Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ded717a0-d720-37b6-80fa-f9b12d1cd33b.roa
File:                     ded717a0-d720-37b6-80fa-f9b12d1cd33b.roa (raw, json)
Hash identifier:          NG7bS/0xcdLLxt2Cu87QmXDdDIvEMI64QwDI1VonNRY=
Subject key identifier:   76:65:53:30:48:C5:86:FA:33:CE:DB:F3:41:D7:6A:08:94:AF:A8:A6
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B2761836425976CC5EDC896C0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ded717a0-d720-37b6-80fa-f9b12d1cd33b.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     62610
IP address blocks:        128.14.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:83:64:25:97:6c:c5:ed:c8:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=52b47f31-d64e-4391-b81a-e89fe54482f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b3:03:44:c8:8d:1f:5b:ec:4a:7e:19:94:05:
                    da:d3:4b:60:1d:a2:48:38:c4:3b:a7:ea:46:08:32:
                    27:64:85:27:ed:f1:58:8f:ee:fb:85:9b:a4:c6:4b:
                    75:b1:dc:73:bc:48:20:ee:d6:fd:86:b2:58:bb:75:
                    74:79:38:ec:bd:01:8f:e0:e8:4d:a3:72:5b:2c:73:
                    10:be:45:43:55:e5:3a:b0:35:71:c8:1f:dc:82:4c:
                    b4:31:db:0e:fd:0a:93:6d:23:0c:7a:fc:94:e1:bc:
                    2e:f7:21:5c:93:f6:a1:e3:6f:32:0f:40:85:12:7f:
                    9b:8e:a5:fa:05:ed:8e:16:b0:9a:d1:72:b7:e4:d0:
                    51:54:e1:7b:f4:df:a2:63:95:f4:5e:fe:ae:2c:4d:
                    b0:fb:09:62:10:c9:3b:83:24:4c:ea:5c:ee:65:08:
                    91:dc:22:0b:c2:37:39:c2:87:ae:20:ff:5c:6c:07:
                    50:fb:8f:bf:08:2e:9a:af:c6:03:4d:d9:3e:88:5c:
                    77:c2:7b:46:35:34:30:e9:b8:f8:4f:17:fd:ea:40:
                    30:b7:eb:a8:80:b8:e7:12:1a:8a:2e:87:b9:89:61:
                    36:77:d2:2c:ec:e7:d7:74:2a:bb:91:46:85:e2:ca:
                    7a:0f:f9:1c:d5:11:12:34:53:e4:96:ec:1f:d1:56:
                    9c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:65:53:30:48:C5:86:FA:33:CE:DB:F3:41:D7:6A:08:94:AF:A8:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ded717a0-d720-37b6-80fa-f9b12d1cd33b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a3:a3:aa:54:89:81:f1:ca:c1:79:c4:35:fa:27:04:fe:f2:
         88:d9:55:ce:0c:ee:65:e6:97:cb:3d:72:ed:83:21:e6:3a:04:
         93:66:67:aa:26:ba:0b:a6:0c:bc:27:a4:e6:a9:b0:ef:e7:0d:
         2e:27:41:b1:9f:45:93:57:4d:26:33:6a:78:e7:f2:cb:5d:e7:
         35:43:a5:10:e3:16:a1:ca:38:1d:4b:0c:a9:09:1c:89:75:2e:
         0d:b4:2b:05:84:1e:55:fd:7f:3e:ab:84:09:e6:7f:82:e7:f9:
         d9:49:d9:61:ba:12:44:85:05:4d:ba:5c:b6:2d:cb:a8:37:5d:
         dc:dd:cf:5f:55:5e:9e:22:a5:76:e6:cc:a7:3e:0b:31:42:cd:
         0a:ee:ef:ef:fe:07:a0:cf:ba:54:f0:df:b4:20:32:27:2a:7d:
         66:b6:76:96:fc:b5:b7:f4:a5:af:ba:ce:d8:24:23:20:a8:58:
         d2:9b:16:4c:72:1f:0b:10:44:c0:af:9f:ab:1d:50:d0:11:81:
         92:f4:e6:f7:c3:35:24:85:f3:e3:b2:88:b4:22:da:7b:8c:7a:
         98:64:6b:75:64:a4:32:96:06:e7:78:07:92:52:51:c1:87:4c:
         90:b5:3d:1c:79:6c:52:52:ed:85:ad:63:22:05:e9:76:47:0a:
         5b:be:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:26:35 2025 by rpki-client