Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa
File:                     ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa (raw, json)
Hash identifier:          iJ2fes2THTrANNcTA1r93n+3FBg/jam8CNTeRA05w7o=
Subject key identifier:   41:F4:70:AA:FA:DD:55:08:7B:A9:FF:6F:CD:4A:68:FD:73:6F:CD:74
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B1806C441A0D8B0F3DB638340
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     62610
IP address blocks:        128.14.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c4:41:a0:d8:b0:f3:db:63:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=04a06031-f20a-4bcf-88dd-df21c54e75ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:47:d8:3f:1f:e4:57:ef:32:7f:d4:81:bd:59:
                    1a:93:01:87:c6:1a:e8:a9:62:da:6c:73:99:53:c4:
                    67:62:23:a8:b6:d4:80:56:49:c3:02:65:b7:d8:9e:
                    72:2a:f6:f1:3f:8d:da:45:f4:00:c6:ef:c6:4d:a8:
                    53:a5:83:0c:c2:0c:78:4e:98:e7:b4:f2:aa:c8:c5:
                    bc:91:ae:e4:d7:7d:a7:d0:03:5c:64:34:07:a0:78:
                    25:f2:ec:66:4a:17:71:e4:c0:95:e2:4e:b5:68:57:
                    ac:70:23:7c:df:f7:cc:8c:29:5f:03:b1:63:25:0c:
                    06:c2:a6:75:35:cc:fd:8f:0e:84:f0:71:b6:56:75:
                    bd:be:29:59:30:09:5e:c0:9b:fa:01:fa:fe:ed:b7:
                    a6:0d:5b:c5:1b:9d:a1:27:d0:4b:3d:13:b3:63:0a:
                    3a:6a:22:36:21:3d:83:3a:49:f7:6c:b1:63:4d:82:
                    10:5a:8f:8a:7b:55:13:c7:19:cb:c7:4e:f6:90:2b:
                    d7:57:42:dd:6d:e6:31:ff:f3:6b:f3:51:ec:fd:4e:
                    8a:81:2b:39:52:74:5e:14:1f:61:c6:3f:ec:9d:3d:
                    ae:9e:a0:c4:2f:2f:a4:06:a4:cc:ab:2a:b1:ef:bb:
                    43:6b:88:36:71:78:53:a8:1b:6b:9d:ab:ca:87:05:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F4:70:AA:FA:DD:55:08:7B:A9:FF:6F:CD:4A:68:FD:73:6F:CD:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:45:a5:33:6f:78:dd:bb:f5:17:f0:e8:7f:d5:ce:f0:83:63:
         c3:c5:fc:e7:b5:5f:38:53:a4:d1:8a:12:b1:ac:65:09:83:5f:
         ad:ca:2b:61:36:7d:d7:28:d1:6d:23:58:61:97:12:d7:6a:ad:
         bf:75:4e:71:e9:9b:dd:41:6c:54:4e:6d:7d:f7:e8:63:2e:20:
         33:10:39:35:07:77:19:86:8f:1e:bd:89:48:b3:72:24:59:d7:
         81:27:15:5b:14:ea:7a:6c:3b:83:ce:12:30:d4:21:bf:bc:9a:
         7f:45:b1:31:72:d7:a8:c8:f5:e0:ad:51:6d:4d:22:f0:80:75:
         2a:26:93:c0:5c:11:4d:6c:24:3e:50:fc:e6:47:44:d4:97:61:
         d2:95:8d:ab:aa:d7:a2:0d:eb:6d:12:2d:d9:ac:33:3a:b2:5e:
         3c:7e:f0:c9:f7:e7:39:71:af:2e:94:d7:cf:d6:36:54:1f:d8:
         a4:24:7a:b9:65:ab:54:b0:8b:54:00:00:4d:8e:a6:96:df:98:
         a6:dd:68:22:4b:62:dd:aa:26:e4:f2:3d:50:2c:87:51:f1:04:
         2b:51:c2:97:70:b5:a7:e5:30:4b:01:ae:65:56:ef:46:5b:e3:
         40:47:02:fc:ae:9e:21:1e:02:c9:b5:f2:8a:08:7a:0e:09:d0:
         3f:ca:91:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBsRBoNiw89tjg0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
MDRhMDYwMzEtZjIwYS00YmNmLTg4ZGQtZGYyMWM1NGU3NWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEfYPx/kV+8yf9SBvVkakwGHxhroqWLabHOZ
U8RnYiOottSAVknDAmW32J5yKvbxP43aRfQAxu/GTahTpYMMwgx4TpjntPKqyMW8
ka7k132n0ANcZDQHoHgl8uxmShdx5MCV4k61aFescCN83/fMjClfA7FjJQwGwqZ1
Ncz9jw6E8HG2VnW9vilZMAlewJv6Afr+7bemDVvFG52hJ9BLPROzYwo6aiI2IT2D
Okn3bLFjTYIQWo+Ke1UTxxnLx072kCvXV0LdbeYx//Nr81Hs/U6KgSs5UnReFB9h
xj/snT2unqDELy+kBqTMqyqx77tDa4g2cXhTqBtrnavKhwX4YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEH0cKr63VUIe6n/b81KaP1zb810MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvY2EwMjZjZWQtYWIyYi0z
ZmE0LThhZWMtMmI5NWE5NTlmNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA48MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFVFpTNveN279Rfw6H/VzvCDY8PF/Oe1XzhTpNGKErGsZQmDX63KK2E2
fdco0W0jWGGXEtdqrb91TnHpm91BbFRObX336GMuIDMQOTUHdxmGjx69iUizciRZ
14EnFVsU6npsO4POEjDUIb+8mn9FsTFy16jI9eCtUW1NIvCAdSomk8BcEU1sJD5Q
/OZHRNSXYdKVjauq16IN620SLdmsMzqyXjx+8Mn35zlxry6U18/WNlQf2KQkerll
q1Swi1QAAE2OppbfmKbdaCJLYt2qJuTyPVAsh1HxBCtRwpdwtaflMEsBrmVW70Zb
40BHAvyuniEeAsm18ooIeg4J0D/KkUo=
-----END CERTIFICATE-----
Generated at Sun Sep 7 01:58:23 2025 by rpki-client