Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/0ef2e685-962e-3c72-8903-9722df652b4a.roa
File:                     0ef2e685-962e-3c72-8903-9722df652b4a.roa (raw, json)
Hash identifier:          ejbtUUvBovZESRr3tTLclHNJz8liDtA1X3KGN3BFDEk=
Subject key identifier:   32:3C:99:04:14:B7:82:93:E3:14:87:79:28:FB:48:95:B7:3C:55:A3
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285847EBBF7EED24A4A0B3D1E59C00
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/0ef2e685-962e-3c72-8903-9722df652b4a.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     55293
IP address blocks:        70.32.16.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:7e:ed:24:a4:a0:b3:d1:e5:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=8310cebe-0b44-4150-93d5-eb77b8298083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:26:d2:36:83:be:83:a9:d6:f6:72:64:14:14:
                    d9:2d:5b:1c:f6:dd:22:20:bd:69:68:f9:38:79:5d:
                    f1:44:f2:50:fa:20:22:3e:69:d9:ef:fa:f5:38:cb:
                    8e:5f:71:b0:17:2f:5b:3a:b2:12:1f:1a:21:43:63:
                    a8:1a:d0:61:46:96:3e:6a:79:99:d8:55:e0:39:db:
                    f2:e4:37:4a:a8:80:65:55:46:22:b7:4c:86:0d:64:
                    76:01:1d:a5:37:99:6d:6f:f4:a8:b7:5a:55:09:af:
                    44:ef:cb:f6:b5:a5:9a:a1:f9:88:d3:56:92:a3:f5:
                    11:3e:fb:89:54:36:32:de:b3:3d:8d:03:48:d9:3e:
                    58:73:6f:94:53:c1:12:cb:88:42:bd:2f:3e:93:12:
                    00:a8:fe:2e:99:a7:15:a0:be:d1:18:f2:a8:96:b8:
                    62:55:75:e4:4b:72:e5:32:11:36:e3:a2:cc:f2:1c:
                    97:52:10:37:87:96:c0:ef:d6:89:e9:61:89:49:de:
                    75:90:4f:8a:df:ef:ad:d9:4c:56:8e:7a:1a:a6:36:
                    64:7a:cc:92:68:be:f3:49:53:01:44:d8:13:65:7c:
                    97:59:00:60:fc:0c:6e:ea:6f:a4:52:9b:32:1d:af:
                    30:9c:d3:6e:23:7f:9d:f7:f3:ae:28:6c:0c:75:92:
                    35:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3C:99:04:14:B7:82:93:E3:14:87:79:28:FB:48:95:B7:3C:55:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/0ef2e685-962e-3c72-8903-9722df652b4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:4b:ca:8f:a8:f7:f7:01:ef:10:ac:ab:42:6a:48:7a:ce:92:
         50:bf:c8:34:b6:08:32:3e:89:27:6a:73:9c:a9:c8:52:39:09:
         aa:f4:a2:5f:58:85:02:b2:9d:c5:2b:dd:b2:74:6c:c7:a3:e4:
         d3:25:d5:9e:62:3b:7f:25:1a:56:7f:ed:4c:b5:c3:5a:52:61:
         a4:06:aa:db:3c:7d:5b:fc:ee:16:18:85:64:82:ed:e3:8b:46:
         97:20:a6:16:4b:a1:c1:06:ef:66:80:18:c1:99:d3:4b:c3:76:
         95:f0:e5:1e:75:96:ff:59:68:65:c1:39:b3:85:ec:14:62:57:
         9b:ea:20:d6:a3:30:3d:e5:4c:2b:96:d1:cd:41:fd:e9:5a:4f:
         ef:49:5e:cc:8c:c3:8d:ad:5b:c7:60:83:47:9e:74:89:02:86:
         61:09:24:b0:c8:4d:96:1e:b7:a7:5e:ae:4c:e3:bb:64:b9:fb:
         24:f9:5b:cd:9b:07:d1:f5:be:13:3a:61:17:b8:5e:6d:63:a9:
         e3:39:b9:32:d5:3b:9f:d5:50:ad:eb:ec:a7:38:61:c6:67:61:
         ec:bf:1f:60:17:15:18:f8:62:61:a8:ba:c0:4a:f2:08:e5:a5:
         89:53:8a:89:94:ca:25:49:cd:9b:d9:7d:e5:83:5e:17:71:78:
         44:a9:e2:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfrv37tJKSgs9HlnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2M5MzgzZTQtMmM1MS00ZmZkLWJmZTktNjllOWZkNmM1
YjU4MB4XDTI0MTExODE0MDA0MFoXDTI1MDIxNjE0MDA0MFowLzEtMCsGA1UEAxMk
ODMxMGNlYmUtMGI0NC00MTUwLTkzZDUtZWI3N2I4Mjk4MDgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSbSNoO+g6nW9nJkFBTZLVsc9t0iIL1paPk4
eV3xRPJQ+iAiPmnZ7/r1OMuOX3GwFy9bOrISHxohQ2OoGtBhRpY+anmZ2FXgOdvy
5DdKqIBlVUYit0yGDWR2AR2lN5ltb/Sot1pVCa9E78v2taWaofmI01aSo/URPvuJ
VDYy3rM9jQNI2T5Yc2+UU8ESy4hCvS8+kxIAqP4umacVoL7RGPKolrhiVXXkS3Ll
MhE246LM8hyXUhA3h5bA79aJ6WGJSd51kE+K3++t2UxWjnoapjZkesySaL7zSVMB
RNgTZXyXWQBg/Axu6m+kUpsyHa8wnNNuI3+d9/OuKGwMdZI1bQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDI8mQQUt4KT4xSHeSj7SJW3PFWjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkz
ODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5ZmQ2YzViNTgvMGVmMmU2ODUtOTYyZS0z
YzcyLTg5MDMtOTcyMmRmNjUyYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvY2M5MzgzZTQtMmM1MS00ZmZkLWJm
ZTktNjllOWZkNmM1YjU4L2NjOTM4M2U0LTJjNTEtNGZmZC1iZmU5LTY5ZTlmZDZj
NWI1OC5jcmwwHwYDVR0jBBgwFoAUJtGbtQL9y3VNYKC7ao9HB+JMFzswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jYzkzODNlNC0yYzUxLTRmZmQtYmZlOS02OWU5
ZmQ2YzViNTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERiAQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIlLyo+o9/cB7xCsq0JqSHrOklC/yDS2CDI+iSdqc5ypyFI5Car0ol9Y
hQKyncUr3bJ0bMej5NMl1Z5iO38lGlZ/7Uy1w1pSYaQGqts8fVv87hYYhWSC7eOL
RpcgphZLocEG72aAGMGZ00vDdpXw5R51lv9ZaGXBObOF7BRiV5vqINajMD3lTCuW
0c1B/elaT+9JXsyMw42tW8dgg0eedIkChmEJJLDITZYet6derkzju2S5+yT5W82b
B9H1vhM6YRe4Xm1jqeM5uTLVO5/VUK3r7Kc4YcZnYey/H2AXFRj4YmGousBK8gjl
pYlTiomUyiVJzZvZfeWDXhdxeESp4tQ=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:59 2024 by rpki-client on console-ams.rpki-client.org