Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7a372e23-7d18-3c50-9901-e4c82045fa1d.roa
File:                     7a372e23-7d18-3c50-9901-e4c82045fa1d.roa (raw, json)
Hash identifier:          tRAGTmURDGHwDLaRQ8RRsaY8xayre7k+bzsM092jSDc=
Subject key identifier:   BD:03:55:5F:07:77:23:FF:63:D6:F0:4D:F2:49:7B:9C:9C:FF:EA:C7
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A0D6A8604C00B7883CA61D200
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7a372e23-7d18-3c50-9901-e4c82045fa1d.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     62610
IP address blocks:        128.14.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:86:04:c0:0b:78:83:ca:61:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=695fd180-9f29-4c41-a6b4-b4f1467e7f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:13:ad:95:79:80:bb:6a:ff:8d:08:63:21:8f:
                    f4:24:dd:94:7c:0c:08:ab:51:eb:d5:4b:08:67:24:
                    18:a8:97:3c:c7:76:44:88:3e:02:de:c5:23:c0:94:
                    70:d6:10:f9:6f:05:68:dd:a7:52:ee:23:d3:51:f2:
                    be:12:b4:43:0c:0d:a2:73:71:ed:6c:11:e4:bc:a7:
                    04:c1:64:e6:62:92:00:bc:6b:58:91:9c:58:0e:20:
                    ff:ff:7a:76:e3:70:a4:f2:dd:d9:bc:e0:07:1e:3c:
                    3b:3c:87:c7:b0:e1:a8:2b:94:2d:02:37:b7:b0:1c:
                    03:f5:cf:0f:fb:53:4e:9b:3f:fa:5c:fa:f7:c4:eb:
                    98:e2:45:c8:0c:1f:86:cf:c5:aa:ee:f9:4b:69:b5:
                    81:ec:56:28:72:f9:33:11:90:10:06:26:0d:58:ab:
                    d8:d3:43:c7:a9:02:f8:c0:32:9b:00:d8:81:12:b8:
                    b5:fb:6f:ef:71:15:7a:27:1b:6e:69:7e:98:d1:39:
                    16:78:01:31:c8:66:0d:aa:c4:26:c6:9a:99:79:7b:
                    c8:3b:6f:e0:ca:e4:e4:84:4b:89:73:c3:9d:93:b7:
                    9a:f6:a2:1e:fd:6e:d4:8e:8d:c8:dd:53:73:f6:44:
                    1b:79:c0:09:aa:2f:55:77:4c:5a:c5:97:05:ba:ac:
                    10:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:03:55:5F:07:77:23:FF:63:D6:F0:4D:F2:49:7B:9C:9C:FF:EA:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7a372e23-7d18-3c50-9901-e4c82045fa1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:96:43:d6:c7:1b:51:36:fe:a5:a0:d2:1e:99:4b:10:c5:35:
         15:a8:b7:11:5f:3b:6e:d9:de:9e:20:40:66:01:81:97:58:f6:
         b6:fe:26:e4:b4:c0:65:4c:38:d4:5e:5e:95:98:f3:a7:e3:04:
         90:ce:33:56:0b:7f:78:a1:39:dc:52:4f:56:7d:5e:a9:42:7d:
         36:6d:7b:e9:79:65:03:ec:1a:d6:31:7a:68:e8:6c:89:bb:c7:
         db:ca:74:ae:21:a0:ae:0d:0f:78:94:d8:60:88:db:9a:64:04:
         61:af:cd:c2:0a:27:e0:07:2a:b1:ee:12:ad:9b:9b:ef:7c:99:
         39:84:fd:9e:c5:e9:c2:fd:2c:16:50:80:d1:56:e7:56:b2:0b:
         0f:88:19:a9:1a:ea:76:cc:3e:64:24:c2:ba:f2:31:49:9f:d5:
         e3:fc:21:91:77:9f:16:02:82:54:ed:7a:52:93:2b:2f:4c:3c:
         b3:b4:3f:29:fd:2e:8f:41:60:67:f8:59:87:21:17:b2:6b:0f:
         51:98:57:c9:5c:16:5e:0b:54:d8:08:2b:f3:e8:0e:0a:2e:be:
         97:1f:45:38:ff:bc:a4:8d:6a:89:cb:51:02:26:0f:2e:8c:56:
         2e:3d:38:fa:b7:8f:e5:e9:49:a1:bb:42:cc:6a:df:82:ed:44:
         bb:e4:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:59:01 2025 by rpki-client