Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/32a3a400-0c38-3e7e-8728-30557eb6f6aa.roa
File:                     32a3a400-0c38-3e7e-8728-30557eb6f6aa.roa (raw, json)
Hash identifier:          jC0X7z5MhXT8hQnZOVXgb0IO7QabvcEMwTDdQnj2ej4=
Subject key identifier:   EF:44:21:DB:EF:78:22:1F:2E:6B:70:41:68:DC:2F:E2:13:7C:B8:9D
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F432858478E1BC3EF09E3DAFFB66F0480
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/32a3a400-0c38-3e7e-8728-30557eb6f6aa.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     7018
IP address blocks:        207.170.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:c3:ef:09:e3:da:ff:b6:6f:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=fa2354c3-2b7b-454d-8342-46075776508f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b8:97:f3:73:05:fe:43:de:07:36:2d:ff:e9:
                    16:9f:f7:68:8a:88:c4:27:d5:79:01:57:83:c0:3a:
                    60:86:39:fa:8f:c2:b8:9f:d2:7b:06:d8:da:00:ec:
                    43:f9:91:72:4e:eb:48:93:78:1e:5e:4e:7b:f6:a9:
                    8c:67:ca:8c:10:ed:43:b8:eb:dc:42:32:25:4b:cd:
                    1b:12:23:29:a3:4d:01:b3:24:e5:fb:9c:9d:a3:0d:
                    dd:21:34:f7:6b:53:57:f6:fa:51:e1:7d:fd:df:12:
                    24:1f:b3:7b:25:14:d4:b9:39:8b:b8:17:ed:ef:b4:
                    19:da:e3:65:69:c5:ff:34:54:8e:38:06:3c:6c:33:
                    ab:30:a5:b9:50:93:83:80:56:3e:04:bb:42:81:63:
                    5b:31:72:d8:67:91:c2:31:89:4c:89:cf:cc:45:49:
                    c0:de:f5:99:fc:38:b1:e6:97:77:14:11:7c:6e:e4:
                    96:c7:3b:76:c6:0b:bd:86:5d:1e:d5:ff:3d:06:73:
                    d4:fa:01:08:e8:c0:2e:3f:b0:ca:99:3f:af:1e:d0:
                    90:80:cc:aa:f4:d4:42:8a:e8:c7:83:8b:e8:f8:28:
                    4b:3f:c2:5e:b6:cf:32:13:7d:62:87:30:62:23:18:
                    8f:05:a3:37:32:65:ad:6c:81:97:71:86:8e:62:18:
                    3a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:44:21:DB:EF:78:22:1F:2E:6B:70:41:68:DC:2F:E2:13:7C:B8:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/32a3a400-0c38-3e7e-8728-30557eb6f6aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:7b:e7:e0:35:0a:3b:28:e6:2f:00:d3:df:6b:79:8c:89:49:
         e9:61:df:5c:82:9c:a5:fb:55:6b:7e:bd:c7:97:f9:1d:95:af:
         a9:eb:75:73:1a:84:7e:0e:6b:ee:01:a1:a9:94:94:52:ac:c4:
         b6:7b:07:82:60:f0:b9:f2:f1:02:ac:ec:b4:53:fe:59:5b:0b:
         4d:ed:fa:72:ea:a4:f7:72:50:46:69:bc:87:8d:3d:03:9f:74:
         88:12:a7:80:8c:d7:e6:09:5b:b5:b4:2f:5d:d1:14:6b:2c:1d:
         27:e1:72:1b:8e:c8:96:07:04:54:ac:ad:9e:05:25:cf:25:61:
         f8:b9:01:11:ea:56:91:7f:c4:0a:eb:fd:46:db:fc:7f:bb:e5:
         ae:ba:44:25:e9:49:4a:fa:18:73:97:89:10:ef:4f:46:62:ef:
         c7:d2:49:ab:fe:ec:32:6d:71:d0:63:ba:0b:d2:1a:2f:d2:b3:
         95:26:d8:df:08:2e:46:fa:70:0e:2a:0f:c5:22:a3:39:c7:dd:
         a6:03:74:92:cb:af:be:09:97:c6:d1:98:9b:40:d8:30:72:0a:
         f8:d3:1d:67:3f:3f:6c:0f:75:2b:c1:28:85:40:01:df:75:28:
         0d:f4:00:41:3c:1a:7a:4d:e3:f5:5b:00:cf:10:21:36:46:64:
         40:b8:27:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:38 2024 by rpki-client on console-fra.rpki-client.org