Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3a306480-c08e-3e60-bdf7-f87037f23621.roa
File:                     3a306480-c08e-3e60-bdf7-f87037f23621.roa (raw, json)
Hash identifier:          jgxq89YOJYpPVxHK23FqhvHpzPF40TUYx2jkSoD2+ac=
Subject key identifier:   5C:28:0A:AD:28:9D:AF:D5:EF:7B:D2:40:D1:DF:72:6A:6D:D4:03:0F
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858454AD2C8CDF33ADA8021F28680
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3a306480-c08e-3e60-bdf7-f87037f23621.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     55293
IP address blocks:        162.212.128.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:c8:cd:f3:3a:da:80:21:f2:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=be251a09-181e-45b9-85e5-a4f2c5349f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:6d:b9:de:05:5e:03:1f:68:9e:c3:94:29:
                    b7:67:86:f3:ae:ee:75:84:b0:99:47:29:a9:c0:8f:
                    f7:7f:9f:4e:d4:6e:22:cd:18:00:50:dc:16:43:e3:
                    2a:8f:20:5e:67:05:8c:f8:3f:29:7b:58:11:b0:6f:
                    5e:cc:8e:6e:52:1e:23:4b:b6:e5:3b:1d:22:73:42:
                    51:eb:6e:32:41:7e:f7:a5:0b:24:c4:25:6d:d4:a7:
                    75:bb:98:f9:aa:5c:9f:ae:40:2b:b6:9c:14:66:f3:
                    e8:4d:8e:bb:cd:68:62:f4:0e:31:1e:2d:7c:d2:18:
                    95:5c:29:8a:34:a1:79:05:fa:f5:d2:9c:be:61:60:
                    8a:57:58:b4:2e:f3:08:ef:72:b4:5a:6f:6b:5f:32:
                    96:cb:8d:00:d7:92:4d:95:1d:ba:f3:6e:ac:bc:fe:
                    19:c2:96:7a:1c:c1:85:c4:56:ea:bd:d3:a9:03:71:
                    08:10:ae:8b:2f:8f:7a:27:26:8f:93:53:c6:95:38:
                    c4:8b:85:32:97:13:84:ea:91:63:d6:53:81:5b:cc:
                    e4:29:18:3d:f4:1e:40:85:79:e1:75:e0:61:2a:f7:
                    2b:59:51:d1:f8:ad:eb:8f:f9:ef:a5:f0:e3:5a:07:
                    b7:e5:cf:dd:fc:47:fa:3a:f2:68:e6:7c:a3:4f:c8:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:28:0A:AD:28:9D:AF:D5:EF:7B:D2:40:D1:DF:72:6A:6D:D4:03:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3a306480-c08e-3e60-bdf7-f87037f23621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:31:35:7c:9f:ac:eb:88:fa:9a:39:95:09:47:e7:c8:b2:
         fb:b7:ee:85:95:11:bd:d4:fe:bc:93:32:c5:b1:38:f2:97:86:
         8d:00:e8:13:0a:89:df:c3:52:30:18:5e:85:32:8e:6b:3d:78:
         46:ff:80:32:1e:6c:0f:b8:65:c0:1d:66:75:ce:33:dc:2b:a6:
         ec:86:f0:d9:57:15:3b:07:da:59:ed:51:2f:8e:02:5d:e1:36:
         69:10:65:29:31:00:5e:6e:d1:3c:05:20:bf:28:af:34:87:ba:
         94:ba:ee:08:3c:38:5b:c0:bb:74:61:e3:9c:d0:3d:d9:26:a0:
         6c:f7:70:12:86:38:f0:f0:c4:b1:60:27:65:26:50:a4:5f:d0:
         f0:a2:65:99:f5:8a:e7:24:fa:62:22:b2:96:c0:6b:09:20:ab:
         6a:56:55:9e:46:2f:7a:e6:96:4d:e9:bd:29:67:11:3f:e5:bc:
         9d:21:c1:58:6e:21:5f:81:a1:2e:87:91:b3:a0:da:87:27:03:
         5b:ed:f2:50:5f:0b:1c:7a:45:65:b4:34:4c:1c:03:7e:1c:3a:
         f8:c1:f7:f3:0c:7b:b5:c1:6f:20:b3:47:d2:13:bd:d6:b9:11:
         d0:67:6d:76:44:10:8d:18:1d:f9:f7:ae:ad:bb:8a:32:c4:80:
         09:48:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:50 2024 by rpki-client on console-fra.rpki-client.org