Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/be3cb13e-9e17-31b9-8a96-d9d57ee91e56.roa
File:                     be3cb13e-9e17-31b9-8a96-d9d57ee91e56.roa (raw, json)
Hash identifier:          jVfR6qDoBN9vxc12TN6OjDuAaHY+7gRlTweczKD3UHk=
Subject key identifier:   6B:E2:BA:57:6E:85:14:86:0C:E4:33:94:40:8F:EA:B2:C6:BE:AF:05
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858498A793EF9CB8F848F41612F00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/be3cb13e-9e17-31b9-8a96-d9d57ee91e56.roa
Signing time:             Wed 16 Apr 2025 03:19:40 +0000
ROA not before:           Wed 16 Apr 2025 03:19:40 +0000
ROA not after:            Tue 15 Jul 2025 03:19:40 +0000
asID:                     62610
IP address blocks:        128.14.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:79:3e:f9:cb:8f:84:8f:41:61:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr 16 03:19:40 2025 GMT
            Not After : Jul 15 03:19:40 2025 GMT
        Subject: CN=875110ef-7542-43ca-95a0-028c96958fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2b:03:b7:c2:23:3d:0e:8f:a4:16:9a:1f:2b:
                    c2:53:db:e5:27:24:ee:67:53:77:84:c3:f7:a4:19:
                    64:f6:26:57:d9:17:9d:fa:ad:03:7d:3e:6a:aa:b2:
                    4c:4f:b5:a8:96:55:64:11:2a:38:9d:2f:4e:28:db:
                    49:12:97:a2:1d:dc:54:34:0e:e7:06:11:36:05:7f:
                    56:33:0e:5f:99:57:2d:be:7e:6e:91:7a:93:94:ae:
                    7a:e0:47:05:ae:76:a9:30:20:49:16:e6:ef:d4:92:
                    53:61:44:d6:3a:4b:a8:8e:3a:74:0e:43:6d:a5:f9:
                    4f:42:fe:86:41:b4:6f:f7:79:5c:b9:b6:36:92:cf:
                    d4:f4:09:50:1c:09:ae:56:5c:ac:92:16:9f:09:30:
                    26:2a:7b:17:b6:51:4d:dd:c5:33:20:09:f0:68:5c:
                    c3:56:fc:ef:2d:54:a9:5e:ef:61:a9:f8:a0:55:f8:
                    ad:96:05:a2:be:2f:80:c5:f3:33:cd:a1:c5:ab:c4:
                    3c:5c:dc:0d:90:2f:06:a2:ab:51:fe:2b:1c:a4:35:
                    77:1e:58:3f:8c:8f:55:8d:bd:a2:9f:19:0c:cc:b0:
                    03:6d:ac:d5:4e:a5:d2:6b:cc:63:be:d7:5f:3a:b8:
                    f7:4e:07:39:31:8b:5f:e4:a6:a6:b7:2e:75:aa:ae:
                    4f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E2:BA:57:6E:85:14:86:0C:E4:33:94:40:8F:EA:B2:C6:BE:AF:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/be3cb13e-9e17-31b9-8a96-d9d57ee91e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:25:f5:18:8d:52:dd:57:e0:0a:11:49:9c:9f:1e:f1:88:2a:
         6a:94:20:ee:d2:46:68:e3:29:c7:b7:66:87:03:b4:1c:8f:a1:
         1c:47:95:d5:60:0b:c5:94:8b:3c:65:01:85:ed:e0:fe:46:cf:
         f4:8b:02:04:fe:f9:b7:1b:fa:f8:f0:9f:c7:3a:2c:c7:9e:ac:
         a2:7c:30:9e:58:74:f0:02:1c:c5:4f:7f:dc:a4:a2:c9:07:42:
         e9:1f:f2:ea:55:74:88:95:f9:a2:6a:dc:46:8c:16:37:11:30:
         aa:3f:c7:02:3f:06:81:40:f7:86:f7:9b:ec:73:82:f1:ae:00:
         26:21:38:28:b0:aa:e4:08:11:65:ae:8a:3a:c2:69:c1:0e:89:
         80:2f:ae:99:4f:33:8a:78:92:60:5c:a4:11:fc:c5:9d:e3:0a:
         3c:6e:5f:9a:e5:25:08:ae:4d:20:9e:19:89:f3:c2:d3:52:c2:
         4b:0e:a5:69:0c:c0:6b:2d:8a:53:8c:18:8b:38:c8:58:83:b4:
         6b:bb:74:41:48:9b:bf:f5:98:29:31:80:8d:9e:89:9e:f7:a4:
         8f:c2:72:4c:02:d7:8c:9c:c4:ba:32:a1:da:9b:1b:06:31:9c:
         33:b4:0d:22:b9:6d:dd:d3:d0:16:05:a9:d2:32:f6:b4:af:1c:
         f6:63:4e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:50:25 2025 by rpki-client