                    70:fc:cf:d0:22:45:6b:f3:27:48:3d:d8:40:a9:ec:
                    38:cd:27:75:10:13:d1:5d:55:2b:6e:bd:56:c9:2f:
                    24:88:5c:47:57:12:50:17:b3:ef:f8:b4:e4:3d:b6:
                    ca:14:b1:9a:76:51:fc:39:e9:3d:af:72:06:da:84:
                    75:0b:bf:f8:8c:0f:4e:a0:70:9b:8f:2c:97:58:70:
                    88:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1E:E4:2D:CE:8A:7D:5F:CC:67:A4:03:EE:A5:77:03:DE:86:0A:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/b401c208-0f07-32b6-98e9-ac4862bc0ceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:6a:0d:07:af:62:b9:ff:98:ad:67:5d:66:30:e0:fc:7e:09:
         a8:d0:c0:61:aa:78:1e:7f:86:b4:7b:4d:b2:9b:70:cc:d4:1d:
         a2:f7:66:72:64:14:d0:89:0d:bf:a1:84:d8:9e:28:c3:a7:30:
         b5:32:f2:02:23:99:e3:1e:2b:32:d5:09:ad:33:ad:97:25:91:
         d0:ac:59:50:a7:03:9d:07:7c:74:41:d8:7b:02:9c:1d:bc:86:
         a7:9c:18:46:e0:4a:d3:46:47:3d:fc:36:61:68:56:72:7b:5a:
         0b:f2:c7:ec:e2:11:72:0e:cf:50:19:9b:9c:97:fc:50:c4:e5:
         4b:aa:91:59:77:40:73:29:b2:c1:9c:59:dd:b9:09:53:20:25:
         f7:5b:50:6c:48:f8:dd:3a:b0:43:40:9a:3a:58:d9:cf:65:d9:
         0d:d0:c5:b6:8c:83:36:8d:16:7e:25:fb:60:b5:75:c3:7c:16:
         b0:6f:a9:f0:b4:7f:a6:c6:82:c5:5d:24:76:c2:21:b8:c6:0c:
         db:18:73:ae:ee:ea:d1:b7:fc:7e:85:ad:50:b3:92:6b:e1:35:
         85:e6:9e:f5:db:13:ee:1d:6a:1c:fb:3d:30:3f:f8:ff:57:2a:
         d4:8b:a1:23:28:79:ad:fc:62:da:71:53:cf:76:1a:df:4e:dd:
         f3:c1:39:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQKlR+QmX5Mrx9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
NjJlMWRhMWMtYWE5ZC00MThiLWFlYTUtNTIxNjFkYjg3YWRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR6pb5U+f8/RZn9z2Ur/+2VH3GQ92/gdFthM
Hh9YtkUecX4+p1pZvRz5xr56YULNT+lPr3tHQ6tiLBiMj7Ktj1GmaoWrwGDn5nEN
8rnI+yP1ZKsfc0SLzvpsz+x/NR7F6IdNb11tGseZ6jIALY+1jN90Aqy8Wk6ldy1Z
3AK07X/gilfifMmZ0eWekJWoZO+oN32/k/sD6g+WMsYJOpPiYrycdxZSvIDwGzj3
DD00i5VmT09w/M/QIkVr8ydIPdhAqew4zSd1EBPRXVUrbr1WyS8kiFxHVxJQF7Pv
+LTkPbbKFLGadlH8Oek9r3IG2oR1C7/4jA9OoHCbjyyXWHCIqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDIe5C3Oin1fzGekA+6ldwPehgo1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvYjQwMWMyMDgtMGYwNy0z
MmI2LTk4ZTktYWM0ODYyYmMwY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA5SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVqDQevYrn/mK1nXWYw4Px+CajQwGGqeB5/hrR7TbKbcMzUHaL3ZnJk
FNCJDb+hhNieKMOnMLUy8gIjmeMeKzLVCa0zrZclkdCsWVCnA50HfHRB2HsCnB28
hqecGEbgStNGRz38NmFoVnJ7Wgvyx+ziEXIOz1AZm5yX/FDE5UuqkVl3QHMpssGc
Wd25CVMgJfdbUGxI+N06sENAmjpY2c9l2Q3QxbaMgzaNFn4l+2C1dcN8FrBvqfC0
f6bGgsVdJHbCIbjGDNsYc67u6tG3/H6FrVCzkmvhNYXmnvXbE+4dahz7PTA/+P9X
KtSLoSMoea38YtpxU892Gt9O3fPBOUU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:49 2025 by rpki-client