Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ae805d2c-ce6e-382f-ae6d-19f78fd78393.roa
File:                     ae805d2c-ce6e-382f-ae6d-19f78fd78393.roa (raw, json)
Hash identifier:          oprrmBb3A9pmRlTeIZWLLNRKfaO2pOc0Fo9Z77nIHxQ=
Subject key identifier:   6A:39:39:F4:95:C9:B8:92:D2:C4:1C:7E:A1:06:CB:1F:CA:AE:C7:41
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848C580F4E788B53643CF0CFD00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ae805d2c-ce6e-382f-ae6d-19f78fd78393.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        128.77.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:f4:e7:88:b5:36:43:cf:0c:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6226d426-bbf0-4b17-aaa0-f8d990fafa9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:62:df:8c:7e:42:3c:e4:de:27:5b:8a:71:59:
                    2f:e5:2f:b6:46:c2:6f:c1:81:7c:bc:50:36:55:40:
                    70:1a:cf:16:55:1d:47:46:41:81:c0:9f:be:10:de:
                    66:d5:6d:33:a4:cf:9c:5d:98:c8:f1:0d:8c:e9:5b:
                    a7:8e:05:82:7b:0e:a1:7c:48:5d:1d:c4:21:7c:48:
                    76:cb:be:7c:a1:38:52:18:c3:ec:dd:93:e5:86:79:
                    f6:1f:6a:e9:a4:db:ec:4c:30:2f:8e:58:b4:60:de:
                    96:d5:30:fe:33:5d:13:03:ea:a7:6b:d2:b3:78:8a:
                    e7:43:a6:68:98:ab:c2:33:48:26:a9:6c:35:33:e3:
                    e1:35:e3:2f:d1:7a:5b:d1:bc:6e:fb:d6:0d:5b:b8:
                    71:1c:6c:a6:b3:75:e3:64:2d:cc:a4:57:60:68:69:
                    73:be:d2:db:a8:ab:aa:66:62:15:f0:10:30:71:7b:
                    28:b4:83:d0:22:58:76:2c:2f:ab:5d:e5:4b:76:fe:
                    c8:6c:dc:b9:e5:4a:50:3a:56:a1:55:8d:03:f7:1e:
                    81:bc:e8:dc:31:b8:e9:7e:fc:ab:eb:e4:39:ea:b3:
                    4c:7b:6b:84:cf:8c:e9:2d:27:9d:4c:f8:6f:5e:79:
                    a1:85:9e:e8:d0:40:9d:b0:7b:0f:ff:b1:9d:41:32:
                    f2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:39:39:F4:95:C9:B8:92:D2:C4:1C:7E:A1:06:CB:1F:CA:AE:C7:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/ae805d2c-ce6e-382f-ae6d-19f78fd78393.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.77.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:05:17:d7:ca:60:26:51:cb:b7:40:2c:e3:9e:ee:de:09:b8:
         66:33:fc:71:ce:ca:21:f9:ac:93:c0:f8:93:c5:55:02:71:05:
         1f:4d:05:f6:1e:f7:ec:10:be:ee:7f:e7:d4:56:6b:7b:8d:7a:
         26:35:b0:d8:00:1c:eb:c6:c3:cc:9d:39:a5:98:f2:b4:cb:f2:
         22:61:3b:fe:8d:16:48:ff:db:40:c2:5c:b9:77:25:5e:fb:9b:
         6d:b8:8d:b9:1c:05:97:fb:2f:ea:eb:db:3b:89:0c:0a:dd:3e:
         9b:df:1a:26:50:77:ef:0e:31:b2:ea:77:a3:0f:c0:c4:37:ce:
         ba:65:7c:80:45:b2:03:b5:bd:5c:8e:6e:5a:bd:5c:41:3a:79:
         ef:f0:bb:79:6b:00:4b:33:25:b9:56:a5:ad:53:b9:8c:84:2a:
         68:0f:68:48:b3:4b:4a:7b:ba:19:ce:62:87:0d:1e:e9:14:16:
         3e:b1:77:60:f9:05:38:69:49:f2:94:15:37:fd:60:31:f0:ad:
         82:5d:6e:d1:39:89:38:ba:37:de:6c:91:0f:00:a7:3d:08:d3:
         30:7b:56:6f:56:a1:b7:8c:ac:42:ec:24:4d:9d:52:79:2d:91:
         db:14:bc:c2:3c:21:13:e5:8a:69:ad:e0:18:8c:2d:da:7d:00:
         51:14:06:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:48 2025 by rpki-client