Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5c1ee998-3a71-3695-af32-ab6f9faf32fe.roa
File:                     5c1ee998-3a71-3695-af32-ab6f9faf32fe.roa (raw, json)
Hash identifier:          DKfcd3UQJIkSnzBXwHqeUIYEsmiy5lTLRzNv2rfH2t0=
Subject key identifier:   03:CC:0F:45:13:5B:D0:03:96:AA:6E:42:56:98:AD:80:80:91:B4:68
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584797E1396D3A283DD7E18ADF80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5c1ee998-3a71-3695-af32-ab6f9faf32fe.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     62610
IP address blocks:        128.14.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:39:6d:3a:28:3d:d7:e1:8a:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=ac30cbea-7807-43f6-991e-2f075cb6666c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:70:41:91:d7:6d:6f:ac:6a:5a:13:15:10:
                    16:3a:76:19:c0:28:ce:a5:52:e8:e4:e2:bb:9d:c0:
                    46:ba:68:08:dc:39:7b:ff:02:86:90:db:d2:98:a1:
                    ea:21:27:dc:18:8d:68:7e:ac:7c:95:0e:af:53:2e:
                    d7:bd:cf:42:8f:b8:da:8c:cd:9b:31:df:cd:3d:e9:
                    22:1c:6e:71:0d:b0:58:ef:69:8a:0e:d6:1e:93:0c:
                    9c:f6:e5:b6:72:b5:a6:aa:f7:6a:ec:4f:af:a5:35:
                    a1:cb:4d:68:25:30:78:ab:42:bd:69:13:56:d8:8c:
                    88:98:24:9e:79:33:c8:eb:4a:23:2b:15:48:2e:1b:
                    26:52:a9:67:75:86:7e:e6:dc:84:1f:30:e5:93:38:
                    48:68:c9:51:e9:a9:33:52:c4:19:75:ec:95:8c:85:
                    58:e4:ce:d6:5b:94:2b:6c:e9:cd:7f:99:9d:18:b2:
                    eb:14:ca:e3:eb:b4:3f:d1:21:31:0b:ff:35:86:2a:
                    06:01:41:b7:6e:5f:13:32:ec:73:37:bf:50:82:23:
                    8b:d7:15:76:74:8a:ec:90:9b:12:f8:be:17:58:c4:
                    89:6a:7f:3f:6c:f3:4c:33:2e:b1:29:2d:f8:3b:eb:
                    02:0a:4e:3a:72:a9:76:b1:1b:a5:c5:21:10:da:75:
                    32:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CC:0F:45:13:5B:D0:03:96:AA:6E:42:56:98:AD:80:80:91:B4:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5c1ee998-3a71-3695-af32-ab6f9faf32fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ed:fb:02:09:4a:17:82:0c:1a:61:8a:95:b9:32:32:53:a7:
         a8:0c:7b:f2:a2:32:1b:97:bc:a2:a1:63:b5:cd:64:da:8c:38:
         4f:77:4f:2c:28:61:9f:45:3d:8d:de:41:9c:04:2e:f6:d2:3a:
         c2:59:3b:a2:86:25:ac:1d:3c:f3:6c:82:88:40:aa:52:b7:94:
         84:32:69:bd:fa:63:f9:1a:39:46:af:dc:f4:19:a5:8d:10:c2:
         d9:c3:44:37:2e:a6:4c:80:58:e5:db:8e:f1:67:cc:84:32:09:
         3e:fe:ab:08:50:e2:b6:8d:2a:21:b6:a4:43:42:2a:17:b1:c9:
         8d:ed:ca:26:2a:f0:8b:e3:ca:ab:d3:7a:32:f8:59:6f:dd:c1:
         83:ef:43:e7:f3:14:7f:14:ff:cb:87:16:d3:a3:b4:8a:05:ca:
         b2:6b:b3:72:dd:8b:87:42:e7:11:ba:f2:ed:3e:a9:bb:99:1c:
         0f:a5:43:fd:7f:0b:75:ba:22:09:1c:bb:02:9b:c3:bc:5d:07:
         2e:51:a3:ef:47:11:f3:ba:0d:4f:f2:cf:35:d3:44:34:26:41:
         43:05:75:22:88:c8:fc:8a:da:70:f1:76:63:38:59:f8:15:1d:
         aa:7c:77:40:d6:9d:21:3e:4f:43:d7:32:25:32:96:cb:97:c5:
         04:9c:39:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:27 2024 by rpki-client on console-fra.rpki-client.org