Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/edd94304-c556-32a8-89f1-6f73ae2570b0.roa
File:                     edd94304-c556-32a8-89f1-6f73ae2570b0.roa (raw, json)
Hash identifier:          S2IfxHiT40VDoxHhQQ4tleCTuDkbvqSwD49kwzWuVkU=
Subject key identifier:   E1:42:60:67:D7:0E:32:E2:4C:94:D6:33:72:A3:E3:C3:E9:2A:1C:D6
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858473D25F6CED5704842A5DB2120
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/edd94304-c556-32a8-89f1-6f73ae2570b0.roa
Signing time:             Tue 17 Sep 2024 01:00:31 +0000
ROA not before:           Tue 17 Sep 2024 01:00:31 +0000
ROA not after:            Mon 16 Dec 2024 02:00:31 +0000
asID:                     198148
IP address blocks:        207.176.32.0/22 maxlen: 24
                          207.176.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3d:25:f6:ce:d5:70:48:42:a5:db:21:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 17 01:00:31 2024 GMT
            Not After : Dec 16 02:00:31 2024 GMT
        Subject: CN=a14ef43a-08a6-4a90-a998-de856715a7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:02:82:0e:a8:13:80:e2:e8:fe:35:3e:95:f7:
                    64:dd:84:b3:b4:b1:bf:a2:4f:e2:e7:97:7c:d6:22:
                    08:c5:87:7b:51:c8:57:cb:bf:e4:8c:a7:45:af:c3:
                    4e:d7:5a:92:99:a5:6c:03:96:cb:f3:3c:d4:24:85:
                    fa:aa:c2:e9:58:05:b4:7b:f8:07:96:99:5b:1b:51:
                    cc:16:f0:5c:01:69:84:95:1a:19:39:62:70:ee:30:
                    10:15:00:46:cc:e0:85:f3:a1:e5:8c:13:67:18:ec:
                    f4:3d:83:be:42:fd:81:5e:34:1d:e2:61:1e:b9:b8:
                    65:6e:a7:ab:41:59:1e:1c:7d:5a:f5:02:77:06:7e:
                    37:8e:db:1f:fe:9f:d6:af:a8:05:a5:f6:67:68:c1:
                    8a:37:ea:1a:70:d0:82:70:33:75:74:be:6b:c4:77:
                    d4:3f:f0:e3:1f:a6:d6:5a:78:f4:e7:18:f0:ed:1b:
                    c5:51:0a:12:f9:26:f2:a1:f4:ba:0f:e6:84:0f:35:
                    5b:aa:69:90:87:7a:19:33:9a:f8:75:4a:5d:a2:c6:
                    df:aa:f1:8c:03:57:64:67:2b:eb:b3:03:42:14:81:
                    b4:ad:39:a0:4f:d5:a2:c8:00:02:b7:f6:2a:f8:5c:
                    d1:2d:05:28:80:19:b6:4b:ed:bc:0f:e0:85:59:2e:
                    b4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:42:60:67:D7:0E:32:E2:4C:94:D6:33:72:A3:E3:C3:E9:2A:1C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/edd94304-c556-32a8-89f1-6f73ae2570b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.176.32.0/22
                  207.176.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f5:80:d7:9f:b5:17:2c:b8:22:b7:0a:5f:e7:61:ee:44:d3:
         94:bc:07:3b:bf:9b:8a:f7:0f:08:70:99:ae:57:66:8a:59:b2:
         2f:9b:9a:17:38:c5:02:3e:81:f0:a8:22:c4:d0:05:d6:c2:95:
         13:6e:1e:11:6a:b8:de:4d:95:47:58:8d:f9:47:6c:51:38:a9:
         fd:74:e5:5e:33:47:e6:85:ed:49:65:3a:b9:e2:f6:61:87:46:
         e9:6b:c2:f2:c2:2b:07:63:52:ab:b7:07:31:c4:bb:2c:12:c2:
         17:1c:20:fe:a0:29:3f:e8:57:f6:ab:fb:a0:17:04:41:da:65:
         be:b4:87:c9:32:07:24:87:5c:41:b0:20:1e:19:96:97:94:8d:
         f4:69:9d:be:9c:1f:e4:3f:3d:6d:cc:f3:16:41:33:9d:71:d2:
         96:d5:f4:a8:17:67:dd:d9:4f:ac:0e:17:00:0e:87:70:7e:c5:
         93:d3:70:79:7c:44:17:ae:eb:fe:e7:88:8a:ea:37:31:41:9e:
         7b:11:e6:4c:73:fa:e3:03:f2:e2:f1:35:02:49:7b:0e:32:1a:
         62:2c:bd:2c:09:04:4f:b3:f1:4a:29:22:5c:b3:19:b4:48:2c:
         2b:65:6a:91:ed:0f:79:6a:b8:9f:a4:60:1c:48:07:04:c1:51:
         2a:40:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:45 2024 by rpki-client on console-ams.rpki-client.org