Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa
File:                     ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa (raw, json)
Hash identifier:          LT1MYcUJWxACSliW5VRApCF/wNUIeyXnDSyxzjc8wRw=
Subject key identifier:   D2:39:2B:E6:F2:9F:FA:6F:4C:F8:21:88:8E:8B:9E:D1:B6:24:A5:F2
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584797E130D19CB375AD34C18A80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     62610
IP address blocks:        128.14.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:30:d1:9c:b3:75:ad:34:c1:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=9f96db95-d891-4db8-b10d-574516c78147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:49:dc:11:49:cc:23:75:72:a1:b3:a5:58:
                    07:1b:5c:50:57:24:e9:a4:fd:5e:d4:61:b1:df:b8:
                    30:93:2f:22:31:64:f4:ff:c0:10:75:92:20:2e:31:
                    77:f4:34:dd:b0:ae:1c:a9:8d:c2:7a:e9:29:b0:ec:
                    3b:c0:4e:90:35:2b:ae:19:26:51:3c:95:f8:20:04:
                    19:ed:c4:b2:60:7e:f7:af:af:dd:f8:2d:9f:c7:78:
                    59:33:e3:8c:7c:6b:bc:b6:0f:6f:9e:5c:4d:ca:68:
                    a5:4c:05:f4:47:22:dd:44:9e:f0:2a:73:34:a3:9d:
                    d5:3b:50:7a:46:13:72:cf:e7:59:3e:1b:40:55:ac:
                    cb:51:40:dd:69:c2:23:4b:7a:1e:0f:fc:dc:44:1a:
                    7a:65:4a:6c:a9:eb:62:7e:24:66:ed:fa:e3:ab:35:
                    d9:df:b1:13:de:8d:9e:f7:e0:80:3a:e9:0e:e0:96:
                    b4:55:18:da:d1:cb:7c:fe:6b:c6:ba:9e:ee:1d:96:
                    eb:c4:6c:18:3d:df:be:cb:16:2b:14:50:44:c7:c0:
                    c0:22:f7:5d:4b:d1:51:08:6d:75:24:b4:22:63:98:
                    fe:75:1d:3e:4e:ae:91:8e:ab:79:24:b5:fa:f4:42:
                    04:71:36:a3:62:a5:d9:44:eb:f2:13:41:3a:98:f9:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:39:2B:E6:F2:9F:FA:6F:4C:F8:21:88:8E:8B:9E:D1:B6:24:A5:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:7a:6e:98:95:6f:c6:a8:12:79:56:9a:61:31:ed:8e:3e:d0:
         10:dc:70:3a:58:db:d5:13:8f:54:0f:85:12:af:08:b1:97:3b:
         16:73:4f:98:72:c0:21:86:1c:d7:d6:a7:47:8c:b2:48:7c:96:
         82:d0:f8:0a:8c:3a:2a:ad:b3:63:92:37:f1:55:42:df:37:3f:
         94:86:0d:80:f6:be:87:d1:09:41:6c:9b:ab:c4:a8:76:04:38:
         b7:dc:f8:a5:99:42:90:5f:57:30:f2:da:7a:35:0a:88:38:c7:
         b3:1f:77:63:b8:4c:a8:c8:2f:b1:61:2b:e3:79:da:10:30:49:
         2b:64:33:17:04:bb:2b:a2:37:06:b3:9b:dd:c3:ee:e7:9b:43:
         1f:3e:3c:fc:a6:29:50:1f:9a:aa:13:5f:0d:6d:99:f2:46:8d:
         cf:fe:66:0b:de:7a:d3:aa:e5:3d:52:fc:3a:82:ee:10:fd:21:
         00:9c:2c:ac:fe:0e:78:8b:94:30:27:f1:8c:f4:4d:02:7e:ff:
         99:cc:54:24:c5:3b:93:c4:72:87:b1:d0:57:26:da:e5:4a:00:
         c1:36:ad:14:95:e2:e2:d6:74:4c:62:66:50:45:0f:7b:1e:e8:
         4c:db:96:c9:d6:5e:8a:e4:7b:a6:fb:47:f2:ac:28:c7:bc:58:
         f3:f6:ec:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeX4TDRnLN1rTTBioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI0MTAxOTEzMDA0MloXDTI1MDExNzE0MDA0MlowLzEtMCsGA1UEAxMk
OWY5NmRiOTUtZDg5MS00ZGI4LWIxMGQtNTc0NTE2Yzc4MTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDFJ3BFJzCN1cqGzpVgHG1xQVyTppP1e1GGx
37gwky8iMWT0/8AQdZIgLjF39DTdsK4cqY3CeukpsOw7wE6QNSuuGSZRPJX4IAQZ
7cSyYH73r6/d+C2fx3hZM+OMfGu8tg9vnlxNymilTAX0RyLdRJ7wKnM0o53VO1B6
RhNyz+dZPhtAVazLUUDdacIjS3oeD/zcRBp6ZUpsqetifiRm7frjqzXZ37ET3o2e
9+CAOukO4Ja0VRja0ct8/mvGup7uHZbrxGwYPd++yxYrFFBEx8DAIvddS9FRCG11
JLQiY5j+dR0+Tq6Rjqt5JLX69EIEcTajYqXZROvyE0E6mPntFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNI5K+byn/pvTPghiI6LntG2JKXyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvY2EwMjZjZWQtYWIyYi0z
ZmE0LThhZWMtMmI5NWE5NTlmNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA48MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKh6bpiVb8aoEnlWmmEx7Y4+0BDccDpY29UTj1QPhRKvCLGXOxZzT5hy
wCGGHNfWp0eMskh8loLQ+AqMOiqts2OSN/FVQt83P5SGDYD2vofRCUFsm6vEqHYE
OLfc+KWZQpBfVzDy2no1Cog4x7Mfd2O4TKjIL7FhK+N52hAwSStkMxcEuyuiNwaz
m93D7uebQx8+PPymKVAfmqoTXw1tmfJGjc/+ZgveetOq5T1S/DqC7hD9IQCcLKz+
DniLlDAn8Yz0TQJ+/5nMVCTFO5PEcoex0Fcm2uVKAME2rRSV4uLWdExiZlBFD3se
6EzblsnWXorke6b7R/KsKMe8WPP27K0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:46 2024 by rpki-client on console-ams.rpki-client.org