Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/23acbdbd-9b84-3b46-90d5-44490fcf8e9e.roa
File:                     23acbdbd-9b84-3b46-90d5-44490fcf8e9e.roa (raw, json)
Hash identifier:          T9qwXwUekfHt0ipQuuNO0ApSLWMPnsC2Q6gCx9N3reE=
Subject key identifier:   8F:86:73:D8:5B:11:52:F4:5A:73:F0:54:45:CC:19:FF:98:23:6D:0F
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A374ACB5F5618DB5CA991CD00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/23acbdbd-9b84-3b46-90d5-44490fcf8e9e.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     21859
IP address blocks:        128.14.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:cb:5f:56:18:db:5c:a9:91:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=382d473b-53b1-44d5-87ab-6e5654e178d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:49:1a:1f:2c:86:8a:aa:0e:47:5f:26:a2:f5:
                    7e:98:7b:26:0b:8c:11:68:08:63:b8:67:7f:64:f0:
                    90:b0:94:40:61:9e:e7:4b:46:c6:3d:f0:f5:2a:a3:
                    85:f7:53:08:60:54:f8:22:57:33:46:6d:55:46:38:
                    dd:e9:04:12:45:93:53:ef:3c:87:d5:c5:55:e2:9a:
                    ed:dd:e7:95:01:33:b4:c1:31:0c:f5:7e:f1:a5:92:
                    28:5f:e1:e6:42:c3:17:ca:d7:86:32:76:40:91:24:
                    b4:76:d0:77:74:a4:b6:6f:fe:1e:8a:bb:ce:53:e6:
                    ce:11:c0:93:c3:7c:ad:ad:05:46:78:e6:71:41:21:
                    3e:ea:3e:8a:13:69:7f:b6:c1:23:b0:20:59:c1:58:
                    a2:52:3e:89:83:66:d5:30:95:a5:8c:bc:23:e2:c4:
                    84:f9:0f:8f:c5:ec:ba:f7:b3:ef:b1:5b:1f:76:72:
                    d6:6a:0d:e1:56:e8:01:34:16:e1:14:2c:4d:1e:97:
                    72:73:e8:f2:94:19:4f:5a:c8:17:dd:5f:98:b6:ed:
                    1b:50:93:70:6e:31:8b:3b:ca:57:e9:48:7b:cf:e0:
                    74:2d:02:31:71:bb:32:99:c5:4b:f6:c1:00:e8:5a:
                    6b:59:7b:e2:2d:88:fa:64:2c:8d:e8:60:99:be:cc:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:86:73:D8:5B:11:52:F4:5A:73:F0:54:45:CC:19:FF:98:23:6D:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/23acbdbd-9b84-3b46-90d5-44490fcf8e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e6:af:c5:ca:67:d8:f3:ca:a6:b7:5b:70:cd:a0:04:92:bf:
         e7:69:a3:58:b8:b9:1e:48:5c:c0:f5:f9:36:f9:86:55:fc:04:
         1e:55:5c:9b:32:11:ca:51:1b:44:46:1e:f7:ca:1c:74:fa:ee:
         94:c3:4a:a2:ad:4d:56:b6:11:1e:23:18:b1:ef:3c:dd:b6:8c:
         00:0f:87:44:71:9e:f1:31:59:34:ee:1c:53:ed:2c:5c:39:19:
         84:f4:c7:67:7b:95:5f:df:90:d1:af:61:b8:2c:43:d7:41:b2:
         5d:24:1e:65:6d:51:af:86:41:c3:04:eb:55:a3:6d:2e:51:44:
         d1:dd:f4:f8:34:aa:90:92:3a:f3:c2:2b:d9:0d:6d:c3:ba:87:
         85:7f:09:ab:d8:7a:be:df:56:2a:25:0e:fd:85:c3:d8:2e:9a:
         96:86:b1:28:ab:ae:40:2c:c6:a8:e7:1e:41:3a:ed:e0:0a:18:
         75:61:53:03:7d:26:3a:b9:d8:1f:4d:99:46:77:70:b0:12:29:
         08:86:9a:30:46:b8:da:88:d2:39:c8:3c:39:5e:f4:1e:7e:12:
         7d:8f:f1:0a:4f:69:22:a5:82:3b:62:01:cb:f4:2d:70:61:61:
         af:ed:19:b8:2d:08:bb:08:3a:24:01:e1:48:32:5a:68:4b:ad:
         74:dd:f2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:01:29 2025 by rpki-client