Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Netiface/1/32332e3137362e3138342e302f32342d3234203d3e203336363830.roa
File:                     32332e3137362e3138342e302f32342d3234203d3e203336363830.roa (raw, json)
Hash identifier:          LbUjERneqB9YNyJB9N346VNGURkoXjd/6U1T275vV2Q=
Subject key identifier:   6C:65:56:88:39:5A:E4:C4:BE:66:02:A4:06:85:41:1E:53:6B:6C:A2
Certificate issuer:       /CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
Certificate serial:       2929922CCCEC115F1428D16A784D734B892D6524
Authority key identifier: FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/1/32332e3137362e3138342e302f32342d3234203d3e203336363830.roa
Signing time:             Sat 14 Dec 2024 12:44:59 +0000
ROA not before:           Sat 14 Dec 2024 12:39:59 +0000
ROA not after:            Sat 13 Dec 2025 12:44:59 +0000
asID:                     36680
IP address blocks:        23.176.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl
                          rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:29:92:2c:cc:ec:11:5f:14:28:d1:6a:78:4d:73:4b:89:2d:65:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
        Validity
            Not Before: Dec 14 12:39:59 2024 GMT
            Not After : Dec 13 12:44:59 2025 GMT
        Subject: CN=6C655688395AE4C4BE6602A40685411E536B6CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:81:dc:7e:b5:5a:f8:37:ea:d0:c5:b5:f1:5c:
                    00:5f:53:ae:6a:87:60:51:84:11:9d:fb:50:29:0f:
                    42:02:11:92:08:5c:e6:a5:b0:cd:a9:92:00:63:a0:
                    16:3e:e9:26:bf:89:df:05:41:92:4a:4b:50:73:f5:
                    3d:99:b0:6e:61:a8:cb:49:73:15:cb:2d:59:fc:af:
                    34:2e:ee:a9:c5:c4:25:6a:82:c1:ff:d5:b8:10:fc:
                    db:ee:82:c7:40:83:b9:24:d4:d6:12:b9:84:45:ee:
                    89:f9:54:e1:48:be:3f:d1:09:44:0f:1e:16:78:94:
                    48:ba:1d:51:81:6f:ae:e7:04:ce:a9:3f:9d:17:d9:
                    00:10:fa:9d:2d:3a:a3:95:dd:8c:2d:77:fc:de:a3:
                    f8:cc:21:99:87:56:73:61:01:11:f6:f2:ea:19:ac:
                    66:98:93:a8:09:0d:5f:e1:2e:67:05:d8:34:c5:cc:
                    c8:fa:32:d5:8d:a7:6f:5e:c3:1e:4a:61:5c:78:b3:
                    2b:d6:e2:be:a1:70:81:f7:4b:12:a7:ce:44:9d:af:
                    a0:36:bc:3e:2f:41:a5:44:84:93:a2:12:5f:7a:5a:
                    07:01:db:76:d5:8e:3d:f5:36:34:27:9c:bf:87:38:
                    13:dd:c6:ec:07:a7:e7:75:06:af:64:1d:a2:50:1a:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:65:56:88:39:5A:E4:C4:BE:66:02:A4:06:85:41:1E:53:6B:6C:A2
            X509v3 Authority Key Identifier:
                keyid:FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/1/32332e3137362e3138342e302f32342d3234203d3e203336363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:ca:e8:99:94:06:78:7e:d7:82:54:95:7a:94:1b:f2:f1:0e:
