Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7de174a5-fe02-37dc-9bcb-1f777220641f.roa
File:                     7de174a5-fe02-37dc-9bcb-1f777220641f.roa (raw, json)
Hash identifier:          EjgZY7h+b5Ki+8JfdXyr47Xmdtr7FCp49gt/h6UEh/8=
Subject key identifier:   D8:CB:18:06:8F:24:D5:38:CA:0E:8A:9A:0D:CC:CA:97:EC:F3:AF:34
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F43285849EEB5076A9EAAD8332E6C9F80
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7de174a5-fe02-37dc-9bcb-1f777220641f.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     54113
IP address blocks:        131.125.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:07:6a:9e:aa:d8:33:2e:6c:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=95427870-7ba2-4dfa-95bf-ac99a7d7d926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:31:94:55:e0:96:57:30:c7:c8:b1:61:c3:
                    37:93:9c:09:b3:ca:3f:66:d1:8b:29:9f:1e:b6:d1:
                    c0:39:fa:82:5c:c4:81:f4:da:50:10:bd:10:af:0b:
                    f5:a4:f7:3c:f6:2a:0a:15:33:9e:b2:93:91:6c:a2:
                    e8:bb:61:ce:14:71:c7:f2:99:a8:e4:92:60:6e:5f:
                    f8:53:6f:e9:e2:de:7e:5c:33:31:c4:c0:45:dd:2a:
                    b7:a0:41:64:48:54:06:df:1c:45:ea:e2:2c:0d:ce:
                    b3:2d:81:e5:b3:8c:dc:ce:a3:aa:18:93:6c:68:cf:
                    88:a7:c7:ae:95:c6:5b:ae:de:66:3c:65:a0:e5:4b:
                    56:df:64:49:74:f4:0b:ec:b7:b8:2a:0e:1d:ea:e4:
                    d3:91:e3:bb:33:e5:e8:69:55:89:03:74:08:39:d8:
                    06:5a:f0:7b:d4:16:79:c0:ef:1c:f4:48:26:62:e5:
                    e1:c2:d3:52:25:c9:f1:55:18:bd:14:60:dd:fd:9a:
                    ec:b3:38:75:04:f9:9f:6f:e1:3d:25:0e:4c:b2:9f:
                    ad:a7:fa:4f:93:85:d6:5a:1f:71:1d:5d:d6:40:5a:
                    ac:b5:38:df:b5:94:59:2b:7e:cb:8e:5f:e6:f5:71:
                    20:46:4a:b9:39:df:e2:09:df:03:80:66:e2:d9:73:
                    cf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CB:18:06:8F:24:D5:38:CA:0E:8A:9A:0D:CC:CA:97:EC:F3:AF:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7de174a5-fe02-37dc-9bcb-1f777220641f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6c:1e:df:6e:8b:4c:55:b0:be:fe:cd:74:07:76:08:30:d7:
         6f:a6:97:2e:29:b0:e5:5d:6c:2b:3d:f4:17:b1:0f:d3:8d:49:
         3d:75:75:c0:95:50:35:e3:54:03:5e:55:b3:fa:36:fd:1c:4b:
         7b:4c:9b:16:13:49:14:52:04:41:a4:6b:7b:f0:4a:df:0b:f2:
         57:ed:50:74:e3:4a:84:9a:d3:9c:0c:61:83:31:ce:da:fb:ff:
         7e:c5:46:7a:1c:9a:57:36:2b:f5:1c:3f:d0:f2:6d:55:16:d7:
         aa:3e:68:14:39:20:ac:0e:b0:c1:c1:8e:f7:6c:2a:3d:5a:df:
         bf:b5:77:f1:c2:20:66:d9:2f:ea:7a:56:a4:ca:24:62:1b:9b:
         e5:e8:93:ae:82:d7:4d:f5:9d:25:95:d8:fc:d9:a9:af:33:35:
         4f:71:f8:83:8d:4c:0e:21:31:ed:40:c8:0b:05:94:8c:49:ed:
         41:a8:a2:78:f5:0e:7d:54:c8:6c:85:3b:4a:fa:5b:87:b1:2b:
         5f:d3:e5:80:68:43:5a:f4:d4:9c:5c:10:18:9d:cf:7c:a1:53:
         d3:14:5f:f8:19:79:97:64:27:af:90:35:c7:6f:49:84:eb:aa:
         ab:86:c0:47:8e:5f:d7:fb:fc:65:8e:b5:d4:b3:b2:88:5a:bc:
         9b:77:95:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQdqnqrYMy5sn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj
N2YxMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk
OTU0Mjc4NzAtN2JhMi00ZGZhLTk1YmYtYWM5OWE3ZDdkOTI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJAxlFXgllcwx8ixYcM3k5wJs8o/ZtGLKZ8e
ttHAOfqCXMSB9NpQEL0Qrwv1pPc89ioKFTOespORbKLou2HOFHHH8pmo5JJgbl/4
U2/p4t5+XDMxxMBF3Sq3oEFkSFQG3xxF6uIsDc6zLYHls4zczqOqGJNsaM+Ip8eu
lcZbrt5mPGWg5UtW32RJdPQL7Le4Kg4d6uTTkeO7M+XoaVWJA3QIOdgGWvB71BZ5
wO8c9EgmYuXhwtNSJcnxVRi9FGDd/Zrsszh1BPmfb+E9JQ5Msp+tp/pPk4XWWh9x
HV3WQFqstTjftZRZK37Ljl/m9XEgRkq5Od/iCd8DgGbi2XPP9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjLGAaPJNU4yg6Kmg3Mypfs8680MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4
NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvN2RlMTc0YTUtZmUwMi0z
N2RjLTliY2ItMWY3NzcyMjA2NDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk
ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm
YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0
OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRsHt9ui0xVsL7+zXQHdggw12+mly4psOVdbCs99BexD9ONST11dcCV
UDXjVANeVbP6Nv0cS3tMmxYTSRRSBEGka3vwSt8L8lftUHTjSoSa05wMYYMxztr7
/37FRnocmlc2K/UcP9DybVUW16o+aBQ5IKwOsMHBjvdsKj1a37+1d/HCIGbZL+p6
VqTKJGIbm+Xok66C1031nSWV2PzZqa8zNU9x+IONTA4hMe1AyAsFlIxJ7UGoonj1
Dn1UyGyFO0r6W4exK1/T5YBoQ1r01JxcEBidz3yhU9MUX/gZeZdkJ6+QNcdvSYTr
qquGwEeOX9f7/GWOtdSzsohavJt3lZw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 01:22:42 2025 by rpki-client