Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/171c0907-2f1a-35bf-aac3-f7c7e2639c36.roa
File:                     171c0907-2f1a-35bf-aac3-f7c7e2639c36.roa (raw, json)
Hash identifier:          MXu3ekR9SPorSn5W8krDm8Zw713ukm6l+vYXCc3/5L0=
Subject key identifier:   CC:1C:71:65:89:A1:95:5B:E6:27:D5:26:85:0E:84:89:AC:15:C5:08
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584AECC12B8BAEFD5C7B79FB9DC0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/171c0907-2f1a-35bf-aac3-f7c7e2639c36.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     62610
IP address blocks:        128.14.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:2b:8b:ae:fd:5c:7b:79:fb:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=b3a12ce6-9c87-4ff9-b64d-6c691a9d6e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:74:8e:71:ff:d2:11:57:80:1e:36:d3:e7:48:
                    f6:e2:79:ff:ce:91:1d:66:01:2b:47:d6:f7:bd:46:
                    e7:7f:4f:75:14:9d:2d:75:ff:36:f8:f3:ca:8a:b5:
                    e8:7a:bc:cf:3b:46:c6:31:f6:25:75:18:f0:f7:ed:
                    03:0e:cf:22:27:70:dc:40:46:21:71:5e:9f:67:d5:
                    0e:70:fe:ea:4b:1b:05:27:b3:11:71:cd:93:83:ab:
                    6b:90:50:c6:87:45:ae:7e:06:f1:86:d6:33:24:df:
                    8e:29:64:66:d0:d2:f4:88:91:87:20:ab:44:9d:88:
                    b9:76:6d:4a:3c:ef:13:e1:da:d3:96:37:77:cf:8a:
                    fb:14:5e:74:bf:5a:18:45:da:0a:93:d4:26:90:3e:
                    40:39:35:a3:86:93:e8:af:ef:c5:1f:63:52:72:f0:
                    91:bd:c7:e8:ac:e6:17:8d:77:92:4b:86:1d:21:1d:
                    2e:27:e9:5f:bc:67:cc:8b:db:f9:ad:c0:7a:38:9e:
                    fa:5c:14:a9:1b:80:a8:d3:a4:3a:fd:4f:25:45:9f:
                    50:6b:be:a1:de:31:2f:5d:f4:09:76:9c:d0:b1:85:
                    24:6a:69:41:5b:55:9e:14:1d:1a:7c:13:b7:7a:16:
                    9d:75:4d:99:54:ff:87:4d:1d:5c:f5:e7:1b:9e:d2:
                    96:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1C:71:65:89:A1:95:5B:E6:27:D5:26:85:0E:84:89:AC:15:C5:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/171c0907-2f1a-35bf-aac3-f7c7e2639c36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:f3:c3:02:49:cb:39:83:01:23:4a:9b:58:2e:43:e0:73:dc:
         8a:63:08:8c:be:6b:a9:9c:69:ff:e6:10:e4:12:9d:42:55:57:
         3f:d9:eb:4c:1e:b5:97:ef:e3:e3:b0:ab:e7:5d:66:08:06:ca:
         47:fb:7a:1e:80:67:a2:e7:51:44:03:24:0d:7a:62:3e:6e:b0:
         06:51:6f:1a:e9:01:8f:b2:67:cd:43:49:f6:47:4e:69:1b:88:
         17:17:9a:ac:26:a2:bb:91:11:96:c4:2a:fe:8f:90:c9:d1:22:
         83:51:52:da:fe:e7:46:8e:b8:2f:ee:88:94:27:12:e3:94:9b:
         aa:cb:82:c6:d1:9a:b2:72:25:9c:59:71:10:99:77:37:69:e1:
         29:92:50:27:a2:08:82:4d:d6:04:2a:45:f9:82:6c:75:2f:7b:
         c3:d5:1d:f8:8a:28:27:b6:c1:b8:db:7f:64:20:4f:e7:82:90:
         83:be:be:56:47:05:75:32:f5:55:b9:5f:11:bb:93:74:d1:e4:
         93:b8:1a:d2:36:6e:ef:d9:e5:b9:3d:8b:48:d3:64:d2:58:7d:
         b0:f6:32:c1:b4:c0:11:c7:37:cb:92:b1:db:03:b3:32:53:70:
         21:4e:ca:b4:a0:76:d7:75:6b:34:f6:17:90:6d:3d:3f:b6:dd:
         90:4d:6f:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswSuLrv1ce3n7ncAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
YjNhMTJjZTYtOWM4Ny00ZmY5LWI2NGQtNmM2OTFhOWQ2ZTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XSOcf/SEVeAHjbT50j24nn/zpEdZgErR9b3
vUbnf091FJ0tdf82+PPKirXoerzPO0bGMfYldRjw9+0DDs8iJ3DcQEYhcV6fZ9UO
cP7qSxsFJ7MRcc2Tg6trkFDGh0WufgbxhtYzJN+OKWRm0NL0iJGHIKtEnYi5dm1K
PO8T4drTljd3z4r7FF50v1oYRdoKk9QmkD5AOTWjhpPor+/FH2NScvCRvcforOYX
jXeSS4YdIR0uJ+lfvGfMi9v5rcB6OJ76XBSpG4Co06Q6/U8lRZ9Qa76h3jEvXfQJ
dpzQsYUkamlBW1WeFB0afBO3ehaddU2ZVP+HTR1c9ecbntKW3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMwccWWJoZVb5ifVJoUOhImsFcUIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMTcxYzA5MDctMmYxYS0z
NWJmLWFhYzMtZjdjN2UyNjM5YzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA5HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKXzwwJJyzmDASNKm1guQ+Bz3IpjCIy+a6mcaf/mEOQSnUJVVz/Z60we
tZfv4+Owq+ddZggGykf7eh6AZ6LnUUQDJA16Yj5usAZRbxrpAY+yZ81DSfZHTmkb
iBcXmqwmoruREZbEKv6PkMnRIoNRUtr+50aOuC/uiJQnEuOUm6rLgsbRmrJyJZxZ
cRCZdzdp4SmSUCeiCIJN1gQqRfmCbHUve8PVHfiKKCe2wbjbf2QgT+eCkIO+vlZH
BXUy9VW5XxG7k3TR5JO4GtI2bu/Z5bk9i0jTZNJYfbD2MsG0wBHHN8uSsdsDszJT
cCFOyrSgdtd1azT2F5BtPT+23ZBNbxU=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:58:03 2025 by rpki-client