Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ae805d2c-ce6e-382f-ae6d-19f78fd78393.roa
File:                     ae805d2c-ce6e-382f-ae6d-19f78fd78393.roa (raw, json)
Hash identifier:          n36gP4nsTZd3TmTf44ZF7MvkQdb6qEg3PiNkgcDRYcs=
Subject key identifier:   94:E4:DB:28:98:50:77:84:17:BE:A1:AC:E8:62:5F:BE:B7:81:3A:55
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584545D11E0CC5155371EA39A200
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ae805d2c-ce6e-382f-ae6d-19f78fd78393.roa
Signing time:             Wed 20 Mar 2024 17:58:12 +0000
ROA not before:           Wed 20 Mar 2024 17:58:12 +0000
ROA not after:            Tue 18 Jun 2024 17:58:12 +0000
asID:                     396982
IP address blocks:        128.77.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:d1:1e:0c:c5:15:53:71:ea:39:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 20 17:58:12 2024 GMT
            Not After : Jun 18 17:58:12 2024 GMT
        Subject: CN=7b6a0212-5170-427d-80e2-7eb0f69727d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:11:93:ec:f4:90:16:27:6d:d0:16:44:d0:c8:
                    0e:28:3b:0d:89:82:af:67:b7:aa:c2:ac:bf:3d:9a:
                    cd:d8:8b:94:0f:96:c6:03:15:ce:24:35:81:4a:02:
                    c5:da:93:1b:9e:26:37:83:1e:56:51:3b:39:78:f2:
                    d6:23:8e:3f:7a:8f:cd:a9:43:5a:08:12:69:5b:8e:
                    86:99:6c:7f:1c:1f:47:fa:25:15:47:bd:0e:68:bf:
                    b1:82:c6:ba:fb:de:b8:86:2c:82:1e:94:48:d7:e9:
                    97:51:1c:34:4e:40:af:aa:ba:ab:b3:97:6e:61:ff:
                    53:68:11:5f:e5:d7:e6:0f:11:dd:35:d6:38:9f:4b:
                    71:f1:a6:0d:99:98:7f:ab:ec:f1:2a:8c:76:98:6b:
                    41:90:b1:bf:4f:e2:2f:f7:d1:90:98:5c:82:53:c4:
                    12:1b:71:86:c7:64:43:d5:08:4e:2e:5d:61:2f:95:
                    f6:68:4c:83:24:f5:99:c5:c2:dc:3a:1a:90:7a:6d:
                    2a:d9:86:e8:16:bb:e9:e4:be:05:e0:04:72:76:4a:
                    33:c2:54:36:63:a3:61:1b:88:89:ba:44:fe:55:31:
                    24:43:5b:f9:be:ff:83:71:4e:99:37:6f:8e:91:5c:
                    c7:dc:df:03:37:c9:5f:c5:61:29:84:c0:92:09:93:
                    ff:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E4:DB:28:98:50:77:84:17:BE:A1:AC:E8:62:5F:BE:B7:81:3A:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ae805d2c-ce6e-382f-ae6d-19f78fd78393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.77.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:b9:36:28:ad:cc:1e:24:ee:0a:e9:07:db:3f:89:dc:b7:4c:
         c7:ef:77:05:62:c9:28:34:08:b9:a9:2a:32:b1:0c:7a:ff:a5:
         60:a1:fe:71:c9:8a:5e:80:e0:4a:ec:a2:7e:4e:5d:52:6b:21:
         80:c8:62:65:74:df:4b:1f:4b:29:e8:56:f1:43:ad:8e:21:d6:
         bc:d9:c7:a0:4f:ca:33:63:20:19:58:66:64:f1:ff:e0:66:96:
         fe:34:39:db:a3:47:57:ac:10:95:07:45:83:47:50:f6:6c:6c:
         e5:d3:57:48:50:36:2d:aa:67:81:bc:1e:ff:31:d8:85:9c:da:
         67:ae:dc:c5:9b:40:5a:f7:b1:6c:80:d8:fb:54:ae:2d:d9:c0:
         80:74:a3:07:2d:0b:82:02:1b:44:a3:12:c1:6d:f8:71:47:68:
         2c:ce:ba:d0:61:a9:05:17:a3:ed:15:14:5c:b3:19:2d:54:2e:
         c5:f7:d0:60:b9:aa:c0:d6:f6:f6:7d:db:3a:16:55:65:a9:48:
         0b:43:eb:57:fa:36:d3:57:94:7d:97:6e:87:51:2e:82:dd:85:
         ae:4f:6c:22:d5:00:32:3a:6d:aa:45:94:eb:66:2d:f4:61:c5:
         c9:e9:a6:70:e7:0a:d5:2a:43:64:c3:4d:f1:fd:3c:be:be:52:
         4c:31:4c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:47:44 2024 by rpki-client on console-ams.rpki-client.org