Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ae805d2c-ce6e-382f-ae6d-19f78fd78393.roa
File:                     ae805d2c-ce6e-382f-ae6d-19f78fd78393.roa (raw, json)
Hash identifier:          zqgbhGCFV2QMlJNdNcOkg4mHuCSW/ch3YTESB4BEsYY=
Subject key identifier:   EA:B6:B7:6D:37:91:EC:24:E2:56:E2:66:42:2E:28:E9:C5:5C:79:A3
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285849A4BA4D3B8BF4D86209992200
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ae805d2c-ce6e-382f-ae6d-19f78fd78393.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396982
IP address blocks:        128.77.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:4d:3b:8b:f4:d8:62:09:99:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=8a1bf1f6-43ed-48c9-a923-4046ac11aac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e4:a5:7d:e8:13:be:78:9b:70:2e:85:8a:05:
                    88:d8:8c:ed:72:2f:8a:9f:4f:2e:e1:a2:cc:7f:e6:
                    f0:6c:1e:50:cd:31:92:4c:4a:0b:1e:22:25:2a:7d:
                    80:e0:1f:0e:31:8f:7b:4a:96:ea:09:08:8b:54:8c:
                    2d:c5:51:70:47:66:80:4e:1e:26:6c:ec:e8:7a:88:
                    15:dc:5c:25:f5:a9:ca:7b:60:94:f6:07:12:d7:23:
                    66:f0:3d:ae:c4:ce:02:15:fa:d4:fc:48:5a:57:b7:
                    14:b5:86:67:3c:01:7a:67:dd:46:65:93:f5:16:32:
                    c5:68:99:13:9a:b3:ec:2b:88:f0:a8:66:77:d8:9b:
                    93:11:31:1c:f4:40:c5:87:45:9d:2e:be:59:9a:5e:
                    41:e2:27:f4:fb:39:38:e6:74:c4:4e:5e:51:8a:42:
                    9f:e0:a6:54:ee:a2:d7:71:33:75:0d:95:f1:ae:9c:
                    0d:e7:87:e2:4c:5e:0c:e2:21:72:ec:87:35:80:29:
                    60:5d:9e:fb:da:52:e1:23:d8:8c:24:d0:ef:55:c8:
                    17:e4:36:41:30:fe:20:86:ba:39:4e:6f:54:f0:d7:
                    83:31:2e:43:30:49:26:1b:c7:e4:74:29:88:a1:80:
                    de:ee:0a:27:d6:c2:13:ce:34:e8:76:dd:c7:10:1e:
                    8c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B6:B7:6D:37:91:EC:24:E2:56:E2:66:42:2E:28:E9:C5:5C:79:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ae805d2c-ce6e-382f-ae6d-19f78fd78393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.77.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d3:99:7b:df:48:33:8d:ca:9a:83:f1:90:2c:c4:81:37:f4:
         9e:15:5b:3c:de:65:39:aa:81:8c:d0:6c:6d:a2:48:38:c4:a4:
         86:05:b4:90:8b:df:30:d9:d5:73:c8:e4:28:04:50:4a:86:c6:
         d6:fa:d9:a7:fa:3b:47:6a:95:a2:6b:c2:31:7f:b9:e5:4b:f3:
         95:f4:a6:09:bc:d1:f6:bc:f1:fa:51:e1:0e:af:da:d6:a0:b5:
         d7:13:c2:ca:d1:66:d0:a2:20:85:af:e9:0f:4f:96:e7:68:21:
         c5:01:ed:26:fb:f5:07:2d:dd:63:ab:59:4f:3f:6b:c3:f0:d6:
         6e:bb:35:4e:05:6d:a8:df:dc:de:24:04:8f:32:7b:af:b2:27:
         18:0f:d3:ed:c1:1a:2c:f7:31:c7:21:8c:d0:58:3e:42:ed:24:
         25:4e:eb:af:b1:94:83:95:5b:a3:d9:db:66:16:74:6a:8d:68:
         04:9e:aa:31:01:74:44:f6:9e:86:2e:c9:74:0f:88:f4:9a:eb:
         53:53:b1:65:c7:bd:b4:e6:a7:79:16:d4:ac:49:1d:a5:ea:3a:
         ae:36:b1:91:54:9d:14:26:f1:0f:48:48:c6:7f:cd:13:68:26:
         f2:04:ce:1c:74:00:44:ce:dd:82:8c:a1:74:d0:04:66:f3:d9:
         f3:6a:0d:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuk07i/TYYgmZIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
OGExYmYxZjYtNDNlZC00OGM5LWE5MjMtNDA0NmFjMTFhYWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuSlfegTvnibcC6FigWI2Iztci+Kn08u4aLM
f+bwbB5QzTGSTEoLHiIlKn2A4B8OMY97SpbqCQiLVIwtxVFwR2aATh4mbOzoeogV
3Fwl9anKe2CU9gcS1yNm8D2uxM4CFfrU/EhaV7cUtYZnPAF6Z91GZZP1FjLFaJkT
mrPsK4jwqGZ32JuTETEc9EDFh0WdLr5Zml5B4if0+zk45nTETl5RikKf4KZU7qLX
cTN1DZXxrpwN54fiTF4M4iFy7Ic1gClgXZ772lLhI9iMJNDvVcgX5DZBMP4ghro5
Tm9U8NeDMS5DMEkmG8fkdCmIoYDe7gon1sITzjTodt3HEB6MNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOq2t203kewk4lbiZkIuKOnFXHmjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYWU4MDVkMmMtY2U2ZS0z
ODJmLWFlNmQtMTlmNzhmZDc4MzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgE18MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABjTmXvfSDONypqD8ZAsxIE39J4VWzzeZTmqgYzQbG2iSDjEpIYFtJCL
3zDZ1XPI5CgEUEqGxtb62af6O0dqlaJrwjF/ueVL85X0pgm80fa88fpR4Q6v2tag
tdcTwsrRZtCiIIWv6Q9PludoIcUB7Sb79Qct3WOrWU8/a8Pw1m67NU4Fbajf3N4k
BI8ye6+yJxgP0+3BGiz3McchjNBYPkLtJCVO66+xlIOVW6PZ22YWdGqNaASeqjEB
dET2noYuyXQPiPSa61NTsWXHvbTmp3kW1KxJHaXqOq42sZFUnRQm8Q9ISMZ/zRNo
JvIEzhx0AETO3YKMoXTQBGbz2fNqDTw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:45:49 2025 by rpki-client