Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Netiface/1/32332e3137362e3138342e302f32342d3234203d3e203630323233.roa
File:                     32332e3137362e3138342e302f32342d3234203d3e203630323233.roa (raw, json)
Hash identifier:          1WScFG0WFHRQ/GbdpjnXMRvx1GRaO1HCt/IUTTECrcA=
Subject key identifier:   5A:DE:D1:0A:CA:AC:BF:F1:23:AF:60:85:1B:35:CB:5F:BA:06:11:43
Certificate issuer:       /CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
Certificate serial:       6E26E1A6977B1C6EFED81A5B6FBEE1B4310AA5C9
Authority key identifier: FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/1/32332e3137362e3138342e302f32342d3234203d3e203630323233.roa
Signing time:             Wed 29 May 2024 13:55:16 +0000
ROA not before:           Wed 29 May 2024 13:50:16 +0000
ROA not after:            Wed 28 May 2025 13:55:16 +0000
asID:                     60223
IP address blocks:        23.176.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl
                          rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Dec 2024 08:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:26:e1:a6:97:7b:1c:6e:fe:d8:1a:5b:6f:be:e1:b4:31:0a:a5:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
        Validity
            Not Before: May 29 13:50:16 2024 GMT
            Not After : May 28 13:55:16 2025 GMT
        Subject: CN=5ADED10ACAACBFF123AF60851B35CB5FBA061143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:8b:89:23:11:04:55:34:e3:2a:d8:a6:03:
                    de:fb:09:7e:b8:18:90:1b:49:ff:9c:62:5a:9d:87:
                    8b:8c:28:18:46:e7:a5:1d:c2:81:d8:7e:a4:e0:ca:
                    e3:36:54:63:59:a5:e8:4e:65:a6:03:e3:0a:b4:c1:
                    0c:f6:4c:3d:29:db:d5:8a:bc:39:f4:f6:c6:c8:6a:
                    95:4f:9e:0a:eb:33:6b:31:82:07:7c:96:4a:50:21:
                    6c:d6:9c:17:da:57:d1:c7:b2:96:9a:4f:46:1e:12:
                    02:78:70:c8:d9:b8:02:48:c4:8c:bf:91:b4:d4:39:
                    0a:ef:65:e1:45:ea:91:e4:12:1d:42:0c:c0:cf:a8:
                    cc:59:d5:df:c3:d4:af:e7:bf:12:2c:aa:a8:f8:2b:
                    fa:f4:5e:f4:7b:80:ba:22:2b:fd:82:92:e7:88:54:
                    05:61:b1:fd:d5:7d:9f:9f:2b:f5:72:af:49:9e:40:
                    2e:2d:a0:9d:c6:d9:fc:1d:a8:f8:a9:88:a9:25:1c:
                    9f:7c:a6:df:53:56:58:2b:4d:ea:fc:f0:57:f1:33:
                    4e:6e:9a:9a:a2:0a:f5:5b:d2:4e:2c:d5:e0:e9:f8:
                    a6:cc:96:9a:0e:5f:c7:9e:d5:90:3c:46:ae:49:a4:
                    76:37:dd:85:91:17:d7:24:bf:8c:88:77:5c:d7:06:
                    28:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:DE:D1:0A:CA:AC:BF:F1:23:AF:60:85:1B:35:CB:5F:BA:06:11:43
            X509v3 Authority Key Identifier:
                keyid:FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/1/32332e3137362e3138342e302f32342d3234203d3e203630323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f0:6b:94:ca:0b:aa:5d:c5:f2:63:98:e6:d4:f5:3d:89:7a:
         91:46:62:60:9a:78:20:84:da:6c:86:3a:01:7f:65:98:c9:49:
         22:3c:a9:c4:98:da:fc:73:46:20:d1:00:91:84:f4:74:43:fa:
         1d:0d:13:85:66:c5:39:c7:20:9a:19:72:e1:0f:91:18:d7:24:
         e0:94:11:67:f0:a1:d0:ff:0c:2d:23:48:06:7f:98:a8:eb:6a:
         a9:04:85:f6:fc:a2:f4:74:2b:58:2c:43:62:61:cf:e9:54:b8:
         80:64:3b:b2:f4:33:13:8f:f7:35:7f:12:01:34:25:f6:c1:7e:
         ac:f1:66:91:0c:09:17:55:b1:0d:7f:38:e9:20:69:41:4f:0f:
         2e:1d:c8:ee:d7:32:05:ea:b8:5a:3d:6f:d4:02:e5:86:37:f6:
         61:c1:4b:f0:21:9c:11:f0:fc:4c:cd:69:6f:9a:85:1c:7c:a5:
         9a:76:fb:79:e2:9d:89:be:54:4b:37:cf:60:58:d5:19:36:6d:
         f7:92:8d:04:aa:06:d4:ff:61:56:5b:40:1d:03:b5:77:8a:6a:
         52:9f:3d:8f:d4:fd:80:5f:97:a5:bc:da:9a:dc:ab:83:60:6a:
         60:fc:1e:fe:87:6a:81:fe:e7:3a:d6:15:b4:e4:f2:46:a1:84:
         c9:f7:c1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 07:43:51 2024 by rpki-client on console-ams.rpki-client.org