Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/be3cb13e-9e17-31b9-8a96-d9d57ee91e56.roa
File:                     be3cb13e-9e17-31b9-8a96-d9d57ee91e56.roa (raw, json)
Hash identifier:          rXn79ot/geL2dLN8h6rq7POCCFGdDaIZ1mxW5K7BwBA=
Subject key identifier:   4A:F5:E1:49:04:1F:CD:0E:E6:D6:2E:3B:64:91:AD:2E:30:B0:79:84
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B4BAC55B45192B4900422DF80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/be3cb13e-9e17-31b9-8a96-d9d57ee91e56.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     62610
IP address blocks:        128.14.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:55:b4:51:92:b4:90:04:22:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=10238939-4018-4822-a5c2-9313ae6e9ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:dd:d5:5a:74:a3:10:d5:a9:ac:e8:b4:b7:
                    a5:50:6e:ad:7d:7f:85:b3:51:62:a8:47:64:59:54:
                    a5:8d:db:89:53:1c:b5:a6:c6:32:53:52:71:78:1b:
                    1f:69:f2:29:f3:67:58:78:84:12:61:22:b6:58:88:
                    45:a3:4c:3f:0f:9e:bf:8e:40:36:7b:da:11:b6:82:
                    e8:9e:00:c0:45:85:9a:42:d6:d3:23:15:e8:9a:b2:
                    c3:1b:24:c9:81:8c:dc:92:5f:eb:86:d8:e0:24:9e:
                    e9:3b:25:51:fd:02:30:8b:ca:ca:56:72:c3:e9:4c:
                    cc:f2:82:35:53:d4:0d:36:75:f4:a6:e7:70:7d:1c:
                    70:21:0d:dc:95:39:94:89:19:af:5c:94:68:82:d6:
                    7e:58:35:7f:83:c0:fa:7a:a8:a7:2d:a8:8f:ce:00:
                    b8:92:19:94:06:6a:81:af:c6:ca:2a:60:c0:b8:af:
                    b6:5a:78:ab:db:cc:fb:c1:a3:1f:8e:a6:44:05:44:
                    a1:d2:d1:97:ba:25:04:31:9c:27:ab:8f:55:7f:3f:
                    41:c5:f8:9a:87:d3:d4:16:7e:38:63:91:68:b3:0a:
                    59:73:08:5f:79:24:38:a8:b5:8b:13:38:8c:35:c8:
                    32:a7:4d:db:05:4d:4e:05:06:98:95:38:c8:eb:c9:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F5:E1:49:04:1F:CD:0E:E6:D6:2E:3B:64:91:AD:2E:30:B0:79:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/be3cb13e-9e17-31b9-8a96-d9d57ee91e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c6:9a:e7:5a:19:c6:35:13:76:04:05:ed:b5:f2:5f:69:b0:
         a4:ab:12:bb:22:49:db:66:c1:0e:a5:93:e8:ee:12:49:73:20:
         a0:a8:9a:57:7f:29:9f:52:df:86:bb:07:42:b8:99:c2:71:ac:
         94:05:ca:30:2b:68:0b:2b:14:2d:74:d3:40:7c:2e:20:f9:68:
         15:71:67:e3:67:9e:39:45:8f:2b:89:bc:07:e2:4e:13:fd:44:
         5b:10:f8:0b:ce:91:1c:f7:16:7a:63:9e:eb:bd:e5:3e:24:c3:
         a8:64:21:e7:58:b7:cb:19:bc:9c:04:a7:b0:c0:a1:48:7e:e7:
         ea:d8:8b:75:4a:de:ef:44:4e:96:d2:8a:1c:fd:ef:cf:9a:06:
         27:81:01:5c:b1:41:a4:97:8c:2b:58:8a:0d:3e:4d:1e:f1:b8:
         98:f9:57:04:cc:04:c8:60:f9:db:47:45:39:7a:c8:4d:5a:17:
         89:42:a7:01:34:9c:47:bd:a4:23:ec:a5:58:c1:8e:41:75:ab:
         d1:a2:79:0e:d2:7a:e9:3a:49:57:e5:d9:20:c7:43:f1:33:6d:
         7b:14:e1:81:36:26:ff:9d:44:b8:87:77:6d:72:c2:e9:fe:e5:
         30:f9:62:73:36:1b:9e:42:af:8b:87:c9:48:9f:27:50:43:3e:
         29:44:af:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:22:56 2025 by rpki-client