Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a5db813-026f-35f0-b5f9-5ebccb2a9028.roa
File:                     6a5db813-026f-35f0-b5f9-5ebccb2a9028.roa (raw, json)
Hash identifier:          iwwpvJ7Eh4LEGh3mvwHjs5igLv0rDqefRtLbZGbOMME=
Subject key identifier:   93:61:0F:E4:A5:5A:B9:B5:FE:AD:A4:F4:19:1E:EA:C5:89:27:7D:F5
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285847B53147D632A07202CDA19AA0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a5db813-026f-35f0-b5f9-5ebccb2a9028.roa
Signing time:             Wed 30 Oct 2024 01:00:32 +0000
ROA not before:           Wed 30 Oct 2024 01:00:32 +0000
ROA not after:            Tue 28 Jan 2025 02:00:32 +0000
asID:                     64249
IP address blocks:        207.32.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b5:31:47:d6:32:a0:72:02:cd:a1:9a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Oct 30 01:00:32 2024 GMT
            Not After : Jan 28 02:00:32 2025 GMT
        Subject: CN=0f890941-e309-4eea-af0c-d867117cf622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b2:54:65:e1:93:11:03:db:6c:1d:33:00:fe:
                    c0:f1:bf:a9:9e:2b:f8:dd:a7:0b:25:ac:b6:83:5b:
                    fa:3d:c3:5d:e4:14:04:57:e4:20:38:78:7b:e5:80:
                    55:43:49:ba:97:01:09:bb:13:da:ff:4e:72:c5:30:
                    f9:d2:1c:a7:bc:e9:c4:31:c1:bc:5e:64:1a:2c:66:
                    8d:a4:f9:f9:9d:7e:5e:56:35:6a:5d:42:b4:68:ad:
                    ed:30:da:2e:93:d5:ea:f2:aa:09:e5:d4:06:3b:0a:
                    12:b5:1b:45:e0:30:02:aa:95:29:ce:66:ec:79:07:
                    84:dd:87:54:e6:1d:ff:86:22:50:ce:93:93:be:88:
                    93:c8:29:ed:f2:bd:03:e7:3d:8c:e0:0c:0a:4e:0b:
                    73:db:c6:c8:f3:c3:91:63:e6:61:fc:1b:21:75:dd:
                    86:ea:42:da:2a:e7:42:ff:a9:67:e0:fb:17:e6:fb:
                    a1:92:01:22:57:7f:4a:c8:8d:37:20:12:9a:a3:1f:
                    58:9b:ad:5e:a4:4c:d7:84:40:a2:60:25:5e:a5:71:
                    61:44:a9:c4:d4:2b:39:32:88:6d:15:e0:c7:9d:c2:
                    cf:29:fb:33:93:23:28:e0:d4:3d:7c:60:44:69:22:
                    0f:fd:89:51:74:98:52:24:ca:ec:93:54:99:d6:01:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:61:0F:E4:A5:5A:B9:B5:FE:AD:A4:F4:19:1E:EA:C5:89:27:7D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6a5db813-026f-35f0-b5f9-5ebccb2a9028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.32.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:d4:7b:11:88:4a:62:79:6b:e8:81:cd:6b:eb:34:7f:f7:6a:
         d0:60:8b:47:53:b6:e5:31:5b:85:2d:93:6d:b1:75:c6:92:16:
         0f:0a:12:9e:8c:f6:a3:5d:ed:f3:d1:02:54:40:8e:7d:6d:8c:
         82:8c:40:47:94:89:a1:01:6a:97:c5:91:9e:a3:22:30:03:bc:
         f4:9d:bd:c2:1b:63:c5:4b:c9:98:34:4a:46:61:3b:35:eb:c3:
         f7:92:ea:f2:ac:6c:3c:ee:d4:48:1c:96:96:47:3c:72:e0:67:
         53:e2:23:f7:49:73:88:7b:74:8d:11:b4:e0:a4:7b:3b:a2:74:
         c2:b9:e8:f9:de:d2:eb:f9:1a:1e:e3:c4:f0:e8:7a:c8:4c:0e:
         28:a1:99:f1:6b:e6:31:d7:0e:12:35:e1:6c:da:63:b6:cc:9e:
         ba:42:8b:06:ab:a4:0c:6e:c4:b5:38:0d:44:0b:7f:92:df:af:
         46:3a:3e:07:e9:65:ec:73:4f:17:a3:47:e9:e8:4e:46:57:53:
         1e:d2:54:c5:38:3b:01:51:f5:f4:6d:c2:96:55:24:d2:a2:6e:
         01:91:07:e2:db:16:22:66:1a:ff:65:15:7e:66:a9:26:4f:a6:
         c9:fe:7f:94:88:7b:91:af:29:2c:22:e4:42:0d:35:4a:42:2e:
         09:f1:36:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:39 2024 by rpki-client on console-ams.rpki-client.org