Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7ef913d3-15aa-3d4f-b7cf-428324a365ae.roa
File:                     7ef913d3-15aa-3d4f-b7cf-428324a365ae.roa (raw, json)
Hash identifier:          wHHSZYcbEbYgPoQwkv2f+Fq9nnz+rKdtESUxZMbqkk0=
Subject key identifier:   95:8E:BD:6C:75:7E:3A:2E:24:F7:68:44:A1:B6:EB:DB:72:34:4A:E8
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A374ACB6CDA2ED9D5953F4440
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7ef913d3-15aa-3d4f-b7cf-428324a365ae.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     62610
IP address blocks:        128.14.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:cb:6c:da:2e:d9:d5:95:3f:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=7c61a891-603d-4c17-85df-3f147d266ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:a4:ed:f4:ee:cf:c1:c8:66:91:5d:b6:41:
                    53:31:e6:2a:39:57:67:d9:e0:1b:42:03:2a:73:0b:
                    59:fd:76:5c:b1:1e:0b:14:3f:44:e5:86:11:0c:26:
                    ce:30:17:b9:b8:68:60:c3:42:ca:e3:5d:f0:34:9e:
                    7a:06:84:13:69:66:c3:40:c0:09:06:03:2b:12:af:
                    74:a7:2c:22:2d:5b:8a:ba:a5:29:12:6a:66:15:31:
                    2f:62:0b:77:cb:24:ec:be:ed:70:88:ac:03:9d:3f:
                    df:4c:2a:70:62:91:6f:15:6d:62:09:d3:f5:0d:2a:
                    41:5d:62:04:f6:71:51:8c:76:c1:f8:c7:61:9b:95:
                    e3:eb:22:ce:c5:d6:ea:0a:29:40:cb:19:dc:ec:56:
                    f0:6e:67:fb:6a:33:38:f4:bb:42:e6:f8:f1:15:3f:
                    28:77:6e:a3:74:d0:b0:9d:6a:43:2b:14:52:70:11:
                    ca:a1:1f:39:48:34:6e:b0:e6:10:73:4b:30:1f:ee:
                    5c:1d:2f:fd:d8:c8:c1:20:dd:f9:7e:0a:46:c5:eb:
                    00:56:cf:26:07:3c:2a:b0:4d:93:93:0e:b5:40:c5:
                    f9:ae:f6:a5:41:5e:02:b9:9d:2b:81:fa:ea:07:07:
                    30:96:97:e7:2b:70:30:0a:1a:4d:40:f7:3a:d2:ac:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8E:BD:6C:75:7E:3A:2E:24:F7:68:44:A1:B6:EB:DB:72:34:4A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/7ef913d3-15aa-3d4f-b7cf-428324a365ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:48:cf:79:22:93:96:d1:18:09:78:82:d7:fe:0b:0f:8a:b7:
         2f:5a:9f:76:63:b8:a7:92:ca:fe:ae:3c:b2:cb:36:cd:87:22:
         2f:db:7a:19:11:38:42:01:4d:d1:83:8f:9e:08:8a:0a:e2:23:
         20:db:21:9e:47:c9:95:a0:c4:b4:b8:19:4d:b0:ce:94:73:86:
         c5:de:89:41:63:e9:d6:28:f5:94:d3:da:b3:17:5a:9b:12:33:
         08:4c:52:7b:f1:de:29:5c:0c:a0:8a:79:8f:5f:a7:04:e4:b0:
         20:e8:2e:b2:b9:a6:f8:de:f1:5e:7e:da:4f:57:45:60:b2:e4:
         b5:5d:10:f5:83:7b:ad:6c:bf:ea:e8:85:da:d1:c9:59:45:de:
         6f:03:d1:c2:a6:d9:fc:9e:c2:0b:06:62:31:e6:af:d6:4a:f1:
         07:66:f0:70:3d:77:ab:1c:93:13:89:27:78:63:fa:c0:23:ec:
         05:68:ff:7d:b7:59:ca:e2:79:fd:ba:b2:a3:9e:a4:08:4c:42:
         e3:80:5f:1c:b1:61:fc:3d:4d:50:65:0f:90:07:35:05:47:50:
         3f:65:ff:19:93:67:1f:4f:35:ff:4d:79:60:d0:96:22:9e:8f:
         e6:d8:c1:74:a6:70:da:51:79:12:9a:e8:fb:4a:28:de:4a:d8:
         a7:77:f1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:43:50 2025 by rpki-client