Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30e3b6b2-8b9c-3b13-bda4-e13a1846bcaa.roa
File:                     30e3b6b2-8b9c-3b13-bda4-e13a1846bcaa.roa (raw, json)
Hash identifier:          CD9mUFVeb4aQ6sk9Id61BZtBvAyS3l47L/YZhDvWLls=
Subject key identifier:   86:6F:A0:67:2E:5D:5D:C2:2D:63:A1:7A:0C:32:13:6C:3C:E6:92:73
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849EEB506EB32C3C1AF3A9C22C0
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30e3b6b2-8b9c-3b13-bda4-e13a1846bcaa.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     54113
IP address blocks:        131.125.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:06:eb:32:c3:c1:af:3a:9c:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=95190d8c-3bac-450c-98d6-88cc5460a342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:f7:6f:15:82:cc:27:ce:ea:15:51:4d:65:
                    3b:fc:7b:d6:26:c9:20:c0:53:b1:ab:8d:ff:cb:25:
                    95:78:f9:71:8b:2f:7f:3d:95:7f:3d:a2:30:0c:15:
                    cf:52:60:d1:29:49:a5:eb:cd:9d:a3:e7:87:f5:eb:
                    68:e7:a7:4e:9b:0f:c5:34:3e:cc:b5:85:4f:e4:57:
                    20:d3:dc:9d:92:93:39:b6:55:9a:73:05:c6:d2:f3:
                    2e:59:94:a9:e6:96:ec:4a:78:a7:9b:95:09:d1:99:
                    c6:d8:fe:b0:3d:f7:c2:8c:9d:f7:ce:78:9f:83:bb:
                    97:db:38:2c:74:e0:9e:06:aa:15:51:ef:c7:97:88:
                    93:27:86:06:8a:f1:22:d1:5c:a1:3a:ef:c4:86:b3:
                    a6:93:e7:19:69:54:c0:40:ab:74:ed:e8:aa:29:ca:
                    33:15:5b:b1:21:ae:9c:2c:45:34:33:3f:83:93:ce:
                    52:db:ea:e2:04:83:e5:b6:4e:f2:98:90:5b:85:58:
                    b9:d2:7a:f4:f1:e0:75:da:3e:a8:0f:cc:3f:2b:00:
                    84:a9:f3:eb:82:1d:0c:40:ce:22:8c:a7:7b:1f:4a:
                    be:c5:57:a6:57:fa:8a:89:ab:a6:91:24:10:5b:2b:
                    38:3f:cb:d6:97:5a:cf:31:b1:8a:9d:6b:a0:24:d6:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6F:A0:67:2E:5D:5D:C2:2D:63:A1:7A:0C:32:13:6C:3C:E6:92:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/30e3b6b2-8b9c-3b13-bda4-e13a1846bcaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:28:ab:9f:57:40:98:5a:f5:0b:5a:12:4d:be:8b:9e:b2:c8:
         76:41:08:41:12:8a:b4:c3:00:b6:c8:40:60:d9:6b:33:af:ee:
         35:7d:52:51:f2:a6:a0:4d:09:80:2f:00:fa:69:0f:d1:28:2f:
         35:57:f3:f7:4d:b8:c7:c7:16:d7:52:fd:16:04:26:a2:64:83:
         1d:7e:6b:a7:dc:ae:a8:52:ac:30:17:8b:21:08:8b:eb:6e:c2:
         54:f5:63:5e:cf:90:1c:c8:98:e6:30:81:d4:ec:ae:fa:89:75:
         83:59:3e:fa:dc:0c:e2:2f:ba:27:b9:fa:db:c7:d8:b3:84:92:
         27:48:8e:b2:1b:e8:85:a7:9a:55:c4:cd:cd:86:23:f5:c6:d1:
         0d:19:9b:cb:c4:90:7a:b2:29:3f:f3:f2:ee:6d:69:62:06:36:
         d1:ce:f3:30:a3:f0:fb:28:ea:47:2e:44:c3:6f:0b:27:a2:86:
         7d:fb:15:40:80:07:e0:d6:00:1f:55:6a:62:41:3e:5f:33:86:
         6e:b9:bd:7e:c1:23:47:01:f9:2a:a6:cf:44:09:f8:05:15:42:
         40:b1:df:9b:05:76:9b:f2:69:92:f1:44:ee:04:1d:db:ed:59:
         9a:22:f1:e3:6b:7c:f3:e1:8f:62:7e:6a:38:d9:11:14:7d:25:
         7a:3c:66:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQbrMsPBrzqcIsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk
OTUxOTBkOGMtM2JhYy00NTBjLTk4ZDYtODhjYzU0NjBhMzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOL3bxWCzCfO6hVRTWU7/HvWJskgwFOxq43/
yyWVePlxiy9/PZV/PaIwDBXPUmDRKUml682do+eH9eto56dOmw/FND7MtYVP5Fcg
09ydkpM5tlWacwXG0vMuWZSp5pbsSninm5UJ0ZnG2P6wPffCjJ33znifg7uX2zgs
dOCeBqoVUe/Hl4iTJ4YGivEi0VyhOu/EhrOmk+cZaVTAQKt07eiqKcozFVuxIa6c
LEU0Mz+Dk85S2+riBIPltk7ymJBbhVi50nr08eB12j6oD8w/KwCEqfPrgh0MQM4i
jKd7H0q+xVemV/qKiaumkSQQWys4P8vWl1rPMbGKnWugJNaZLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIZvoGcuXV3CLWOhegwyE2w85pJzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzBlM2I2YjItOGI5Yy0z
YjEzLWJkYTQtZTEzYTE4NDZiY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg316MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYoq59XQJha9QtaEk2+i56yyHZBCEESirTDALbIQGDZazOv7jV9UlHy
pqBNCYAvAPppD9EoLzVX8/dNuMfHFtdS/RYEJqJkgx1+a6fcrqhSrDAXiyEIi+tu
wlT1Y17PkBzImOYwgdTsrvqJdYNZPvrcDOIvuie5+tvH2LOEkidIjrIb6IWnmlXE
zc2GI/XG0Q0Zm8vEkHqyKT/z8u5taWIGNtHO8zCj8Pso6kcuRMNvCyeihn37FUCA
B+DWAB9VamJBPl8zhm65vX7BI0cB+Sqmz0QJ+AUVQkCx35sFdpvyaZLxRO4EHdvt
WZoi8eNrfPPhj2J+ajjZERR9JXo8ZpU=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:29:16 2025 by rpki-client