Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fc1989ec-e01b-3826-a3a8-4dd7ccf02105.roa
File:                     fc1989ec-e01b-3826-a3a8-4dd7ccf02105.roa (raw, json)
Hash identifier:          RdP7NaJhujTcUFkoWQmqLD+CCfxAFUBqyAwN6w7blJY=
Subject key identifier:   E1:05:9E:CC:7C:D7:AD:A5:AC:37:E3:D2:F3:6B:71:F3:26:30:5B:22
Certificate issuer:       /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
Certificate serial:       010D0C9F43285849780F0BD64255FF1F9101C900
Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fc1989ec-e01b-3826-a3a8-4dd7ccf02105.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        161.69.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0b:d6:42:55:ff:1f:91:01:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=92f16e6a-1750-47ae-8304-5110a6177b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ee:00:55:ae:ae:e1:d5:28:83:36:4a:21:41:
                    fd:95:14:da:80:db:0c:00:11:4e:fc:99:ec:bd:d1:
                    33:ca:c2:2a:6b:76:c9:91:5a:a2:d0:b9:f5:6d:66:
                    b4:a1:f2:06:69:49:96:5d:d3:24:d4:44:ce:6d:22:
                    e7:96:00:e5:e8:57:5f:85:60:91:f0:8b:a4:ee:76:
                    f8:c1:d4:08:30:36:f7:5b:26:33:0f:78:97:52:de:
                    e0:d0:0a:e0:cd:11:7d:90:85:3b:43:ca:97:fb:62:
                    1b:c0:1b:ae:68:4e:79:d8:3f:85:46:36:cf:00:1f:
                    6e:99:24:53:5f:1e:60:aa:9c:6e:dc:6e:c3:02:f5:
                    3d:94:48:cd:0a:8e:50:55:c6:c1:92:e0:67:a3:6a:
                    9c:91:fc:e2:40:7c:70:e1:9a:67:a1:fa:b4:d3:b1:
                    ec:39:f3:e0:68:8a:12:4b:c7:f6:72:4f:98:06:76:
                    d9:2c:c0:32:45:8e:b7:c3:1b:a6:cf:dd:13:32:55:
                    a2:df:f4:ae:e5:5c:61:1c:01:56:e9:d3:81:47:54:
                    54:07:30:18:51:a6:ea:da:c5:13:42:ec:ff:6d:9b:
                    11:d0:35:db:75:7b:2f:51:da:57:4c:f5:22:27:e3:
                    18:12:44:b8:ca:5c:b8:a2:a1:29:6f:5f:37:c0:45:
                    a1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:05:9E:CC:7C:D7:AD:A5:AC:37:E3:D2:F3:6B:71:F3:26:30:5B:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/fc1989ec-e01b-3826-a3a8-4dd7ccf02105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl

            X509v3 Authority Key Identifier:
                keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.69.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:b7:2e:ca:55:71:ac:ec:b5:0e:6e:11:ba:8d:8f:6e:1a:16:
         4c:15:35:7b:9b:f2:52:98:cb:c8:68:73:7a:ab:c1:38:45:6c:
         24:b0:3f:d5:59:c9:64:ed:a8:11:2d:d1:41:20:f3:be:54:89:
         41:0f:7e:a1:ad:9d:69:48:b6:ae:04:31:cb:23:62:bb:30:5c:
         bd:43:63:b0:e1:cb:05:1e:f2:a9:09:07:2a:9f:e4:57:e1:6a:
         96:9c:09:76:68:16:4c:79:c0:5b:ac:d3:e9:49:49:f5:61:36:
         87:b0:6c:28:d4:b8:88:c9:22:60:09:3d:99:bf:04:a1:15:ef:
         e8:46:db:2d:0a:02:e3:6a:53:50:12:0e:bd:30:93:81:13:60:
         8c:84:e3:a7:e2:9b:41:b0:ee:5f:6d:37:bd:19:34:3d:2e:ea:
         3c:71:a1:06:d3:33:46:c7:2b:f0:c9:51:93:7a:98:46:da:b1:
         6a:bf:90:49:ce:63:bb:0e:81:51:df:ec:7e:98:d3:73:f4:af:
         2e:90:0d:f7:4c:78:c9:45:d9:7f:10:13:7a:c2:a4:76:49:60:
         eb:6a:8c:42:df:df:88:21:68:86:d3:97:ab:b1:1d:67:8c:38:
         0e:89:ab:a1:dd:9d:18:79:c7:fa:59:0d:92:82:5d:5d:4b:6e:
         65:e4:40:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4DwvWQlX/H5EByQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi
M2I3MB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk
OTJmMTZlNmEtMTc1MC00N2FlLTgzMDQtNTExMGE2MTc3YjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO4AVa6u4dUogzZKIUH9lRTagNsMABFO/Jns
vdEzysIqa3bJkVqi0Ln1bWa0ofIGaUmWXdMk1ETObSLnlgDl6FdfhWCR8Iuk7nb4
wdQIMDb3WyYzD3iXUt7g0ArgzRF9kIU7Q8qX+2IbwBuuaE552D+FRjbPAB9umSRT
Xx5gqpxu3G7DAvU9lEjNCo5QVcbBkuBno2qckfziQHxw4Zpnofq007HsOfPgaIoS
S8f2ck+YBnbZLMAyRY63wxumz90TMlWi3/Su5VxhHAFW6dOBR1RUBzAYUabq2sUT
Quz/bZsR0DXbdXsvUdpXTPUiJ+MYEkS4yly4oqEpb183wEWhmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOEFnsx8162lrDfj0vNrcfMmMFsiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj
N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZmMxOTg5ZWMtZTAxYi0z
ODI2LWEzYTgtNGRkN2NjZjAyMTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3
MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2
YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk
Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUV9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+3LspVcazstQ5uEbqNj24aFkwVNXub8lKYy8hoc3qrwThFbCSwP9VZ
yWTtqBEt0UEg875UiUEPfqGtnWlItq4EMcsjYrswXL1DY7DhywUe8qkJByqf5Ffh
apacCXZoFkx5wFus0+lJSfVhNoewbCjUuIjJImAJPZm/BKEV7+hG2y0KAuNqU1AS
Dr0wk4ETYIyE46fim0Gw7l9tN70ZND0u6jxxoQbTM0bHK/DJUZN6mEbasWq/kEnO
Y7sOgVHf7H6Y03P0ry6QDfdMeMlF2X8QE3rCpHZJYOtqjELf34ghaIbTl6uxHWeM
OA6Jq6HdnRh5x/pZDZKCXV1LbmXkQCc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:47:25 2025 by rpki-client