Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9f69112e-a8eb-3407-8e79-2f5e87ba02c3.roa
File:                     9f69112e-a8eb-3407-8e79-2f5e87ba02c3.roa (raw, json)
Hash identifier:          6RY0wxnK73rwB4CCkYV9uYK9KmHdFn30SQdl+kJVjhE=
Subject key identifier:   07:97:4C:DD:1D:C4:4E:6C:E3:24:DA:4F:5C:DE:5F:DB:E3:65:0C:01
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A374ACB4D70E2FCB0D02C1700
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9f69112e-a8eb-3407-8e79-2f5e87ba02c3.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     21859
IP address blocks:        128.14.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:cb:4d:70:e2:fc:b0:d0:2c:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=10b539bb-591c-4b70-b304-260e51e7c80b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:6a:25:07:4e:ca:dc:5e:f3:fd:a8:ca:55:
                    c5:c7:bc:54:5f:d4:2c:ba:7d:9b:f6:72:ca:10:6d:
                    25:e3:a5:70:cc:aa:2e:e0:9e:49:96:96:33:d8:aa:
                    bb:ed:9f:cd:f7:4f:e0:81:29:24:9b:23:aa:37:0e:
                    ab:2a:fc:7b:60:1f:e7:de:e8:f8:8a:32:ff:0e:b4:
                    8b:fb:b4:4d:8d:8f:48:59:76:9c:27:84:43:20:4c:
                    b5:5a:54:c6:98:aa:52:ac:b1:13:34:12:04:13:ce:
                    8b:2e:94:8a:75:b1:d3:33:a6:61:6d:89:b7:aa:45:
                    fb:99:6b:43:52:73:8d:b8:65:c3:9c:ac:d1:c2:a4:
                    70:43:51:d2:67:ed:82:e5:ab:b6:2c:2b:d5:1e:1a:
                    01:d0:ba:8c:f9:56:54:8e:36:f2:59:85:b4:87:86:
                    c9:57:3a:56:b8:6f:20:21:9c:04:6f:5b:2f:ab:5b:
                    e5:ee:8b:e3:66:5a:78:ed:b9:f9:cc:79:9d:d4:25:
                    d0:85:a0:64:18:05:c1:99:86:75:d9:c7:93:40:ff:
                    ce:1b:76:12:35:4c:82:dc:73:1f:2f:fc:3d:62:15:
                    77:19:02:36:0b:99:b8:e9:0c:80:44:a3:56:1b:56:
                    7d:37:95:63:08:95:19:14:c6:04:25:f0:f6:a6:d8:
                    c0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:97:4C:DD:1D:C4:4E:6C:E3:24:DA:4F:5C:DE:5F:DB:E3:65:0C:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/9f69112e-a8eb-3407-8e79-2f5e87ba02c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:48:3b:1f:04:27:28:30:d1:e9:04:c4:45:9b:7f:92:22:f5:
         8c:e0:fd:7c:03:da:f7:0d:d7:90:18:95:d8:44:4b:e5:f4:61:
         63:10:52:23:d4:75:49:67:d3:2b:be:66:b4:1b:be:fa:dc:ad:
         60:00:16:b3:a8:75:47:8f:fe:fc:90:b3:19:d1:5e:3a:5b:5c:
         6e:69:d1:b5:ab:2d:67:0c:e0:fc:e7:17:83:14:c5:3f:84:57:
         c0:2c:b7:a3:62:0f:f4:85:47:b3:68:df:a8:ec:c1:78:70:c8:
         fc:4d:5a:7c:a7:91:0c:5b:13:f7:51:1c:b6:d8:ca:d3:ae:58:
         a0:6a:86:10:07:1a:fc:29:e6:45:a3:31:09:0a:19:2b:69:b8:
         7e:fd:c5:c4:58:72:b3:77:7e:6f:7e:f4:88:de:41:06:70:5f:
         a2:11:89:53:73:bb:d0:a0:fe:0c:f1:01:a9:58:6c:ae:37:c2:
         cd:fc:dd:d4:50:d7:7f:d7:65:c1:a7:74:2f:a7:5c:39:d1:8e:
         3a:f2:8b:30:e3:97:b1:9d:12:94:3b:a8:f1:32:94:2d:92:37:
         cd:03:fe:1c:8f:de:f8:40:94:06:de:a9:50:23:b2:89:12:68:
         8e:06:22:9d:21:b3:8a:56:1b:de:a2:fd:84:0f:b1:01:16:63:
         56:1e:0b:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SstNcOL8sNAsFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk
MTBiNTM5YmItNTkxYy00YjcwLWIzMDQtMjYwZTUxZTdjODBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFpqJQdOytxe8/2oylXFx7xUX9Qsun2b9nLK
EG0l46VwzKou4J5JlpYz2Kq77Z/N90/ggSkkmyOqNw6rKvx7YB/n3uj4ijL/DrSL
+7RNjY9IWXacJ4RDIEy1WlTGmKpSrLETNBIEE86LLpSKdbHTM6ZhbYm3qkX7mWtD
UnONuGXDnKzRwqRwQ1HSZ+2C5au2LCvVHhoB0LqM+VZUjjbyWYW0h4bJVzpWuG8g
IZwEb1svq1vl7ovjZlp47bn5zHmd1CXQhaBkGAXBmYZ12ceTQP/OG3YSNUyC3HMf
L/w9YhV3GQI2C5m46QyARKNWG1Z9N5VjCJUZFMYEJfD2ptjAZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAeXTN0dxE5s4yTaT1zeX9vjZQwBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvOWY2OTExMmUtYThlYi0z
NDA3LThlNzktMmY1ZTg3YmEwMmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA4MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADlIOx8EJygw0ekExEWbf5Ii9Yzg/XwD2vcN15AYldhES+X0YWMQUiPU
dUln0yu+ZrQbvvrcrWAAFrOodUeP/vyQsxnRXjpbXG5p0bWrLWcM4PznF4MUxT+E
V8Ast6NiD/SFR7No36jswXhwyPxNWnynkQxbE/dRHLbYytOuWKBqhhAHGvwp5kWj
MQkKGStpuH79xcRYcrN3fm9+9IjeQQZwX6IRiVNzu9Cg/gzxAalYbK43ws383dRQ
13/XZcGndC+nXDnRjjryizDjl7GdEpQ7qPEylC2SN80D/hyP3vhAlAbeqVAjsokS
aI4GIp0hs4pWG96i/YQPsQEWY1YeCxI=
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:37:13 2025 by rpki-client