Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6585300d-48a8-316a-ad84-2d98521d3915.roa
File:                     6585300d-48a8-316a-ad84-2d98521d3915.roa (raw, json)
Hash identifier:          r5LApWKtcJo/2FpQiKpcPn10pyjio5I18HP39KZkacs=
Subject key identifier:   79:6C:1D:EA:91:60:26:5B:BB:B8:76:3D:FB:8C:E2:95:C9:F1:88:0F
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584734C88813D947C3C65E026C80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6585300d-48a8-316a-ad84-2d98521d3915.roa
Signing time:             Sat 14 Sep 2024 01:00:32 +0000
ROA not before:           Sat 14 Sep 2024 01:00:32 +0000
ROA not after:            Fri 13 Dec 2024 02:00:32 +0000
asID:                     33531
IP address blocks:        207.176.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:34:c8:88:13:d9:47:c3:c6:5e:02:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 14 01:00:32 2024 GMT
            Not After : Dec 13 02:00:32 2024 GMT
        Subject: CN=a9ade915-8087-40db-91d8-4736e9bc4606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:16:2a:3f:6b:41:37:71:01:54:72:4c:82:
                    ec:ae:97:8a:b1:cc:3a:ed:5e:55:ba:33:2d:17:72:
                    60:01:c1:fc:1c:9b:de:ab:73:5d:ca:52:c6:b5:90:
                    ee:c6:a1:a0:ac:27:a8:33:0a:38:04:64:ef:4f:ec:
                    65:da:ed:96:21:7e:0d:10:64:91:79:3f:a5:bd:fc:
                    73:3e:32:2d:66:d3:87:b1:03:b9:02:a3:6a:3b:8a:
                    41:4a:ce:2d:8d:84:20:ac:f3:72:1d:84:66:db:5c:
                    94:5a:ef:58:40:53:37:2b:8f:cf:9b:68:9f:0c:9e:
                    3c:bd:1b:49:ec:45:60:41:3b:43:6b:5f:35:80:c3:
                    6a:07:2c:8c:5b:f3:ff:a0:cc:90:cb:83:34:9e:c3:
                    72:6c:62:95:9f:e7:69:f7:11:e8:8e:d5:9e:b4:67:
                    40:f5:b4:58:a6:16:16:71:7d:51:9c:33:4f:eb:ae:
                    4b:79:0f:b1:2f:6d:79:f9:db:08:c5:3c:5c:11:cd:
                    a9:15:c0:54:49:b6:d1:e3:e3:70:e2:1c:11:d7:a8:
                    3f:08:09:ca:d0:2c:33:43:01:b6:9a:7a:04:9a:10:
                    3d:3e:0b:60:d7:86:b8:4b:1d:a5:33:32:f0:7e:a1:
                    93:43:74:2e:41:86:c4:88:9a:7b:8f:58:07:b5:24:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6C:1D:EA:91:60:26:5B:BB:B8:76:3D:FB:8C:E2:95:C9:F1:88:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/6585300d-48a8-316a-ad84-2d98521d3915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.176.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:23:1b:1b:87:70:8f:c2:4d:55:15:78:c7:48:c9:78:e0:ff:
         ae:41:81:f6:35:f5:d0:78:5d:64:2d:d1:af:3e:c9:9c:c6:e3:
         19:dd:fa:72:99:48:00:ad:ef:e9:12:89:d7:ba:85:96:db:09:
         70:6a:0f:a4:dd:b3:e7:4f:0f:8c:b0:0f:2d:1f:78:59:9f:dc:
         6a:f6:5b:6b:f6:7a:c0:84:e5:eb:3d:ee:53:8b:9f:6f:b6:03:
         74:b3:a7:a6:6c:57:fc:ae:33:54:39:64:73:0f:c4:57:2d:eb:
         bf:2d:95:ac:23:0c:86:cd:99:c1:21:43:6d:7b:bb:ce:bb:06:
         49:1a:43:c8:88:66:f2:37:04:ca:ff:1c:76:c3:7b:fa:d2:bc:
         18:03:5b:ed:3c:e2:f7:50:77:08:55:72:08:7b:8d:75:73:80:
         c7:29:0f:82:78:45:d0:df:06:cd:e6:54:30:85:88:54:5c:80:
         ea:f2:8a:29:4b:1f:36:53:88:4d:be:88:29:0b:7a:17:6e:e6:
         39:dd:e1:a3:e2:59:81:8f:ff:95:e8:0f:f2:17:fe:39:22:d6:
         0e:a0:34:c5:26:84:59:97:52:aa:6a:8e:1f:11:8c:3f:31:e9:
         85:38:28:3c:ea:0a:53:07:25:37:f1:ca:39:bd:3e:03:15:2a:
         fd:de:e4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org