         aa:5c:f1:c1:b2:1f:87:8c:16:32:d1:63:e7:4f:4b:8e:5e:9c:
         32:47:21:6b:d8:9e:6f:23:14:11:57:33:ef:80:82:0a:b8:6a:
         31:6c:a1:82:67:e7:03:7a:18:c7:3b:aa:60:5f:a8:c0:12:c5:
         eb:c9:d9:43:5e:89:f3:32:13:7f:47:20:3f:4b:7e:2a:9f:c3:
         e2:e1:24:a6:45:28:f9:e0:99:5c:ec:8b:99:d9:b7:e6:1c:74:
         81:a8:b9:e0:72:1f:18:02:4b:2d:e1:40:42:37:7e:ec:98:32:
         c5:59:46:26:af:b9:d7:7a:f5:25:44:a6:ba:41:72:77:23:b5:
         80:dc:9d:42:78:fc:ee:26:cf:35:94:2d:88:dc:57:41:d4:5c:
         e2:d0:d0:53:2a:00:38:4d:c2:11:28:c0:68:3f:03:13:63:f9:
         74:aa:dc:dd:4a:95:ce:76:3d:10:56:4f:c4:5c:e1:0a:8c:1b:
         52:bc:16:27:e4:39:21:30:f3:e8:92:c1:3e:4d:6d:8a:29:86:
         22:d4:48:c6:60:29:01:60:56:0d:6b:43:c5:1b:a3:25:c3:b3:
         e1:52:c6:fd:45:3e:24:36:9e:2e:64:74:d8:14:be:97:79:d0:
         6b:08:55:da
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUKSmSLMzsEV8UKNFqeE1zS4ktZSQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmI3NWNhMjUwZmM2M2M2YzQ3ZDAzMjYzOGJjZWNjNDlm
NGI1ZmI3MTVlYzZkZmU4YzgwHhcNMjQxMjE0MTIzOTU5WhcNMjUxMjEzMTI0NDU5
WjAzMTEwLwYDVQQDEyg2QzY1NTY4ODM5NUFFNEM0QkU2NjAyQTQwNjg1NDExRTUz
NkI2Q0EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34HcfrVa+Dfq
0MW18VwAX1OuaodgUYQRnftQKQ9CAhGSCFzmpbDNqZIAY6AWPukmv4nfBUGSSktQ
c/U9mbBuYajLSXMVyy1Z/K80Lu6pxcQlaoLB/9W4EPzb7oLHQIO5JNTWErmERe6J
+VThSL4/0QlEDx4WeJRIuh1RgW+u5wTOqT+dF9kAEPqdLTqjld2MLXf83qP4zCGZ
h1ZzYQER9vLqGaxmmJOoCQ1f4S5nBdg0xczI+jLVjadvXsMeSmFceLMr1uK+oXCB
90sSp85Ena+gNrw+L0GlRISTohJfeloHAdt21Y499TY0J5y/hzgT3cbsB6fndQav
ZB2iUBrrIwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFGxlVog5WuTEvmYCpAaFQR5T
a2yiMB8GA1UdIwQYMBaAFPv3jl2ltdatTi+TJjQgaxM8y/0lMA4GA1UdDwEB/wQE
AwIHgDBlBgNVHR8EXjBcMFqgWKBWhlRyc3luYzovL3JlcG8ucnBraS5zcGFjZS9y
ZXBvL05ldGlmYWNlLzEvRkJGNzhFNURBNUI1RDZBRDRFMkY5MzI2MzQyMDZCMTMz
Q0NCRkQyNS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03Jz
eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh
MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00
YjMzLTlhODgtNWIyMmQyYTgzMzdkLzA0YjI0ZGExLTExYWItNDhhZC1hMDNmLTZi
NzgzMmE1NjljOC8yYjc1Y2EyNTBmYzYzYzZjNDdkMDMyNjM4YmNlY2M0OWY0YjVm
YjcxNWVjNmRmZThjOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJy
c3luYzovL3JlcG8ucnBraS5zcGFjZS9yZXBvL05ldGlmYWNlLzEvMzIzMzJlMzEz
NzM2MmUzMTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM2MzYzODMwLnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAF7C4MA0GCSqGSIb3DQEBCwUAA4IBAQCEyuiZlAZ4fteCVJV6lBvy
8Q6qXPHBsh+HjBYy0WPnT0uOXpwyRyFr2J5vIxQRVzPvgIIKuGoxbKGCZ+cDehjH
O6pgX6jAEsXrydlDXonzMhN/RyA/S34qn8Pi4SSmRSj54Jlc7IuZ2bfmHHSBqLng
ch8YAkst4UBCN37smDLFWUYmr7nXevUlRKa6QXJ3I7WA3J1CePzuJs81lC2I3FdB
1Fzi0NBTKgA4TcIRKMBoPwMTY/l0qtzdSpXOdj0QVk/EXOEKjBtSvBYn5DkhMPPo
ksE+TW2KKYYi1EjGYCkBYFYNa0PFG6Mlw7PhUsb9RT4kNp4uZHTYFL6XedBrCFXa
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:28:22 2025 by rpki-client