Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa
File:                     542301b0-83c1-3997-b59d-aab70751e89e.roa (raw, json)
Hash identifier:          C/wYbeVEC+CxzZj0ceqx2kh5wdkoBKIalAgjK4Fk568=
Subject key identifier:   BA:8D:E1:3E:DA:95:9A:79:14:AA:6B:A9:F4:D6:9C:6A:94:83:2C:CC
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F432858454AD2C8A42F37C990C41C4C40
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa
Signing time:             Fri 22 Mar 2024 13:00:34 +0000
ROA not before:           Fri 22 Mar 2024 13:00:34 +0000
ROA not after:            Thu 20 Jun 2024 13:00:34 +0000
asID:                     55293
IP address blocks:        128.201.4.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4a:d2:c8:a4:2f:37:c9:90:c4:1c:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Mar 22 13:00:34 2024 GMT
            Not After : Jun 20 13:00:34 2024 GMT
        Subject: CN=56da97c1-75e7-4134-b19a-bcb403a6e0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:f3:f8:3f:0b:2a:8a:99:ab:67:12:7f:75:
                    0b:af:b5:ee:02:1f:34:97:df:15:d1:c4:ce:31:b1:
                    1e:a5:9f:b6:c7:a3:2b:bf:14:5f:84:ec:ac:1e:bc:
                    0a:91:6e:c2:fe:19:3e:d1:1f:db:e5:90:6e:c2:64:
                    8a:14:ce:47:e0:af:63:2b:a6:fc:80:0b:4b:ce:2e:
                    e5:08:b0:fa:2a:36:05:db:32:fb:25:69:f1:f5:6a:
                    d6:44:a5:4d:d4:3e:c4:55:68:67:c2:56:b4:bb:f3:
                    fb:06:32:f7:f0:e2:86:ae:63:1e:33:48:82:78:8e:
                    63:7d:06:fa:1a:44:55:d2:bd:aa:72:f4:f7:75:9a:
                    02:dc:da:f4:37:c3:bd:11:b9:b5:ce:f0:ed:a1:58:
                    32:2a:2a:79:91:8c:1b:5f:9f:d3:b1:76:8d:7d:07:
                    d9:18:c7:dc:07:4f:d6:d0:a1:7a:a3:68:1a:7e:f6:
                    b2:c2:6a:a7:4a:2a:94:45:21:ea:ae:3b:8b:00:18:
                    69:dd:65:89:5b:b1:56:e2:bd:91:d4:30:6a:fd:88:
                    f3:26:98:28:fa:1a:e1:b2:67:ae:13:51:dd:ca:b7:
                    dc:fe:d0:d7:0e:0f:b3:11:9a:7c:03:cc:dc:4a:9c:
                    bf:99:ca:05:04:63:df:c0:99:3d:24:31:31:3c:bf:
                    6c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8D:E1:3E:DA:95:9A:79:14:AA:6B:A9:F4:D6:9C:6A:94:83:2C:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/542301b0-83c1-3997-b59d-aab70751e89e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:64:e1:8b:59:16:ab:3a:14:66:61:5f:4e:47:50:7b:ec:
         4d:c9:26:23:c0:3b:b4:09:96:c9:ad:ef:b8:37:ef:53:ca:88:
         1c:eb:ee:4a:2a:88:67:0d:f3:aa:0b:77:6c:08:2a:d9:67:5d:
         6b:bd:e3:f9:3e:37:56:5b:a2:f0:1d:74:02:a8:cc:1e:14:d7:
         6c:67:70:a6:f8:fe:62:44:2b:12:c5:43:e4:f5:a4:1f:e3:e9:
         ea:ef:1b:e4:38:f5:fb:49:f3:0f:15:2b:ac:03:9e:14:5c:fe:
         b5:db:32:75:87:0b:56:bd:4f:84:ef:b2:4e:2d:d7:03:aa:70:
         be:ab:71:0e:a0:09:04:a6:42:73:cf:33:41:fc:82:6b:54:45:
         cb:53:7a:af:e1:53:b3:55:a7:7b:72:36:9f:df:26:b6:2d:e8:
         90:43:64:a6:2c:b2:d5:fd:39:11:74:fc:08:01:c4:3b:db:7a:
         9e:2c:99:2f:71:22:f4:8a:a8:25:57:58:7b:f2:d3:f2:25:52:
         c1:c2:db:54:15:ed:62:7e:d6:dc:30:da:47:15:89:aa:7a:10:
         ec:6a:a6:a1:a6:d7:f4:d9:fd:91:92:65:71:20:1f:ea:a9:d7:
         d7:b0:a1:12:28:ff:b0:57:eb:ef:17:78:c6:1b:68:35:10:ee:
         4b:77:f4:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVK0sikLzfJkMQcTEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI0MDMyMjEzMDAzNFoXDTI0MDYyMDEzMDAzNFowLzEtMCsGA1UEAxMk
NTZkYTk3YzEtNzVlNy00MTM0LWIxOWEtYmNiNDAzYTZlMGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSTz+D8LKoqZq2cSf3ULr7XuAh80l98V0cTO
MbEepZ+2x6MrvxRfhOysHrwKkW7C/hk+0R/b5ZBuwmSKFM5H4K9jK6b8gAtLzi7l
CLD6KjYF2zL7JWnx9WrWRKVN1D7EVWhnwla0u/P7BjL38OKGrmMeM0iCeI5jfQb6
GkRV0r2qcvT3dZoC3Nr0N8O9Ebm1zvDtoVgyKip5kYwbX5/TsXaNfQfZGMfcB0/W
0KF6o2gafvaywmqnSiqURSHqrjuLABhp3WWJW7FW4r2R1DBq/YjzJpgo+hrhsmeu
E1Hdyrfc/tDXDg+zEZp8A8zcSpy/mcoFBGPfwJk9JDExPL9s7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqN4T7alZp5FKprqfTWnGqUgyzMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvNTQyMzAxYjAtODNjMS0z
OTk3LWI1OWQtYWFiNzA3NTFlODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgMkEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGPOZOGLWRarOhRmYV9OR1B77E3JJiPAO7QJlsmt77g371PKiBzr7koq
iGcN86oLd2wIKtlnXWu94/k+N1ZbovAddAKozB4U12xncKb4/mJEKxLFQ+T1pB/j
6ervG+Q49ftJ8w8VK6wDnhRc/rXbMnWHC1a9T4Tvsk4t1wOqcL6rcQ6gCQSmQnPP
M0H8gmtURctTeq/hU7NVp3tyNp/fJrYt6JBDZKYsstX9ORF0/AgBxDvbep4smS9x
IvSKqCVXWHvy0/IlUsHC21QV7WJ+1tww2kcViap6EOxqpqGm1/TZ/ZGSZXEgH+qp
19ewoRIo/7BX6+8XeMYbaDUQ7kt39NI=
-----END CERTIFICATE-----
Generated at Fri May 3 01:53:50 2024 by rpki-client on console-fra.rpki-client.org