Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c4c43ec4-c44f-314c-a00e-9445de360cd0.roa
File:                     c4c43ec4-c44f-314c-a00e-9445de360cd0.roa (raw, json)
Hash identifier:          4Cn8HtGz8nr29ms1/JIGoYWI2BNjtnHV2rQLIn2Dj6Q=
Subject key identifier:   1F:7C:EB:BE:3A:C1:9E:03:3A:09:E5:9B:07:50:11:B3:D7:24:23:19
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848FA8BEB50ABE9E2CF6DED1F80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c4c43ec4-c44f-314c-a00e-9445de360cd0.roa
Signing time:             Sun 23 Feb 2025 14:00:51 +0000
ROA not before:           Sun 23 Feb 2025 14:00:51 +0000
ROA not after:            Sat 24 May 2025 13:00:51 +0000
asID:                     394089
IP address blocks:        128.77.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fa:8b:eb:50:ab:e9:e2:cf:6d:ed:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 23 14:00:51 2025 GMT
            Not After : May 24 13:00:51 2025 GMT
        Subject: CN=5f2c85ed-4588-40f7-a21b-3e4d766b24dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7e:a0:65:86:c6:61:21:13:51:53:d5:62:4d:
                    8f:45:75:ab:94:99:de:d5:c0:8e:d7:ce:d8:18:06:
                    f9:2c:db:bc:c1:72:34:1e:37:30:62:22:3e:80:ca:
                    55:4f:96:73:5d:2d:11:90:fc:0a:74:ba:cb:75:9f:
                    7e:5c:c5:85:57:f1:c5:c7:91:1b:35:d6:76:5c:d8:
                    b3:a0:b7:77:55:c9:67:0c:96:2a:05:c6:7a:ca:f5:
                    a9:dc:ec:da:47:88:cf:3f:8e:77:42:1b:b2:a2:89:
                    7d:f0:cb:6c:da:27:a1:3c:2f:fa:b3:23:76:a1:cb:
                    cf:9c:0f:4a:cd:b5:5c:fd:67:1e:d6:d4:a0:a8:ec:
                    24:6c:f8:08:ce:02:e4:ae:17:01:56:bc:08:ae:51:
                    5c:3e:00:77:4c:6e:5e:60:85:e9:30:c8:96:73:c0:
                    ce:e1:84:e8:65:68:d6:56:f9:d2:0a:e6:3a:70:be:
                    8b:4e:a2:a5:20:dd:e7:3e:e0:d3:50:fd:65:f0:37:
                    7d:b5:d6:d8:97:79:5f:7c:b2:4d:67:3d:a5:96:e3:
                    9e:bc:0e:7c:d3:da:07:6c:80:bb:ca:34:3d:f1:dd:
                    64:e1:18:a3:04:b6:98:04:3f:f5:63:29:1c:e0:90:
                    22:8d:f9:53:16:19:26:c9:cc:5d:33:88:4f:17:de:
                    b5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7C:EB:BE:3A:C1:9E:03:3A:09:E5:9B:07:50:11:B3:D7:24:23:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/c4c43ec4-c44f-314c-a00e-9445de360cd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.77.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:8b:2c:04:33:1f:c0:13:2a:3d:24:98:13:2c:6f:a2:21:9b:
         0c:3a:d6:63:9f:28:9d:32:8e:47:8f:f8:15:d1:bd:fc:e5:25:
         41:44:f9:00:f2:cf:62:87:aa:43:e2:05:0b:db:16:23:69:59:
         95:1e:9d:d3:68:46:dc:fc:5c:ee:eb:eb:f3:ff:4e:d5:34:d3:
         a8:86:04:45:48:37:5e:10:43:f3:a5:7a:da:89:35:f8:33:16:
         23:cd:c5:85:10:1c:05:58:0a:a2:46:75:74:14:11:b5:df:49:
         dc:74:89:37:ec:92:c7:a9:87:13:e4:35:65:68:c8:89:16:de:
         97:aa:0e:be:47:f8:53:74:7b:c1:79:d5:e1:7f:69:73:b8:95:
         17:ea:d9:d1:01:81:ed:59:cf:5a:38:f5:8f:07:29:8e:e8:6d:
         93:9b:a3:87:60:75:44:5d:d1:85:90:88:7b:d2:6d:70:01:cc:
         b0:77:de:5a:3b:7c:41:ba:f3:d6:2e:2a:8c:2f:2c:30:a1:bf:
         4a:5d:26:d7:8c:5f:b4:99:7d:19:a1:d2:79:fd:bc:59:5a:21:
         10:b3:f3:f1:09:5d:23:2a:72:1a:aa:8a:a0:b2:32:ee:be:98:
         36:71:82:d6:90:22:c1:a0:d4:bf:02:ad:2d:37:3a:aa:f4:f6:
         d9:68:fc:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj6i+tQq+niz23tH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDIyMzE0MDA1MVoXDTI1MDUyNDEzMDA1MVowLzEtMCsGA1UEAxMk
NWYyYzg1ZWQtNDU4OC00MGY3LWEyMWItM2U0ZDc2NmIyNGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H6gZYbGYSETUVPVYk2PRXWrlJne1cCO187Y
GAb5LNu8wXI0HjcwYiI+gMpVT5ZzXS0RkPwKdLrLdZ9+XMWFV/HFx5EbNdZ2XNiz
oLd3VclnDJYqBcZ6yvWp3OzaR4jPP453Qhuyool98Mts2iehPC/6syN2ocvPnA9K
zbVc/Wce1tSgqOwkbPgIzgLkrhcBVrwIrlFcPgB3TG5eYIXpMMiWc8DO4YToZWjW
VvnSCuY6cL6LTqKlIN3nPuDTUP1l8Dd9tdbYl3lffLJNZz2lluOevA5809oHbIC7
yjQ98d1k4RijBLaYBD/1Yykc4JAijflTFhkmycxdM4hPF961swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB986746wZ4DOgnlmwdQEbPXJCMZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYzRjNDNlYzQtYzQ0Zi0z
MTRjLWEwMGUtOTQ0NWRlMzYwY2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgE1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+LLAQzH8ATKj0kmBMsb6Ihmww61mOfKJ0yjkeP+BXRvfzlJUFE+QDy
z2KHqkPiBQvbFiNpWZUendNoRtz8XO7r6/P/TtU006iGBEVIN14QQ/OletqJNfgz
FiPNxYUQHAVYCqJGdXQUEbXfSdx0iTfsksephxPkNWVoyIkW3peqDr5H+FN0e8F5
1eF/aXO4lRfq2dEBge1Zz1o49Y8HKY7obZObo4dgdURd0YWQiHvSbXABzLB33lo7
fEG689YuKowvLDChv0pdJteMX7SZfRmh0nn9vFlaIRCz8/EJXSMqchqqiqCyMu6+
mDZxgtaQIsGg1L8CrS03Oqr09tlo/Hg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:56:42 2025 by rpki-client