Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa
File:                     ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa (raw, json)
Hash identifier:          f9S0Uv0hs+JyI0aseFWXs/IqNB5BlWy16bjr66oVUp8=
Subject key identifier:   71:CD:62:11:BE:5C:FB:6B:81:B7:DB:37:57:4C:61:DC:C8:EA:8D:F7
Certificate issuer:       /CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
Certificate serial:       010D0C9F43285845A76D5B2D95F757B65E7EDF80
Authority key identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa
Signing time:             Wed 24 Apr 2024 17:06:24 +0000
ROA not before:           Wed 24 Apr 2024 17:06:24 +0000
ROA not after:            Tue 23 Jul 2024 17:06:24 +0000
asID:                     16509
IP address blocks:        212.32.32.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a7:6d:5b:2d:95:f7:57:b6:5e:7e:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
        Validity
            Not Before: Apr 24 17:06:24 2024 GMT
            Not After : Jul 23 17:06:24 2024 GMT
        Subject: CN=589e8f9f-f0da-4b97-9bf2-9fdf83adb330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:6e:f0:46:4f:96:be:13:49:80:c1:1f:96:
                    bb:8c:16:d0:23:f2:ea:53:69:c5:5d:b5:be:82:ad:
                    16:df:46:b5:e8:cc:b5:64:e9:08:48:d9:57:e0:1f:
                    14:14:d8:44:be:8b:01:4e:d7:fc:0c:29:ff:42:58:
                    07:17:8d:d2:36:f9:ef:37:89:3c:2a:62:fc:66:95:
                    4e:03:3f:3a:c4:de:54:90:17:51:d1:e9:0a:52:13:
                    0e:eb:52:4e:aa:ca:11:fc:3a:c8:ab:aa:03:d2:17:
                    ac:33:cf:44:fb:4a:13:80:59:94:98:62:bf:b8:08:
                    ef:1f:d5:86:e6:7f:6c:1c:21:a5:e8:1e:e1:0f:68:
                    9b:2d:c7:e2:bd:47:56:07:3d:c2:80:68:3e:8f:36:
                    79:c0:05:58:b0:ad:92:75:aa:4c:be:02:52:42:64:
                    86:99:a7:57:b2:f8:3b:25:5a:a4:9d:3a:2f:51:0a:
                    1a:20:3b:d6:6f:d4:c7:ae:3f:5a:95:06:9d:a3:cb:
                    7a:ae:f5:f9:f0:65:c1:a6:77:c0:21:82:cc:cd:ca:
                    e8:2f:64:85:b3:6b:32:f3:45:7f:8b:7d:78:81:91:
                    19:2e:e5:0a:80:dc:f2:90:39:5b:65:5b:d3:6f:11:
                    0e:50:e1:7d:cb:a1:07:99:3c:b5:76:04:85:fd:b0:
                    b8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CD:62:11:BE:5C:FB:6B:81:B7:DB:37:57:4C:61:DC:C8:EA:8D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.32.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:9d:2c:66:32:3b:12:1b:44:5c:69:c9:af:53:5e:44:65:21:
         1d:06:bf:13:af:3f:bd:56:93:55:d8:33:3e:84:5d:4c:c5:86:
         cf:9f:96:16:08:7d:af:ba:81:79:eb:09:79:09:fc:e1:91:bf:
         de:76:bb:a2:84:13:46:53:a3:41:a9:7b:6e:c0:ae:92:ff:0b:
         51:2b:ff:a5:8d:7e:b2:ec:0d:9b:cd:30:24:9e:10:22:e4:90:
         13:64:a4:63:75:ee:57:c8:4c:19:fc:13:7a:7c:13:ff:b4:c5:
         d2:21:25:02:8d:ba:3a:cb:8c:ed:7d:08:c6:cc:f5:3c:56:20:
         d2:5b:6c:18:f8:d5:b6:82:d6:54:0d:f7:da:ca:49:71:2e:cd:
         03:ea:1c:5d:20:2e:85:74:c6:31:fc:80:b9:b8:5d:a6:bf:8e:
         a8:6b:b4:08:3c:a8:f0:8f:b3:2b:86:1d:f0:7f:bd:05:04:ab:
         64:71:bd:08:ca:e5:cf:a9:58:d9:2c:3f:17:6d:64:59:79:c1:
         88:b1:9c:e5:60:aa:5f:11:a6:50:f3:0a:7d:7c:3c:90:14:30:
         61:9c:b9:33:ee:81:19:19:93:0b:ff:38:95:f0:be:24:5b:0c:
         e5:77:43:9c:7b:72:4c:68:31:a0:41:a9:ee:db:d7:7c:90:a3:
         c4:4b:a5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:24:49 2024 by rpki-client on console-ams.rpki-client.org