Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa
File:                     ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa (raw, json)
Hash identifier:          rU+zW5pP+mpHvd9dK94HeNEtJJtCUFB7iI6gLJj8fWo=
Subject key identifier:   8E:46:F4:66:16:43:08:3F:BC:87:F1:03:08:F0:9B:31:8D:AD:60:9B
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584957F3F4A396A66AB155FEB280
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     62610
IP address blocks:        128.14.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:f4:a3:96:a6:6a:b1:55:fe:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=6685ae73-15f0-49e8-a22f-7d02d390e73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b4:0f:83:8f:6c:79:9b:4a:ca:c8:79:00:62:
                    3e:77:cc:9d:20:f9:3b:67:35:9b:9a:12:a0:c9:1e:
                    b4:43:54:2b:a3:67:ee:a7:38:b4:a6:ff:1e:b9:e1:
                    10:44:ab:b1:eb:33:7d:31:44:26:2a:45:41:34:07:
                    0e:7a:4a:2c:6d:63:c7:1b:b0:ba:bc:55:c5:7a:dc:
                    0c:7e:26:63:68:3a:7d:ad:4d:b6:26:0c:84:d9:d2:
                    48:38:6d:29:03:42:09:81:10:d7:1c:20:ff:ed:37:
                    be:6c:81:c7:af:4d:84:b7:0c:d3:dc:67:8c:ef:5f:
                    0f:d9:ee:21:02:3a:a7:47:8d:af:2a:02:1c:8e:34:
                    74:79:21:a7:4e:7f:f8:d6:53:b9:9d:4f:73:30:d5:
                    5c:6b:4b:b9:4c:3c:ed:cf:01:14:c3:83:fb:64:27:
                    2f:ad:70:83:13:86:6b:ec:d6:06:4c:24:8e:83:7d:
                    fa:97:9a:f0:33:fd:68:c2:b9:80:41:08:02:3a:cf:
                    a3:4a:bf:8f:fe:34:b8:41:5e:1c:be:72:8a:83:a6:
                    e3:f4:d6:d8:1f:d1:9b:6c:41:dc:64:fe:64:ef:8e:
                    e3:d6:9e:99:05:9f:57:36:f5:f5:80:48:55:5b:44:
                    d1:9d:72:3e:06:8f:eb:4b:e4:18:63:58:8a:7b:ae:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:46:F4:66:16:43:08:3F:BC:87:F1:03:08:F0:9B:31:8D:AD:60:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:09:0a:12:06:bf:6d:49:37:02:ac:a3:53:0e:e2:21:3e:01:
         6f:d3:cb:6c:80:12:3c:78:9d:2f:71:35:09:ec:b9:11:df:5e:
         c1:d3:6c:3a:32:36:b9:76:47:57:87:3d:dd:19:7e:2f:a6:ca:
         5c:89:99:4c:f8:9c:4c:e2:85:79:f3:4c:c7:9d:bd:33:79:89:
         b7:dc:88:d3:53:da:3b:9f:7f:01:c8:81:62:bd:0d:6a:b0:60:
         1d:d0:28:8a:6e:71:7d:2f:61:2e:af:1f:fe:35:56:b2:e1:63:
         8b:35:c2:63:46:e4:26:bd:80:8a:a4:6f:74:d5:a1:b6:8e:95:
         98:e4:f2:78:9c:12:d2:aa:a2:5c:af:e2:b6:4e:25:15:d4:50:
         b8:9d:f4:8f:32:77:64:f5:c5:ca:e5:a5:f0:d5:46:13:2b:2d:
         c3:2d:1a:99:d4:16:4b:5d:c2:17:62:01:35:7e:37:1a:33:fd:
         fd:69:57:fd:e2:64:79:10:8d:bc:3c:91:81:1c:3b:e9:34:05:
         c1:e6:b5:53:54:03:36:10:69:49:2e:0a:d4:6f:88:26:bd:34:
         c1:ab:1f:f3:ad:cf:21:9a:be:23:95:1d:af:5f:93:3c:71:d7:
         6f:2d:b2:5f:79:ba:06:16:01:51:c6:26:c6:0f:cd:f1:3b:68:
         69:46:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:40 2025 by rpki-client