Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69522b8-88a6-3604-999e-40690867ecc5.roa
File:                     b69522b8-88a6-3604-999e-40690867ecc5.roa (raw, json)
Hash identifier:          FrVu1EGYBN+5a9+DdQsHhGlYLaI07lxM6nPnwpWffyM=
Subject key identifier:   28:25:76:69:71:EA:47:AE:1C:DD:67:C3:43:6F:E2:F9:7D:B1:D4:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB03BEB0DC93BB7B532260
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69522b8-88a6-3604-999e-40690867ecc5.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396826
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:03:be:b0:dc:93:bb:7b:53:22:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=6d3a5b15-aaf9-44c1-8385-879aa83b2e22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ef:86:41:91:1f:7e:dd:40:e8:02:ef:31:80:
                    46:1a:7e:03:53:86:ae:4b:69:76:7e:fa:e9:41:02:
                    65:54:0e:a0:84:5e:b2:4b:c7:d1:0c:63:08:e8:72:
                    f8:43:f0:f6:a8:0c:98:0c:de:4a:be:ab:32:81:7b:
                    ce:2e:c5:d8:ae:94:5e:c8:ec:ce:3e:b9:a3:3f:d1:
                    dd:86:c3:1c:73:40:48:11:8c:22:09:5f:1f:94:7c:
                    87:05:4e:d6:8f:ea:ad:62:e5:10:d8:d9:9d:a9:3b:
                    56:d4:28:8b:22:2f:7a:69:3e:16:a3:71:f1:57:7b:
                    e8:73:0b:85:9f:d7:21:a4:57:27:f0:cc:6b:2b:1b:
                    e4:38:d8:6c:02:25:60:ac:6e:74:b8:87:f5:e4:5a:
                    3d:df:0d:5e:2b:f8:01:85:0b:9b:cd:ca:42:36:b7:
                    c6:59:eb:f7:7f:dd:b2:08:bb:63:ed:8c:4c:71:14:
                    54:88:89:1d:c2:65:d0:c1:59:5c:30:e3:9a:4f:85:
                    5e:64:59:8b:e1:82:9a:bc:68:32:e1:fb:0f:fe:fd:
                    be:11:2a:f6:d0:0c:30:71:e0:59:9d:62:80:bf:8a:
                    01:4f:24:c8:8f:d7:ee:bc:fa:20:fc:2a:ca:dd:4a:
                    75:a4:a1:87:66:b0:46:af:74:4d:07:08:f9:67:8a:
                    fb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:25:76:69:71:EA:47:AE:1C:DD:67:C3:43:6F:E2:F9:7D:B1:D4:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69522b8-88a6-3604-999e-40690867ecc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:18:69:93:aa:18:15:a1:8a:72:70:20:9a:c2:18:14:ab:f7:
         a6:31:57:79:9c:e8:ee:4a:85:14:6c:64:f5:1a:04:11:60:31:
         b4:88:d8:b5:0e:ad:9b:ea:db:0f:b3:a6:39:c0:17:96:af:14:
         d2:13:eb:d3:77:34:18:ae:85:94:9c:7a:d1:3a:60:2e:78:21:
         2a:2d:2e:03:a9:ef:f9:85:28:cb:ea:b0:da:2a:b7:82:19:d6:
         29:f0:57:8b:11:c8:07:5a:2f:29:22:b8:f9:17:67:e5:94:59:
         77:0e:57:d7:9e:e0:12:1c:54:3a:55:4d:e5:61:2a:67:2d:c0:
         c5:ed:52:3e:2e:94:68:b3:3e:9f:2d:0e:fb:8e:37:df:21:65:
         2b:eb:59:21:d1:c6:a5:57:93:f0:42:bb:e6:d3:c5:39:90:1c:
         ea:af:2d:a8:a1:88:d0:47:74:9b:73:03:2d:9e:3a:fa:f3:54:
         90:80:4b:a1:2d:f2:89:bb:b2:2e:a2:0b:75:e8:ba:80:f1:1d:
         66:d9:35:a5:f4:c2:da:04:d0:21:46:d2:5d:05:3e:93:7f:67:
         f5:cf:71:28:cd:75:be:21:89:3d:8f:05:b4:4e:fd:06:d8:17:
         c6:72:31:02:18:df:6a:b1:51:b9:ab:01:95:99:d4:fd:08:7b:
         6e:bc:30:dd
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2wO+sNyTu3tTImAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NmQzYTViMTUtYWFmOS00NGMxLTgzODUtODc5YWE4M2IyZTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e+GQZEfft1A6ALvMYBGGn4DU4auS2l2fvrp
QQJlVA6ghF6yS8fRDGMI6HL4Q/D2qAyYDN5KvqsygXvOLsXYrpReyOzOPrmjP9Hd
hsMcc0BIEYwiCV8flHyHBU7Wj+qtYuUQ2NmdqTtW1CiLIi96aT4Wo3HxV3vocwuF
n9chpFcn8MxrKxvkONhsAiVgrG50uIf15Fo93w1eK/gBhQubzcpCNrfGWev3f92y
CLtj7YxMcRRUiIkdwmXQwVlcMOOaT4VeZFmL4YKavGgy4fsP/v2+ESr20AwwceBZ
nWKAv4oBTyTIj9fuvPog/CrK3Up1pKGHZrBGr3RNBwj5Z4r7twIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCgldmlx6keuHN1nw0Nv4vl9sdScMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjY5NTIyYjgtODhhNi0z
NjA0LTk5OWUtNDA2OTA4NjdlY2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB7GGmTqhgVoYpycCCawhgUq/emMVd5nOjuSoUU
bGT1GgQRYDG0iNi1Dq2b6tsPs6Y5wBeWrxTSE+vTdzQYroWUnHrROmAueCEqLS4D
qe/5hSjL6rDaKreCGdYp8FeLEcgHWi8pIrj5F2fllFl3DlfXnuASHFQ6VU3lYSpn
LcDF7VI+LpRosz6fLQ77jjffIWUr61kh0calV5PwQrvm08U5kBzqry2ooYjQR3Sb
cwMtnjr681SQgEuhLfKJu7Iuogt16LqA8R1m2TWl9MLaBNAhRtJdBT6Tf2f1z3Eo
zXW+IYk9jwW0Tv0G2BfGcjECGN9qsVG5qwGVmdT9CHtuvDDd
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:40:11 2025 by rpki-client