Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bbbcc06-2232-37d2-bdd4-b688153df820.roa
File:                     4bbbcc06-2232-37d2-bdd4-b688153df820.roa (raw, json)
Hash identifier:          YTqNgLc6vJ1HKsMeQG/lElxTj3Ft2ELRNwLsZruXXbE=
Subject key identifier:   77:3D:7C:CC:ED:78:B0:F7:C4:D1:71:43:4E:1A:4D:C4:FD:B6:09:2F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76CBD87DD650946DCED480
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bbbcc06-2232-37d2-bdd4-b688153df820.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        207.68.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:cb:d8:7d:d6:50:94:6d:ce:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=0fee7bff-d19b-4d08-a808-2225a3f801fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5b:19:2d:9d:04:9f:7e:55:90:29:2f:99:43:
                    78:55:3a:db:0f:82:15:07:34:aa:78:d3:e4:bc:2c:
                    37:28:3d:2b:47:ea:73:c8:64:17:2e:7b:12:bc:ff:
                    5f:28:1a:f1:b2:e4:69:df:6f:74:b7:e3:98:cf:e2:
                    0d:c7:32:df:28:1c:32:d2:24:20:dd:ea:13:fd:ca:
                    39:e3:28:4d:cf:d7:4b:66:18:f9:71:94:2c:9b:7c:
                    18:0f:1f:85:ac:8a:a8:1f:49:72:55:ac:0b:48:06:
                    fc:f3:9f:a1:0f:73:ca:10:78:e3:88:14:44:ae:38:
                    b4:ea:ae:e0:d4:be:e8:18:33:b2:6c:ee:a1:70:04:
                    c2:9b:86:a5:e9:6a:b9:68:01:da:9d:81:7c:f9:8c:
                    b8:80:c7:44:94:29:2a:64:e3:4d:f5:a7:61:47:27:
                    96:b5:a1:dc:ab:7c:fe:d5:31:26:e7:0b:53:8a:99:
                    6a:9f:75:fc:43:7a:78:28:90:2f:55:cc:aa:8a:20:
                    b4:2b:84:db:ed:18:93:c5:a0:22:52:ee:83:8c:8c:
                    2a:5e:ce:e8:2e:d4:f0:64:6f:55:4a:b3:1e:4d:dc:
                    96:5e:6f:a4:48:6a:71:71:78:26:e1:6b:74:76:6e:
                    54:83:e3:d9:b8:3b:c5:18:58:68:56:68:3a:84:0c:
                    8e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3D:7C:CC:ED:78:B0:F7:C4:D1:71:43:4E:1A:4D:C4:FD:B6:09:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4bbbcc06-2232-37d2-bdd4-b688153df820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.68.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:42:12:d1:3e:49:e6:0c:9c:c2:30:17:b9:e8:b3:2f:86:
         71:c4:cc:32:7d:84:43:dd:f2:07:e4:7e:76:55:0c:1c:ca:27:
         04:a1:90:ea:72:4a:87:14:a2:11:0d:f4:88:5d:b8:14:3e:6d:
         d4:e2:8d:2b:b9:b6:3a:52:6f:61:92:7b:2b:6a:6c:cc:1d:a5:
         1a:61:ce:e7:d8:03:72:07:4d:ef:84:b2:33:98:88:5b:d1:ca:
         07:87:f4:fd:5a:f4:43:0b:62:83:31:44:f2:77:e6:1d:53:41:
         c1:a5:e5:64:14:58:3e:0e:00:bc:7a:86:47:89:cc:68:df:65:
         1d:ad:03:84:78:bb:1f:6d:22:37:0c:5e:00:17:a0:48:7c:65:
         8f:13:df:c1:8c:be:ed:50:59:d6:55:f8:24:f8:f5:fd:4a:49:
         0a:a9:d4:83:12:61:73:59:9d:95:76:f8:be:ec:32:9c:ff:31:
         18:f9:b4:50:b0:b4:51:a5:d1:41:4e:8e:16:6b:ee:5b:90:45:
         e4:eb:29:e9:ce:a8:9c:e9:29:be:3b:7f:11:9d:3c:6d:46:7e:
         32:0d:e5:63:f4:63:c9:4a:9d:5e:35:f3:35:47:f6:7c:17:bf:
         f2:f7:62:25:af:76:66:3d:be:49:84:a6:44:34:79:a0:ff:1f:
         49:87:fa:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:25 2024 by rpki-client on console-ams.rpki-client.org