Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa
File:                     bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa (raw, json)
Hash identifier:          QO6p+O9NAdJZrAUQiq5oi9Z3EalysMdf175ba+OJLnc=
Subject key identifier:   DB:47:88:69:59:43:F0:CE:17:08:EC:49:7F:60:85:93:72:F2:E3:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196DB688ADDC6088DB410C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     40717
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:db:68:8a:dd:c6:08:8d:b4:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=8d434481-05c8-416e-9a14-c911ed1ee115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:e0:ac:f9:cf:05:23:bd:7b:9f:7c:60:bd:
                    c3:1a:c2:cb:ce:33:f9:fb:82:9a:05:1a:54:08:aa:
                    58:6e:bd:0b:86:ec:fb:54:b7:41:8b:9c:85:46:db:
                    aa:73:d9:29:a3:70:85:61:fc:83:70:05:68:49:d4:
                    ed:da:19:3e:19:f3:9b:ef:0a:68:d4:f7:12:ef:77:
                    6b:fd:ea:9e:7a:35:4c:f3:99:7b:d5:f0:e2:e9:42:
                    a0:ec:62:a5:ff:ea:f7:53:1d:e1:5a:cd:14:0a:6c:
                    64:21:01:80:9c:4b:00:a8:11:53:8a:6e:cc:d4:00:
                    44:d4:4b:aa:53:2f:10:3b:a6:b9:b2:38:85:c3:0b:
                    df:9a:24:13:84:69:74:75:d5:ae:1b:79:91:89:3f:
                    25:73:c1:64:ee:a1:55:80:0c:29:c6:0d:e7:13:01:
                    ac:42:2b:bc:10:a5:90:a4:12:38:d6:7c:68:8f:94:
                    f7:ba:09:65:8a:9f:cc:8c:0d:3a:51:4b:c0:43:a4:
                    35:12:6e:47:aa:70:be:36:64:d5:7e:14:24:26:b9:
                    a4:64:6e:84:9d:ca:e5:9b:48:d3:a2:be:82:27:59:
                    2d:27:d2:f6:fb:e2:cf:28:81:50:94:62:b8:ab:a8:
                    14:74:6d:76:9a:6e:33:9a:f7:f3:29:5e:2c:7d:60:
                    34:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:47:88:69:59:43:F0:CE:17:08:EC:49:7F:60:85:93:72:F2:E3:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ea:18:77:2c:b5:99:54:b4:90:af:22:0e:5f:bd:44:a1:74:
         c9:a1:01:5a:06:96:d3:8e:1d:23:e0:72:58:9a:2d:e8:0b:b5:
         2c:d6:56:ca:cf:15:40:f8:65:bf:89:58:46:be:b4:4c:6c:09:
         28:42:e7:18:e8:51:5c:38:9f:7e:48:f9:9c:26:90:bd:f6:f5:
         aa:d4:37:69:f9:0f:1a:1a:ea:55:c4:f1:09:ad:7a:5a:04:4b:
         c0:b9:d6:6c:db:f4:da:30:ee:a5:42:83:41:bd:36:e6:44:94:
         02:3c:c2:0b:ac:e1:4d:6d:e2:16:7f:3f:f4:6d:04:29:0b:c9:
         36:e7:a0:20:82:ef:d6:5b:7e:d9:8f:f3:73:b6:cb:e4:26:f6:
         82:75:68:85:cc:b3:38:cb:11:f7:8c:05:3e:fe:a0:7a:ab:46:
         53:f4:fd:2f:34:5b:6d:4e:95:30:7c:a6:a7:f8:78:4b:c1:63:
         a0:48:77:d5:2b:fb:14:0e:5d:35:69:a1:d0:b3:17:8d:50:00:
         d2:56:01:2d:62:b7:19:b8:13:a3:29:bd:18:24:89:e1:9f:f2:
         76:b8:77:d3:bf:52:87:b9:65:b9:13:61:78:e4:8e:77:68:cd:
         01:d0:e8:2a:00:04:71:6a:09:32:91:90:be:1e:4c:8e:9a:23:
         d9:aa:4c:6a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlttoit3GCI20EMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
OGQ0MzQ0ODEtMDVjOC00MTZlLTlhMTQtYzkxMWVkMWVlMTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscHgrPnPBSO9e598YL3DGsLLzjP5+4KaBRpU
CKpYbr0Lhuz7VLdBi5yFRtuqc9kpo3CFYfyDcAVoSdTt2hk+GfOb7wpo1PcS73dr
/eqeejVM85l71fDi6UKg7GKl/+r3Ux3hWs0UCmxkIQGAnEsAqBFTim7M1ABE1Euq
Uy8QO6a5sjiFwwvfmiQThGl0ddWuG3mRiT8lc8Fk7qFVgAwpxg3nEwGsQiu8EKWQ
pBI41nxoj5T3ugllip/MjA06UUvAQ6Q1Em5HqnC+NmTVfhQkJrmkZG6Encrlm0jT
or6CJ1ktJ9L2++LPKIFQlGK4q6gUdG12mm4zmvfzKV4sfWA0/wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNtHiGlZQ/DOFwjsSX9ghZNy8uNqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmQ3ZDExYTMtNzlhMC0z
MDIyLWJiYmYtMGFjNmRiYTlmYjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBC6hh3LLWZVLSQryIOX71EoXTJoQFaBpbTjh0j
4HJYmi3oC7Us1lbKzxVA+GW/iVhGvrRMbAkoQucY6FFcOJ9+SPmcJpC99vWq1Ddp
+Q8aGupVxPEJrXpaBEvAudZs2/TaMO6lQoNBvTbmRJQCPMILrOFNbeIWfz/0bQQp
C8k256Aggu/WW37Zj/NztsvkJvaCdWiFzLM4yxH3jAU+/qB6q0ZT9P0vNFttTpUw
fKan+HhLwWOgSHfVK/sUDl01aaHQsxeNUADSVgEtYrcZuBOjKb0YJInhn/J2uHfT
v1KHuWW5E2F45I53aM0B0OgqAARxagkykZC+HkyOmiPZqkxq
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:04:22 2025 by rpki-client