Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc11c8f0-f39f-37b3-ab40-fb0b563f0e14.roa
File:                     bc11c8f0-f39f-37b3-ab40-fb0b563f0e14.roa (raw, json)
Hash identifier:          Tk6Q78cRfBxwB0MSLIE/Ej/g+KdOZ41hLPKweHEa+YA=
Subject key identifier:   B2:60:01:F3:61:98:25:73:B2:E3:3D:F5:35:BC:E3:F4:95:E0:78:EC
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A374ACB7A6AFA4FF096A4A5C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc11c8f0-f39f-37b3-ab40-fb0b563f0e14.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     21859
IP address blocks:        128.14.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:cb:7a:6a:fa:4f:f0:96:a4:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=89fbf46e-165c-45e8-b2c4-a9cac2a68710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:04:75:e5:45:47:a7:f7:b4:f3:32:f6:80:5d:
                    d2:37:e5:1a:34:ee:5c:76:f7:be:15:33:f1:eb:18:
                    cf:ac:cc:87:71:e3:6f:1f:98:12:17:54:b6:b7:e8:
                    3e:ca:7c:4e:fc:6e:91:8c:3a:fd:63:bf:15:00:45:
                    ee:f9:23:4a:f3:ac:64:7c:2b:c8:dc:4d:0e:2c:55:
                    21:18:9c:69:cc:15:af:25:41:1a:41:c0:ff:84:f7:
                    03:8a:70:8a:dd:dd:e1:f6:08:ad:6d:b8:af:90:26:
                    8f:d5:f0:ca:93:fb:19:90:e5:d3:c1:0b:8d:fb:28:
                    76:42:32:d8:e3:fd:48:df:a9:1a:d4:16:3d:ea:1f:
                    41:9f:e7:60:8a:7e:80:3d:68:c4:66:8e:48:ac:91:
                    70:a4:95:5a:80:de:79:c7:a3:f6:1f:74:25:85:6a:
                    55:fa:67:e7:48:c3:e2:fc:85:60:ba:99:ff:e1:9e:
                    4a:25:e1:0e:a8:d0:11:1e:0f:b1:75:cf:88:eb:b3:
                    9b:3c:0b:bd:90:15:c4:8a:00:12:a9:b6:7d:82:b8:
                    1b:d2:e6:1c:d6:c6:76:a2:95:5b:f8:40:af:8e:5a:
                    06:0b:5e:a7:24:64:b8:8c:1e:4f:fb:db:f0:46:16:
                    5f:ed:59:88:2e:88:fb:2d:14:76:28:5d:38:d0:20:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:60:01:F3:61:98:25:73:B2:E3:3D:F5:35:BC:E3:F4:95:E0:78:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/bc11c8f0-f39f-37b3-ab40-fb0b563f0e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:33:fe:c0:f3:41:5a:4c:05:bd:f7:37:57:f8:34:0f:a3:91:
         e5:74:92:de:d4:03:99:c4:c5:56:0d:63:f6:58:d0:e4:f9:c9:
         3f:1b:65:3c:4d:ab:0e:32:3c:f2:02:ee:f7:ff:2e:7c:74:33:
         bf:c3:5d:0c:30:f8:47:09:86:5e:8d:a8:1f:5a:2a:ea:f7:fd:
         53:47:a7:a6:99:16:5d:fd:dc:1e:91:9b:74:4d:48:c4:bd:06:
         13:ef:de:18:8c:9c:d9:6d:c5:03:df:41:0c:87:62:9a:fe:a6:
         5c:93:57:63:0a:4e:a3:b6:35:cb:8f:8c:5a:90:d3:94:11:56:
         0e:ee:a0:3f:11:ae:05:55:8f:03:59:0f:38:4f:5b:fd:43:fe:
         81:78:d6:a5:a0:5d:02:6b:1b:60:2f:45:d6:4d:e7:2e:62:53:
         95:7b:66:7c:a0:99:4c:62:50:26:19:e8:80:58:c8:4c:85:de:
         02:cb:c6:78:1d:55:dd:84:3e:36:07:98:ac:bc:c3:d6:18:b3:
         8a:e9:12:90:a4:ea:31:78:23:b9:37:fa:b7:02:25:b0:e3:dd:
         f8:ae:c2:8e:a0:38:25:6b:0d:5b:59:50:60:c4:0c:dc:68:6f:
         4f:47:bc:1f:96:91:02:bb:d9:ee:fc:b7:62:b4:da:dc:78:7f:
         d9:34:64:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:25:00 2025 by rpki-client