Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa
File:                     32b7203d-9659-3b14-bb18-4e5cd1159b83.roa (raw, json)
Hash identifier:          GQ0fNAagFlh9e7oCt5tlJs36/+Ipc4ak6FhGVo4kj4c=
Subject key identifier:   62:80:9A:5F:A1:FC:46:0F:89:39:FF:64:DE:9D:C5:81:C0:1F:05:85
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F43285845304D3B6EB46B218AC0360100
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa
Signing time:             Wed 13 Mar 2024 01:00:26 +0000
ROA not before:           Wed 13 Mar 2024 01:00:26 +0000
ROA not after:            Tue 11 Jun 2024 01:00:26 +0000
asID:                     40493
IP address blocks:        216.37.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:30:4d:3b:6e:b4:6b:21:8a:c0:36:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Mar 13 01:00:26 2024 GMT
            Not After : Jun 11 01:00:26 2024 GMT
        Subject: CN=af45ae10-9587-4f44-b5e1-60581041a6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:7d:21:a6:4a:87:bb:bb:3e:a3:74:67:fd:
                    8b:6c:78:ba:f3:52:72:6b:23:f6:71:a7:75:fe:da:
                    ed:24:8e:ce:0e:07:37:af:63:95:66:6a:2a:f6:82:
                    64:b3:01:17:88:12:32:d2:34:87:57:d6:62:8f:b2:
                    9e:fa:39:2c:5b:ae:da:3c:31:e7:fa:8c:1a:ed:0c:
                    78:61:47:76:87:97:58:9e:75:4b:a7:d4:00:52:27:
                    0d:b3:75:1f:8c:3e:9d:cf:35:f3:fb:d7:f6:8d:d9:
                    c1:8a:1a:cb:e4:7e:6a:26:51:49:cc:ef:10:9c:1b:
                    b8:77:ef:c8:d4:2c:39:23:16:df:1c:ae:f5:0e:bd:
                    4c:94:e2:83:81:63:04:a1:4e:cc:38:88:8f:4c:45:
                    e5:8f:ef:2c:bd:14:33:99:79:34:1d:0f:e4:92:72:
                    c1:cf:59:9b:37:d9:b5:51:ac:56:f7:ba:64:30:83:
                    6b:55:41:d0:e2:9c:ef:a8:36:10:db:6a:c0:1f:e1:
                    28:96:f2:77:b9:fb:a5:e7:10:ee:57:d9:68:28:46:
                    59:25:dc:ca:05:8a:17:be:20:74:f0:5d:f7:08:32:
                    70:6c:72:b9:b8:02:5c:c4:71:90:29:7d:b7:38:91:
                    eb:8b:26:15:1b:ff:b3:7c:b8:73:22:ca:ac:b1:fc:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:80:9A:5F:A1:FC:46:0F:89:39:FF:64:DE:9D:C5:81:C0:1F:05:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.37.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:51:44:87:93:cc:ce:bd:cf:95:9b:71:c3:1a:1a:c0:4e:1c:
         1a:a7:35:a2:7d:44:77:ef:dd:d5:7b:11:62:b2:ae:c4:70:5c:
         b6:3d:a3:96:2f:3c:6d:be:3e:79:f2:7d:10:36:27:8c:64:90:
         1e:1d:c9:a0:a2:73:d0:ce:57:94:a5:15:2d:2d:59:f1:a8:9e:
         05:c9:a4:c5:84:ba:4e:2f:73:5e:24:18:14:84:f6:b9:f3:aa:
         26:28:32:5d:97:ef:cf:93:38:34:01:9f:68:f7:6e:19:c6:53:
         18:9e:6d:a4:e4:f1:31:01:98:11:84:8d:a6:1c:4f:7f:ae:08:
         5d:35:37:4d:c5:f7:44:78:53:8f:bf:6c:ff:2e:ee:2f:3b:07:
         9f:2e:56:79:f9:96:b4:00:5d:2e:5c:78:7c:b8:3f:52:85:36:
         19:38:be:7f:19:44:8c:5e:6c:5c:fe:e6:95:da:11:86:ea:c2:
         9b:be:ed:83:a8:87:54:f3:45:52:be:c9:70:c6:2b:71:d9:85:
         33:a7:f1:93:be:ef:5f:7c:f6:9e:05:0c:a8:45:16:8b:2b:12:
         6c:51:d3:6a:62:fe:7b:8e:c4:ea:b2:e9:7c:88:91:b4:9d:04:
         8f:46:31:cd:f3:43:45:df:76:7e:49:0b:39:ac:9f:84:91:56:
         f7:3e:88:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:08:59 2024 by rpki-client on console-fra.rpki-client.org