Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/85ede40a-8c0f-3b6a-a481-907e30a5fc3a.roa
File:                     85ede40a-8c0f-3b6a-a481-907e30a5fc3a.roa (raw, json)
Hash identifier:          V0M050urqellxzAnuCiF0iusHFT33AofwWfc0vSG2n4=
Subject key identifier:   1D:BC:EA:CF:0B:75:DF:9A:9E:39:E6:8E:58:7B:86:A2:94:2E:C8:17
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584797E1303AE099461F17BA6D60
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/85ede40a-8c0f-3b6a-a481-907e30a5fc3a.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     62610
IP address blocks:        128.14.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:30:3a:e0:99:46:1f:17:ba:6d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=9ee223f2-ac28-4d2a-b86a-99f8742df9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3e:67:ab:fb:80:21:4e:21:e5:89:5e:0f:4c:
                    51:9e:01:00:e3:dc:52:4c:6f:53:51:0d:26:de:f6:
                    36:78:32:93:8d:a3:6f:9d:46:76:ea:c8:c4:0e:55:
                    88:4a:49:8d:bb:79:2d:59:8c:0b:4f:cf:a2:b6:9d:
                    31:28:a4:58:f8:65:fe:56:ae:29:f5:33:6c:66:72:
                    a1:ad:20:f5:d9:f5:0d:25:0d:f5:0e:ef:53:5f:a3:
                    3a:1b:36:60:5c:cb:2d:58:10:67:a3:7c:61:9d:fa:
                    15:fb:75:ae:a9:aa:e7:af:44:a2:3f:e0:5a:91:f6:
                    8b:ec:d6:78:74:ec:f5:31:ba:4d:df:1b:4d:b7:46:
                    b7:c8:a9:0f:b2:e3:bb:89:5f:18:12:a8:9c:21:1f:
                    58:ff:5b:89:c7:5f:1b:80:59:ee:1c:55:6a:29:68:
                    ff:62:7f:a8:8b:60:57:cb:68:6d:f2:8c:3d:39:f9:
                    f9:5c:99:8c:2f:07:32:43:09:e4:b5:6a:35:b5:63:
                    73:8c:b7:9d:71:41:3c:2e:5c:3d:0d:c3:e4:8f:1e:
                    32:46:ea:a1:db:29:1a:a3:40:22:1b:48:37:31:9e:
                    55:42:30:0e:5b:d1:6b:8a:40:10:aa:e3:34:90:6d:
                    46:24:e0:b2:e2:cd:f4:cc:a1:86:7d:4f:81:63:7c:
                    7a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BC:EA:CF:0B:75:DF:9A:9E:39:E6:8E:58:7B:86:A2:94:2E:C8:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/85ede40a-8c0f-3b6a-a481-907e30a5fc3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ac:88:29:5e:5c:1a:24:f5:bd:7a:6f:6b:d6:11:28:b9:eb:
         c5:64:59:10:0e:fb:df:b7:71:0f:24:be:e5:bc:c2:d3:56:dc:
         3b:e5:75:52:61:66:87:a7:fc:79:26:7a:a8:72:9d:1e:fc:d1:
         a7:52:4d:47:34:af:b9:cc:43:bd:f6:b1:a5:1f:cb:06:6f:c1:
         67:01:87:81:19:79:cb:94:db:f7:8e:39:5c:da:ed:5b:12:17:
         9f:e1:68:3b:e6:77:64:92:a7:d2:d4:6b:22:c4:b7:fb:4d:cf:
         84:5e:25:bd:35:61:6d:6e:9d:9f:2e:12:64:3c:90:17:2d:58:
         1b:ef:77:0d:04:f9:00:a8:bd:ba:ff:9d:3f:7e:c5:76:a6:e0:
         91:a3:01:ee:c2:7b:50:af:f9:de:73:ea:2e:4a:06:74:a6:15:
         b2:a9:e0:fb:cf:40:d3:95:dd:39:b8:77:88:f9:98:0d:1b:9e:
         a1:e0:a9:93:13:6f:9b:b0:eb:70:cd:d3:c8:c0:f5:93:fe:d1:
         5e:d3:8c:4e:66:df:26:24:99:1e:8a:6e:32:93:08:ad:42:6a:
         3a:43:73:af:16:df:23:4f:ae:16:be:0b:a4:97:c3:b8:7a:05:
         7a:84:dd:e9:88:91:e2:4e:4b:d5:39:fa:64:83:c1:24:2b:37:
         c0:1d:a0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:25:28 2024 by rpki-client on console-fra.rpki-client.org