Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e2894d67-f8d1-375a-9f79-28ec44c203fa.roa
File:                     e2894d67-f8d1-375a-9f79-28ec44c203fa.roa (raw, json)
Hash identifier:          WDJmmxOiTFH6hixADr27jsca5xuk8cgWhd1+aTOmohw=
Subject key identifier:   53:18:07:0A:E9:0C:0C:27:05:1E:A3:5F:82:67:91:3B:3C:19:39:8E
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A0C0559C9C0F68F4CCB093060
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e2894d67-f8d1-375a-9f79-28ec44c203fa.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     21859
IP address blocks:        128.14.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:59:c9:c0:f6:8f:4c:cb:09:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=ddd61da9-1a99-41e6-9c9d-976796db4d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7b:40:1f:07:f3:8d:08:07:1a:0f:26:3e:1e:
                    55:7a:75:1c:c0:a8:75:b4:8d:08:f3:9d:9f:f2:20:
                    c8:58:e1:c1:fb:80:8d:60:16:92:90:bd:ff:f1:7b:
                    d8:8a:26:79:c4:c8:0e:c1:9e:88:85:2c:10:c9:16:
                    39:20:2e:84:06:05:3d:f4:07:9c:bf:7e:37:e7:a0:
                    12:bf:bc:11:a1:a8:13:d3:5a:1e:75:e3:b3:93:c6:
                    10:e6:96:18:e2:31:a5:90:9d:4f:c5:1e:0f:6c:5d:
                    20:57:93:54:aa:62:32:23:d9:a6:70:dd:af:cb:e8:
                    61:8d:6a:97:c2:5a:bc:71:4d:39:31:4f:cc:ff:1b:
                    dd:fa:41:58:e1:e4:bc:24:59:8f:7f:3e:eb:8b:60:
                    1c:64:71:d0:3a:73:9a:60:12:dd:43:bb:45:b1:98:
                    b8:3a:5a:8b:b9:f9:65:4e:a0:22:82:aa:05:84:2d:
                    98:d7:c4:96:db:96:50:bb:91:83:a3:5a:e2:d7:eb:
                    b0:50:6d:ad:12:f7:7a:4e:f2:75:e5:7f:83:ad:c6:
                    42:37:65:56:84:f5:3c:d2:9b:9b:51:84:31:8c:5a:
                    72:c7:25:0f:90:78:9e:fa:b8:1e:4c:42:c1:d8:72:
                    ca:17:15:38:48:75:4e:5d:43:a0:19:1b:9b:ea:78:
                    b0:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:18:07:0A:E9:0C:0C:27:05:1E:A3:5F:82:67:91:3B:3C:19:39:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/e2894d67-f8d1-375a-9f79-28ec44c203fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:34:e2:48:43:f7:56:34:5a:ab:6a:f4:50:b4:01:48:11:26:
         1d:13:05:7f:b1:d0:06:fc:d9:03:58:12:c0:b6:30:c5:74:6d:
         f2:5b:1f:4c:41:21:a8:04:71:88:38:b6:5c:ac:46:fd:a8:c0:
         aa:70:ce:b7:91:4d:20:3d:8a:a1:07:3a:78:fa:8a:9d:9c:e3:
         4f:db:52:80:4b:af:c1:e6:71:94:c6:4d:e0:07:db:ca:87:48:
         89:7e:05:bd:c4:0d:e3:a2:60:e2:2c:3a:44:ea:00:0c:fb:d3:
         a2:04:9f:49:d0:dc:44:46:c2:27:03:c9:78:a0:23:7b:12:4d:
         77:ff:6a:0b:d8:35:b3:00:83:55:90:4d:0e:63:85:8a:36:8a:
         18:38:7f:9c:00:9e:de:28:a9:b4:ef:1e:bb:b2:10:19:f9:85:
         5f:a0:3c:d8:4c:d2:c4:1f:eb:f7:08:d8:df:4d:cc:c0:99:c7:
         d6:53:d1:c4:85:44:0f:2a:82:9d:a4:6e:35:29:84:f1:50:64:
         5f:9c:7a:a5:c1:c6:e2:00:c5:e8:3c:3a:18:e4:89:76:ae:16:
         bd:3c:48:60:a6:55:8c:c8:5f:1e:cd:07:6f:4e:4d:19:d3:56:
         73:c4:72:98:a7:8a:80:04:1b:69:47:07:70:b5:07:80:a3:fd:
         ab:e8:aa:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVnJwPaPTMsJMGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
ZGRkNjFkYTktMWE5OS00MWU2LTljOWQtOTc2Nzk2ZGI0ZDYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3tAHwfzjQgHGg8mPh5VenUcwKh1tI0I852f
8iDIWOHB+4CNYBaSkL3/8XvYiiZ5xMgOwZ6IhSwQyRY5IC6EBgU99Aecv34356AS
v7wRoagT01oedeOzk8YQ5pYY4jGlkJ1PxR4PbF0gV5NUqmIyI9mmcN2vy+hhjWqX
wlq8cU05MU/M/xvd+kFY4eS8JFmPfz7ri2AcZHHQOnOaYBLdQ7tFsZi4OlqLufll
TqAigqoFhC2Y18SW25ZQu5GDo1ri1+uwUG2tEvd6TvJ15X+DrcZCN2VWhPU80pub
UYQxjFpyxyUPkHie+rgeTELB2HLKFxU4SHVOXUOgGRub6niwzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFMYBwrpDAwnBR6jX4JnkTs8GTmOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZTI4OTRkNjctZjhkMS0z
NzVhLTlmNzktMjhlYzQ0YzIwM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA5GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIU04khD91Y0Wqtq9FC0AUgRJh0TBX+x0Ab82QNYEsC2MMV0bfJbH0xB
IagEcYg4tlysRv2owKpwzreRTSA9iqEHOnj6ip2c40/bUoBLr8HmcZTGTeAH28qH
SIl+Bb3EDeOiYOIsOkTqAAz706IEn0nQ3ERGwicDyXigI3sSTXf/agvYNbMAg1WQ
TQ5jhYo2ihg4f5wAnt4oqbTvHruyEBn5hV+gPNhM0sQf6/cI2N9NzMCZx9ZT0cSF
RA8qgp2kbjUphPFQZF+ceqXBxuIAxeg8OhjkiXauFr08SGCmVYzIXx7NB29OTRnT
VnPEcpinioAEG2lHB3C1B4Cj/avoquI=
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:42:47 2025 by rpki-client