Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d53c2ae-4922-3e33-8102-06de1e662cd3.roa
File:                     0d53c2ae-4922-3e33-8102-06de1e662cd3.roa (raw, json)
Hash identifier:          hVIVypxFG+DNnOoGuaywdKx66kCTyHlioMK6Op28LLE=
Subject key identifier:   6A:7B:5D:F9:8B:9D:4B:DD:EC:98:9B:91:4E:85:3E:E9:E5:EB:A5:81
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B1806CBA4781BED4739A26B40
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d53c2ae-4922-3e33-8102-06de1e662cd3.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     21859
IP address blocks:        128.14.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:cb:a4:78:1b:ed:47:39:a2:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=6cd99f99-5644-4507-b2aa-e3f6d75f831a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:72:99:8b:c6:39:9e:79:34:8e:81:ec:d8:90:
                    2f:17:c3:2e:b8:2e:53:cd:98:2c:b8:65:df:38:e9:
                    7d:1d:fe:29:05:7b:97:bf:c7:27:29:eb:36:15:f8:
                    07:b6:d4:5a:53:19:12:c5:10:e3:82:c5:f4:5c:08:
                    51:bb:bf:48:09:07:56:95:c7:50:43:4b:f8:a3:1f:
                    5c:7d:a5:e3:d6:28:7f:24:61:2e:de:3c:25:fc:a9:
                    3b:cb:01:63:ba:f6:4f:af:ce:db:4e:5a:c6:23:5e:
                    93:93:45:0c:ee:ea:65:eb:0f:1b:a0:01:15:2b:ba:
                    3f:44:61:97:5d:28:38:e4:5d:1d:b8:19:57:79:c7:
                    1c:d3:4d:35:50:3e:a7:4d:87:ad:08:20:3d:41:51:
                    e1:39:6a:f3:24:51:db:72:8e:ae:c2:18:2c:74:dd:
                    8a:b8:ca:ff:6a:3c:3b:19:bd:5f:31:48:5c:64:a0:
                    5c:ae:95:65:47:94:a6:49:a6:f5:bc:7f:de:e3:45:
                    a3:fc:f2:72:87:87:93:2f:dd:b8:5a:5c:b0:88:58:
                    8a:ad:9a:6d:10:0e:bc:20:14:a3:c6:85:2e:a8:03:
                    ff:93:1e:39:1f:b1:12:67:08:34:3d:1e:4d:19:06:
                    51:3d:95:96:26:ff:93:67:9b:b3:53:29:62:db:f8:
                    e0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:7B:5D:F9:8B:9D:4B:DD:EC:98:9B:91:4E:85:3E:E9:E5:EB:A5:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d53c2ae-4922-3e33-8102-06de1e662cd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:89:2b:2f:75:b2:ee:da:5a:ae:c6:9c:ee:61:c7:2b:4e:54:
         17:e4:ec:6f:dd:a7:1f:48:b0:da:ab:bf:5f:00:95:af:89:14:
         95:5a:ce:44:b8:55:78:63:b9:18:06:65:d3:1d:c1:95:4b:88:
         49:f1:4b:a7:ce:a7:9f:23:b0:35:da:27:48:e7:15:7b:8a:6a:
         8f:08:e7:62:2b:bb:04:9a:d9:d8:09:e7:95:ad:9a:bf:6c:7b:
         2e:ab:5b:1b:2e:a1:8f:df:41:a3:6a:2c:ca:f0:84:d1:b7:58:
         6f:b7:a9:f8:fc:d5:3e:32:be:a5:6e:bd:3d:76:86:32:17:19:
         2e:cb:26:b2:09:51:6b:93:28:ec:37:19:2e:fa:b0:a5:f2:6b:
         dc:be:73:f1:4f:2f:b5:9b:1f:45:4a:b8:1c:16:42:e5:a1:61:
         2e:27:30:f5:ed:df:f9:7d:79:46:38:f0:52:de:c6:0d:c4:de:
         17:bf:6f:4a:94:50:b7:c0:c0:15:2d:4b:bc:b8:a2:3f:91:9e:
         8c:07:f1:eb:fa:6f:1f:7f:3a:e9:ed:4e:5b:50:fd:c8:5f:e3:
         99:2f:87:54:de:89:3a:2e:a9:67:d5:cf:d4:b7:5c:5c:e4:dc:
         d8:60:62:bb:c7:80:d8:c6:43:12:74:9f:03:ed:66:e3:41:9f:
         21:d3:a3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:51:38 2025 by rpki-client