Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/800f75df-c23c-3462-b9fe-8ff409be3155.roa
File:                     800f75df-c23c-3462-b9fe-8ff409be3155.roa (raw, json)
Hash identifier:          7kTBGvLS9coulwe6kgOMUVCAPTZyB5QFP4tSxsN9GNE=
Subject key identifier:   CC:F9:FB:91:A8:C2:B6:63:9F:61:C9:30:70:F0:60:C3:CB:02:76:F5
Certificate issuer:       /CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
Certificate serial:       010D0C9F43285847924BDF02F227FC4DAEE2DB00
Authority key identifier: 36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/800f75df-c23c-3462-b9fe-8ff409be3155.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     7018
IP address blocks:        170.205.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:df:02:f2:27:fc:4d:ae:e2:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301c790-c1f4-4fd7-a939-1a8d2669b5b7
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=5d733358-dc35-4812-924d-a89d8a39a5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:b3:40:af:38:dd:7f:1e:80:64:12:19:64:
                    47:a0:43:c3:5c:63:1d:f4:8f:d8:16:58:4a:01:91:
                    0e:89:dd:e6:36:2d:38:f4:f5:ff:bb:c4:2c:fd:dd:
                    84:7c:8e:70:1b:e6:4f:5a:9c:ff:b4:01:dd:e2:a6:
                    36:e9:80:0c:a2:3a:68:3e:ea:0a:87:50:ef:43:6e:
                    7c:9f:4e:60:87:2e:25:83:bc:4d:f3:b3:22:7e:76:
                    bc:f0:38:5d:78:9c:74:b3:54:e7:df:ca:ee:51:14:
                    9c:de:7c:72:86:67:d6:f4:02:51:ef:67:37:fc:29:
                    d0:86:15:34:a8:42:23:9d:8f:e9:8f:bb:38:86:28:
                    dd:8e:d2:e4:cc:72:0a:78:d2:c5:f8:9c:10:36:cf:
                    49:56:b9:2a:e8:dd:d2:0a:a1:61:6f:bb:b8:4c:20:
                    ed:34:2f:19:a0:e1:1a:77:be:af:81:64:2d:8b:46:
                    23:7c:45:ec:42:07:42:13:97:d4:bb:40:df:78:36:
                    4a:6f:9a:7e:a8:c5:2f:33:a5:50:4d:bc:26:b0:64:
                    b6:c9:a2:a5:7e:38:fa:c0:13:59:46:fa:a0:08:11:
                    a5:49:74:51:ee:dd:d1:ad:3b:09:3d:2c:a7:f3:86:
                    cb:4c:98:a5:cf:61:0b:b2:5e:43:d9:f0:36:49:ae:
                    7f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F9:FB:91:A8:C2:B6:63:9F:61:C9:30:70:F0:60:C3:CB:02:76:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/800f75df-c23c-3462-b9fe-8ff409be3155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.crl

            X509v3 Authority Key Identifier:
                keyid:36:15:5C:31:E0:37:DC:51:97:C8:D9:8A:A4:EE:58:5A:78:16:C9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d301c790-c1f4-4fd7-a939-1a8d2669b5b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b2:53:d1:e1:22:65:10:1f:35:d1:f0:0e:a7:ba:d8:85:07:
         2b:51:09:8b:24:35:d1:d6:7b:7c:85:ff:7b:27:c3:fb:cd:e3:
         0c:4f:13:47:d2:df:55:f5:8f:14:b8:27:a3:12:bc:6a:b0:d9:
         33:3e:99:62:69:8a:e6:61:5e:5e:05:97:37:11:f7:39:90:7b:
         36:d5:ba:a5:2b:c4:24:2a:b6:c3:e9:6a:c3:6b:57:c4:04:5b:
         aa:39:16:c4:8d:77:bf:05:2b:ab:2b:58:bf:eb:83:d4:69:6d:
         cc:3f:4b:ce:65:1e:9a:f3:21:a0:87:b9:dc:62:38:01:bc:af:
         8f:61:80:1e:cd:52:73:1c:ec:56:02:99:9b:41:96:a1:7b:1d:
         2e:d4:bf:37:57:60:4a:7a:6d:3a:25:f6:ae:5e:4c:66:d1:b8:
         43:62:38:c2:ae:38:1e:8b:da:49:44:48:2b:11:4e:92:6c:d8:
         85:89:50:d9:ef:ed:5e:ba:eb:68:16:9e:62:e3:7c:7a:af:96:
         87:6a:82:8e:7f:a8:4f:a1:c1:f7:2a:1c:f1:4f:00:e5:64:d2:
         ef:c4:d7:17:b7:75:75:c0:de:9d:7c:de:01:c5:99:95:90:56:
         b0:a1:46:5d:aa:b8:5a:5b:c5:7d:cd:07:68:28:74:bb:9a:15:
         96:c7:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:16 2024 by rpki-client on console-ams.rpki-client.org