Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2a75d702-7816-3d06-bd91-26f37b381683.roa
File:                     2a75d702-7816-3d06-bd91-26f37b381683.roa (raw, json)
Hash identifier:          GyHWYAHmnDpQA7nEN52GWFMfKm1BGKBUhJkeNEif8fE=
Subject key identifier:   95:72:18:3F:0B:66:34:D0:B3:97:45:93:D9:8C:F2:6E:8C:A7:07:08
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F43285849151FB584BB6ACA5766DF9CA0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2a75d702-7816-3d06-bd91-26f37b381683.roa
Signing time:             Wed 05 Mar 2025 02:29:41 +0000
ROA not before:           Wed 05 Mar 2025 02:29:41 +0000
ROA not after:            Tue 03 Jun 2025 01:29:41 +0000
asID:                     4229
IP address blocks:        128.14.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:1f:b5:84:bb:6a:ca:57:66:df:9c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar  5 02:29:41 2025 GMT
            Not After : Jun  3 01:29:41 2025 GMT
        Subject: CN=c599c6e1-d750-4c2f-a852-8acb7e0414fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:04:10:d6:1b:2e:fb:b9:f4:0a:b8:b4:84:18:
                    0d:79:e2:3e:cf:13:a7:a5:c3:50:97:20:5c:90:cf:
                    61:66:6a:09:fd:56:f9:a1:fc:b0:8e:c7:8b:d7:36:
                    eb:bc:f7:59:d3:c5:19:b8:a4:c4:32:5d:0c:12:71:
                    72:35:6f:f5:49:01:7a:e6:b5:c1:b4:49:15:21:07:
                    01:f0:cd:c3:24:ba:b4:65:55:ad:16:36:7c:30:0f:
                    ab:ea:32:b2:76:d5:8c:a9:40:43:80:59:8e:03:e4:
                    19:6b:a2:58:0e:5c:b8:1a:fc:e0:10:99:bc:6f:93:
                    f0:ad:99:92:4d:46:3e:75:25:02:ab:16:5c:b5:46:
                    c0:f1:66:be:9d:8f:4a:30:61:34:82:8f:e5:02:9e:
                    ef:27:12:79:67:2a:a9:df:28:e6:5d:78:d7:a9:48:
                    cb:d9:9b:41:69:0d:bf:db:74:e3:a3:e5:b2:5a:67:
                    c8:0e:41:d4:39:63:cf:2c:e9:c2:c8:8a:d3:54:d2:
                    14:d6:01:a7:92:51:83:ef:f7:25:40:62:31:df:fe:
                    86:d1:3d:fe:88:1b:63:de:c9:21:99:10:53:af:a3:
                    b0:d7:ff:63:52:84:b4:de:b5:e8:ab:41:de:d9:0b:
                    2a:b6:5d:26:1e:df:43:90:f0:e9:47:1e:8e:b3:4f:
                    ee:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:72:18:3F:0B:66:34:D0:B3:97:45:93:D9:8C:F2:6E:8C:A7:07:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2a75d702-7816-3d06-bd91-26f37b381683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c7:53:4f:a6:a7:af:af:84:27:30:f8:f4:7a:58:bb:6b:39:
         0a:9b:4e:a7:93:8b:08:95:24:c7:d9:df:8d:06:5f:51:70:fb:
         55:70:a6:b4:91:03:f2:2c:fd:b1:90:30:e1:0f:ed:a1:1c:12:
         2f:f4:80:fc:e2:f0:e4:df:0c:71:9d:e3:f5:a5:a8:b7:94:33:
         7f:9c:41:75:9a:e8:43:57:c2:89:21:ef:da:fe:bc:82:e3:4c:
         12:cb:44:53:65:cb:dc:36:c1:62:60:e3:18:9b:f0:f3:c2:84:
         bc:e4:78:71:01:d1:06:87:41:fe:7f:30:48:69:c1:1c:e6:bc:
         55:97:ce:30:0b:98:11:1c:f6:b9:9a:f5:af:5f:47:66:d3:15:
         dd:2e:d5:7c:fe:64:19:18:78:3e:9d:1b:fe:0b:2e:ce:1f:ad:
         d1:a3:f5:f2:f2:cc:01:cf:dc:c7:47:67:0b:ee:6f:6d:49:a5:
         0f:cf:89:93:43:6b:d3:81:c0:16:f1:ba:f7:4b:a1:89:7b:53:
         ca:43:32:65:fa:35:84:2b:ba:18:9c:df:01:c3:38:3b:93:55:
         62:d4:84:5f:a2:77:4e:53:81:31:a6:d7:a1:7c:81:b1:e2:7f:
         e7:ff:c4:81:c0:14:21:e3:27:0f:a1:95:b5:a5:fc:9c:a8:14:
         e5:64:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:32:33 2025 by rpki-client