Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5c105505-6c94-3c17-8a70-01babf353232.roa
File:                     5c105505-6c94-3c17-8a70-01babf353232.roa (raw, json)
Hash identifier:          lTZdD0xQcNQCAyLTA3z90r7iDMqdwvVDIftCTOqOWbI=
Subject key identifier:   70:A1:73:5F:6C:21:89:2F:70:AC:84:4F:79:96:1F:01:01:B1:DA:26
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584797E139955EA3BAC4017F5580
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5c105505-6c94-3c17-8a70-01babf353232.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     62610
IP address blocks:        128.14.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:39:95:5e:a3:ba:c4:01:7f:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=97e9f023-f084-4a4e-ae71-3f9283093fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:89:62:e6:eb:1a:a8:16:89:50:52:f5:6f:0c:
                    d1:08:fe:04:d3:47:bc:22:f9:b4:b7:47:cd:50:54:
                    40:36:30:ac:72:2d:7c:3e:e2:f4:04:6e:e7:c5:00:
                    62:00:54:cf:68:4d:c7:bb:04:47:10:86:71:41:d4:
                    2a:ae:d7:4f:af:84:32:bc:9d:36:b1:9b:bf:b9:e9:
                    d8:2e:62:ad:4e:16:dd:ab:72:3b:b1:33:bb:1e:75:
                    b4:6a:e1:c8:4f:d0:e4:e2:b0:1b:5d:b3:cf:cd:1f:
                    02:14:50:a9:8d:27:1c:27:79:ac:68:61:14:79:19:
                    93:24:a0:fd:94:fe:26:3a:82:44:7f:6d:d3:48:1c:
                    bf:43:6f:9a:01:d3:73:3f:d1:bf:75:f0:83:c6:b1:
                    ef:57:51:e0:c6:42:2f:16:48:46:27:30:52:89:ad:
                    58:91:3b:8b:b1:82:23:63:63:c6:35:76:e9:a8:2b:
                    29:91:39:84:fd:60:b4:1b:ae:09:12:c4:f9:e9:56:
                    01:91:13:5f:2b:ed:ec:6c:32:4f:5c:1e:e4:66:95:
                    51:f4:e9:41:3f:04:6a:2c:d2:34:4b:64:ef:41:ef:
                    d7:6c:1f:5f:a7:9a:b4:07:e3:fe:57:35:a2:e1:c7:
                    43:9f:e6:13:a0:88:6d:49:71:b6:b6:68:76:b1:48:
                    22:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A1:73:5F:6C:21:89:2F:70:AC:84:4F:79:96:1F:01:01:B1:DA:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5c105505-6c94-3c17-8a70-01babf353232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:3b:f2:f7:f5:50:a6:48:e6:5e:6e:38:8f:b5:a3:41:4f:
         6b:98:cb:9d:da:19:04:d6:0b:b2:91:69:40:f6:10:e5:99:60:
         ff:e1:2a:64:42:ca:5a:73:b6:c9:ea:41:9b:6e:f1:1e:bb:d8:
         fb:08:6d:3b:32:58:d1:42:42:02:a4:c7:e1:a4:d4:ee:bd:e3:
         d8:68:af:cf:13:c0:20:60:ce:4e:b0:b9:f1:f3:e9:8b:21:4c:
         48:31:db:54:2a:50:73:ad:da:74:82:b5:57:f5:c6:3a:b6:a3:
         a1:91:89:13:36:51:a0:23:af:b1:bc:42:8f:f3:4b:98:45:5b:
         ee:14:d2:36:51:e4:95:55:6d:9a:a6:78:3a:4b:e1:13:06:6a:
         f2:73:c6:2c:3f:17:35:0a:99:cc:b0:d6:13:0a:80:fc:dc:c2:
         19:51:19:d3:0e:fa:35:30:39:8d:31:bb:ab:94:49:b9:b4:85:
         41:4f:89:07:d8:71:31:3f:eb:6a:12:9a:c5:f5:21:78:90:40:
         ce:2a:d6:67:c6:ad:39:3e:0e:ab:fb:e3:94:b4:58:a1:5e:5e:
         de:9e:d2:2d:f7:af:cc:ca:68:13:ee:d5:0c:27:4c:f5:bd:29:
         89:99:94:40:8a:88:3d:e4:43:79:6b:cc:47:aa:16:01:42:cd:
         5f:60:7b:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4TmVXqO6xAF/VYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk
OTdlOWYwMjMtZjA4NC00YTRlLWFlNzEtM2Y5MjgzMDkzZmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4li5usaqBaJUFL1bwzRCP4E00e8Ivm0t0fN
UFRANjCsci18PuL0BG7nxQBiAFTPaE3HuwRHEIZxQdQqrtdPr4QyvJ02sZu/uenY
LmKtThbdq3I7sTO7HnW0auHIT9Dk4rAbXbPPzR8CFFCpjSccJ3msaGEUeRmTJKD9
lP4mOoJEf23TSBy/Q2+aAdNzP9G/dfCDxrHvV1HgxkIvFkhGJzBSia1YkTuLsYIj
Y2PGNXbpqCspkTmE/WC0G64JEsT56VYBkRNfK+3sbDJPXB7kZpVR9OlBPwRqLNI0
S2TvQe/XbB9fp5q0B+P+VzWi4cdDn+YToIhtSXG2tmh2sUgiNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHChc19sIYkvcKyET3mWHwEBsdomMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNWMxMDU1MDUtNmM5NC0z
YzE3LThhNzAtMDFiYWJmMzUzMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA41MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKBDO/L39VCmSOZebjiPtaNBT2uYy53aGQTWC7KRaUD2EOWZYP/hKmRC
ylpztsnqQZtu8R672PsIbTsyWNFCQgKkx+Gk1O6949hor88TwCBgzk6wufHz6Ysh
TEgx21QqUHOt2nSCtVf1xjq2o6GRiRM2UaAjr7G8Qo/zS5hFW+4U0jZR5JVVbZqm
eDpL4RMGavJzxiw/FzUKmcyw1hMKgPzcwhlRGdMO+jUwOY0xu6uUSbm0hUFPiQfY
cTE/62oSmsX1IXiQQM4q1mfGrTk+Dqv745S0WKFeXt6e0i33r8zKaBPu1QwnTPW9
KYmZlECKiD3kQ3lrzEeqFgFCzV9gexA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:27 2024 by rpki-client on console-fra.rpki-client.org