Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/65dcf0e9-ce9e-3e27-af44-db92481491d9.roa
File:                     65dcf0e9-ce9e-3e27-af44-db92481491d9.roa (raw, json)
Hash identifier:          Fm6h0Q1JVOMiDsqUCsVhDxG9Ya7wLwSIVcqpxklh+oc=
Subject key identifier:   DF:A7:C7:FB:3F:F2:A1:81:76:5B:3C:0E:50:86:C9:E6:2C:CF:E9:98
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A0C0559DC3824AC54925B5280
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/65dcf0e9-ce9e-3e27-af44-db92481491d9.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     62610
IP address blocks:        128.14.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:59:dc:38:24:ac:54:92:5b:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=eb17a99b-a9e6-4c64-8e0b-ae9e0c61cc1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:dd:0f:82:aa:7c:b3:18:36:06:c4:59:dd:c1:
                    08:6f:10:29:1a:2d:dc:4f:bc:b6:a3:0e:73:6a:6c:
                    8d:d2:73:48:e3:31:11:66:1a:d0:9b:3c:a9:ad:c3:
                    f6:eb:71:80:34:aa:2e:44:3a:ee:a4:41:07:25:ed:
                    cd:bd:38:8b:e2:e3:4c:c8:6c:c1:53:51:d0:4c:2f:
                    f6:5e:f9:ca:fb:68:3c:44:31:4e:12:2d:49:1e:1d:
                    85:78:8c:03:de:3d:e9:fb:5a:0d:19:5d:31:df:c2:
                    ad:91:4f:cd:10:6b:a5:57:74:0d:8c:56:b2:eb:82:
                    32:54:7e:dd:66:5e:60:cf:8e:33:34:04:83:81:34:
                    f5:de:96:e6:bd:ed:34:e4:d6:dc:12:e4:25:8b:2a:
                    6d:67:c0:87:74:e6:ab:2b:de:d1:9c:f0:fa:0a:2b:
                    03:b4:ad:61:e1:9c:22:8e:0a:4b:79:a7:be:5f:c8:
                    a0:af:cb:c4:2a:1a:22:4e:e4:08:14:76:78:33:0d:
                    47:e6:67:c2:97:8d:3e:b1:32:c0:ca:0a:72:b9:04:
                    95:66:93:4c:31:68:10:a6:d8:b7:a5:ab:49:e3:a2:
                    5a:2d:8d:9a:2c:c2:70:c7:ff:03:4a:3d:de:9a:b7:
                    bc:6d:b5:e4:59:bf:ff:37:1f:c1:08:c4:7d:1e:45:
                    b3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A7:C7:FB:3F:F2:A1:81:76:5B:3C:0E:50:86:C9:E6:2C:CF:E9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/65dcf0e9-ce9e-3e27-af44-db92481491d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:26:97:7a:be:a6:4a:35:4b:94:e3:fd:ad:7a:d5:e1:0c:e9:
         65:aa:4b:69:ea:03:ab:2b:eb:99:ef:8c:8d:96:e7:ff:77:e2:
         d3:8d:20:f6:d4:c1:e7:8c:23:a9:b0:e3:bb:79:99:a9:6d:ea:
         7d:3e:18:cd:b3:32:92:70:98:6b:df:ed:50:98:d5:fa:58:33:
         52:e8:35:03:95:12:1d:d0:75:9e:d1:cf:4d:42:54:12:65:5e:
         6b:fe:10:39:5b:83:0e:bd:2b:1d:bd:cb:95:41:e3:af:c1:71:
         b1:0b:24:1f:86:d9:6a:e4:b6:0e:19:ba:59:c7:8a:06:d5:35:
         97:8e:38:24:47:de:a2:55:27:b2:a8:72:6b:e1:72:fd:f7:4d:
         21:bf:12:2e:02:cd:54:fb:1e:17:86:ca:78:c1:25:f9:6f:06:
         b9:1a:87:c9:5b:dd:d7:87:9d:1b:7f:33:77:1d:25:7a:2b:25:
         86:4c:25:b4:2f:70:34:70:63:94:4d:82:6d:fe:47:cf:78:08:
         43:08:41:83:a7:46:32:1f:71:97:d1:b9:43:ee:c3:a0:66:c6:
         ff:eb:51:20:50:25:e9:df:ba:52:ca:17:4a:a7:cb:fa:e5:62:
         db:7d:1e:f7:82:af:1b:f9:b8:d7:d5:c0:99:11:a1:bd:07:a7:
         dd:df:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:06:49 2025 by rpki-client