Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa
File:                     ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa (raw, json)
Hash identifier:          eWDKlWlBhcZjpjonx3OT56phHWQbiSRIeju6w2hOaRQ=
Subject key identifier:   78:A2:75:C2:45:E8:D1:0A:83:D9:B5:57:FC:6F:46:A8:72:3A:5A:C4
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F432858474585FAD613F03350E1BE3740
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa
Signing time:             Fri 20 Sep 2024 01:00:31 +0000
ROA not before:           Fri 20 Sep 2024 01:00:31 +0000
ROA not after:            Thu 19 Dec 2024 02:00:31 +0000
asID:                     399629
IP address blocks:        67.217.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:45:85:fa:d6:13:f0:33:50:e1:be:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Sep 20 01:00:31 2024 GMT
            Not After : Dec 19 02:00:31 2024 GMT
        Subject: CN=7f22e79a-68de-49ea-bc1d-3ec464a11dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:f4:c6:78:57:e2:95:dd:64:5a:95:4f:96:
                    94:81:80:39:63:f5:5a:9b:fa:46:98:50:7c:92:5e:
                    ce:03:77:aa:97:4c:ea:9e:fb:cd:44:00:bc:0d:9d:
                    db:cb:44:32:4f:29:49:87:1a:8f:1b:7c:fa:3f:2b:
                    cc:8a:30:4e:6d:de:57:0d:a8:bb:08:73:d0:5a:a6:
                    d8:90:37:72:b0:2e:8f:54:94:f8:a0:78:42:ce:ec:
                    de:46:71:97:ae:72:ad:7c:53:ff:72:bf:e9:d2:8e:
                    e7:a1:43:76:83:f6:0f:e2:65:2a:9d:a4:3b:52:4e:
                    40:21:a7:46:84:87:5c:16:51:e8:9c:af:40:b7:10:
                    43:bb:03:cf:4a:1e:ae:a8:1f:56:1f:ea:ba:a8:0d:
                    6a:e6:72:6c:d9:67:71:4f:9f:2a:62:49:dc:c3:8f:
                    a9:f9:3e:86:75:2a:e5:8f:a1:bf:25:f3:2c:ea:57:
                    09:56:b7:48:ca:2b:7f:0c:47:93:6f:ae:2b:8d:5d:
                    f6:95:c9:58:74:67:6c:d4:f3:90:3a:e6:d9:7a:22:
                    57:d3:0a:d4:6c:d5:22:c1:76:9c:06:b7:76:6e:20:
                    d4:7d:6a:23:3b:18:b4:0d:b7:07:c1:80:9f:fa:aa:
                    d0:82:9f:67:b8:6e:87:26:92:5a:a4:3c:74:eb:7f:
                    11:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A2:75:C2:45:E8:D1:0A:83:D9:B5:57:FC:6F:46:A8:72:3A:5A:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:38:89:f9:cf:79:39:98:f5:d3:bc:d3:b0:17:5c:04:aa:e8:
         66:8c:05:01:76:b0:18:f5:df:16:fa:31:3e:ff:33:cf:7b:89:
         7c:1f:9b:05:a4:78:3e:71:78:63:28:57:db:ab:bd:a4:bb:09:
         ab:41:58:09:9d:12:92:c5:31:f9:4c:31:00:1f:87:5f:93:88:
         bb:cc:59:c4:3d:47:33:23:dd:c4:c7:bd:11:83:40:a8:d8:03:
         51:e5:9f:ad:63:84:a8:2b:ac:00:1f:4b:6f:c6:1a:26:b4:84:
         a4:b9:42:0a:ce:06:8a:fa:e0:cb:bb:fb:79:ad:a3:12:54:dc:
         67:42:6e:ca:6e:1c:20:ab:6f:d4:7e:ae:f2:5f:b8:1f:fc:d7:
         a1:9c:6e:30:11:1b:88:e7:02:36:69:44:8f:49:53:70:fc:f4:
         d6:a0:52:c9:7d:e2:05:03:c7:73:12:c9:98:4d:2f:73:32:0a:
         83:7c:3c:e2:86:43:30:93:60:47:4a:a3:63:5d:f5:ac:48:45:
         a6:2a:37:e8:bb:66:27:ec:99:6f:4b:0b:cf:31:b8:94:69:f9:
         31:25:d5:1d:b3:7b:ce:28:ee:a7:35:4f:6d:37:aa:06:0b:72:
         61:3b:db:f2:8a:4a:c9:9b:00:0b:fe:85:66:26:23:1f:30:55:
         34:53:7d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:24 2024 by rpki-client on console-ams.rpki-client.org