Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ded717a0-d720-37b6-80fa-f9b12d1cd33b.roa
File:                     ded717a0-d720-37b6-80fa-f9b12d1cd33b.roa (raw, json)
Hash identifier:          e/q+Ok64LdBVOyt9F876j+cqT1sZwNTd7hCy15qlMJ0=
Subject key identifier:   33:86:09:EC:2B:F1:13:AD:8B:31:BE:8B:5F:47:74:88:C8:E8:F1:83
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584A46A5A29AFA69E9607CFD9F80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ded717a0-d720-37b6-80fa-f9b12d1cd33b.roa
Signing time:             Sun 22 Jun 2025 13:01:03 +0000
ROA not before:           Sun 22 Jun 2025 13:01:03 +0000
ROA not after:            Sat 20 Sep 2025 13:01:03 +0000
asID:                     62610
IP address blocks:        128.14.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:a5:a2:9a:fa:69:e9:60:7c:fd:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 22 13:01:03 2025 GMT
            Not After : Sep 20 13:01:03 2025 GMT
        Subject: CN=0c2db6aa-cd20-4194-8b72-86f5dfd43025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:5b:4d:c0:d2:20:35:9a:29:49:d7:d2:ce:
                    94:57:39:5c:72:43:50:93:8e:3f:df:da:99:3f:66:
                    c8:ea:e9:60:3a:ed:58:3d:37:40:2f:09:69:52:d4:
                    e0:d0:61:fa:b8:60:38:81:ba:3b:84:f3:73:cd:5b:
                    b2:0a:9c:d6:20:04:c2:18:a3:93:45:b7:ab:e3:da:
                    2b:07:6c:77:54:d9:73:7b:14:69:7d:49:e9:70:2a:
                    ea:05:97:cb:6c:d1:4a:34:8e:3b:25:d0:63:77:84:
                    13:19:5f:73:b9:a2:a4:89:84:14:34:4f:37:80:40:
                    12:17:bb:19:11:24:db:57:e7:81:9f:32:5d:fc:62:
                    28:28:24:b6:3e:01:f5:89:77:b0:ab:cb:b0:98:21:
                    aa:dd:20:24:2f:e0:24:33:aa:cb:7d:51:dc:37:79:
                    68:74:12:dc:ec:7c:0c:a1:68:eb:80:56:97:79:fb:
                    3e:1f:7c:70:29:34:52:0a:c4:e5:4b:46:b0:cf:b3:
                    6b:05:04:e0:4e:77:e5:f0:2b:1f:fd:19:65:6b:91:
                    30:6f:34:4d:e0:f4:b9:0b:72:74:7a:24:ab:b1:39:
                    a4:bf:59:ca:3d:1a:d2:bc:50:6c:ed:21:00:a8:e3:
                    40:56:d0:82:a5:61:84:42:84:d9:a7:72:bc:81:ee:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:86:09:EC:2B:F1:13:AD:8B:31:BE:8B:5F:47:74:88:C8:E8:F1:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ded717a0-d720-37b6-80fa-f9b12d1cd33b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:18:28:84:80:5c:db:43:cb:ed:fb:26:fd:33:2d:ff:d1:2f:
         a4:eb:a6:47:dd:48:69:e9:1d:98:db:07:45:a2:96:d7:21:2a:
         8b:c1:c7:50:3c:d1:4c:1f:27:c2:37:87:2a:b6:dc:5f:cc:09:
         bf:7f:35:8b:42:df:42:40:29:03:aa:03:3c:07:39:f6:e8:0a:
         12:5c:07:08:fe:1c:7c:9f:7c:13:0f:01:3a:63:7e:1a:4b:cb:
         a2:84:67:9a:1d:10:38:2f:f8:b4:34:8e:d9:12:1f:c6:79:91:
         31:7c:c0:6c:ed:08:cc:99:99:56:eb:6d:33:96:aa:55:ec:48:
         ab:33:22:7b:a3:69:c3:a8:bb:88:4c:c4:64:a0:c7:e1:6c:00:
         54:01:58:a5:b4:b2:4e:ed:c7:bd:19:7e:24:2a:99:35:fc:82:
         24:36:16:03:b0:65:b6:4f:ae:21:a8:a5:9c:8b:3b:0b:4b:f7:
         e5:8b:52:61:99:5a:9b:9c:86:8c:fb:f8:20:60:01:3e:22:5a:
         f8:c6:65:0d:f4:c6:fe:20:f7:99:f5:a5:ce:11:99:a4:06:7a:
         37:39:ae:e0:bf:a4:fa:f0:90:a6:0a:27:1e:21:23:0c:24:53:
         d4:1b:0a:35:7c:d7:db:8d:69:44:55:3a:13:25:7c:ab:26:3b:
         fd:77:ab:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGpaKa+mnpYHz9n4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk
MGMyZGI2YWEtY2QyMC00MTk0LThiNzItODZmNWRmZDQzMDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyINbTcDSIDWaKUnX0s6UVzlcckNQk44/39qZ
P2bI6ulgOu1YPTdALwlpUtTg0GH6uGA4gbo7hPNzzVuyCpzWIATCGKOTRber49or
B2x3VNlzexRpfUnpcCrqBZfLbNFKNI47JdBjd4QTGV9zuaKkiYQUNE83gEASF7sZ
ESTbV+eBnzJd/GIoKCS2PgH1iXewq8uwmCGq3SAkL+AkM6rLfVHcN3lodBLc7HwM
oWjrgFaXefs+H3xwKTRSCsTlS0awz7NrBQTgTnfl8Csf/Rlla5EwbzRN4PS5C3J0
eiSrsTmkv1nKPRrSvFBs7SEAqONAVtCCpWGEQoTZp3K8ge5KxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDOGCewr8ROtizG+i19HdIjI6PGDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvZGVkNzE3YTAtZDcyMC0z
N2I2LTgwZmEtZjliMTJkMWNkMzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgA49MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI0YKISAXNtDy+37Jv0zLf/RL6TrpkfdSGnpHZjbB0WiltchKovBx1A8
0UwfJ8I3hyq23F/MCb9/NYtC30JAKQOqAzwHOfboChJcBwj+HHyffBMPATpjfhpL
y6KEZ5odEDgv+LQ0jtkSH8Z5kTF8wGztCMyZmVbrbTOWqlXsSKszInujacOou4hM
xGSgx+FsAFQBWKW0sk7tx70ZfiQqmTX8giQ2FgOwZbZPriGopZyLOwtL9+WLUmGZ
Wpuchoz7+CBgAT4iWvjGZQ30xv4g95n1pc4RmaQGejc5ruC/pPrwkKYKJx4hIwwk
U9QbCjV819uNaURVOhMlfKsmO/13q0s=
-----END CERTIFICATE-----
Generated at Sun Jun 29 17:50:22 2025 by rpki-client