Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa
File:                     ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa (raw, json)
Hash identifier:          vv6BBGFI45OXR3RaGJeb8+11x4SnTKeZKARJWlNAaUw=
Subject key identifier:   FD:99:3B:5F:06:0E:D1:1B:43:AD:43:EA:51:F2:6C:C7:E2:48:DA:67
Certificate issuer:       /CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
Certificate serial:       010D0C9F43285848467ABE70CC6F440DB155B440
Authority key identifier: 8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa
Signing time:             Sat 21 Dec 2024 02:00:39 +0000
ROA not before:           Sat 21 Dec 2024 02:00:39 +0000
ROA not after:            Fri 21 Mar 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        212.32.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:46:7a:be:70:cc:6f:44:0d:b1:55:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=418526d5-2aa2-4d2f-8cb1-5c417728a97d
        Validity
            Not Before: Dec 21 02:00:39 2024 GMT
            Not After : Mar 21 01:00:39 2025 GMT
        Subject: CN=4dbe1f20-f3a0-4f73-9a66-03f88c972b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:85:48:b9:e3:a4:cc:8f:f9:02:01:b0:a8:6b:
                    94:99:26:33:44:91:f4:39:fb:a7:12:4a:68:b4:a8:
                    17:66:40:2d:ad:84:28:cc:70:81:f2:a2:21:d0:9a:
                    34:a3:cf:28:6b:99:ed:c5:4c:5b:ba:4d:b3:cc:c1:
                    85:31:ef:9e:46:5e:9b:7c:be:42:50:53:96:3c:1f:
                    8e:5e:82:47:5d:0c:e3:e8:31:33:ee:6b:35:80:f6:
                    52:67:5a:06:0c:12:d0:0b:89:d0:1a:25:f4:41:cd:
                    ed:50:a3:38:c6:7c:d0:80:74:15:c8:9a:55:b5:0b:
                    ac:9e:8e:1c:dc:39:2e:3a:5d:ab:ab:e9:66:44:d9:
                    cd:37:2b:7d:62:d7:6c:19:1e:a0:16:5c:8b:53:b4:
                    f5:ac:e3:0d:c5:7f:60:ca:1d:a1:d4:46:bd:56:d5:
                    3b:09:93:2f:3c:03:b1:99:87:84:30:86:29:05:36:
                    8c:9f:b4:d5:c1:ee:5d:0a:95:d7:6f:16:72:bb:3e:
                    cf:53:3e:6c:8d:7e:32:14:1d:31:93:2a:60:2d:71:
                    af:c3:04:66:d5:e8:80:95:83:f5:c0:cb:55:32:a1:
                    f7:ff:e5:72:ac:c3:ae:7f:bd:02:f1:e5:ed:71:99:
                    77:03:ce:f0:62:87:e9:03:8f:b1:fc:ad:99:86:ef:
                    49:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:99:3B:5F:06:0E:D1:1B:43:AD:43:EA:51:F2:6C:C7:E2:48:DA:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/ca8cd2f8-71f8-3510-b90d-cdabc9d8cc3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:23:7F:AE:7E:77:C0:02:5D:F9:30:F1:FC:46:FC:5E:1E:84:09:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/418526d5-2aa2-4d2f-8cb1-5c417728a97d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.32.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:45:ef:39:89:5d:71:1b:09:a2:be:6f:dd:44:8c:a8:f6:b4:
         da:6e:a4:07:d7:ee:62:9b:c6:6d:ae:ee:22:88:e4:4d:07:67:
         04:da:04:8e:9c:d6:c1:b0:0d:82:e7:3a:3d:ec:1e:13:43:53:
         d6:c9:d7:8b:15:24:43:3a:e5:be:ca:54:d7:af:85:73:da:a9:
         fd:3f:d3:8a:95:46:71:a9:9c:5c:61:25:a3:d1:6e:55:0e:4f:
         1e:fc:de:1f:fd:2d:a6:3d:93:2b:25:48:71:ca:ed:27:a0:03:
         60:01:e5:64:3a:fe:9f:53:e2:3f:f3:6c:c6:07:99:18:a4:ad:
         43:f3:dd:58:3e:a3:d6:35:61:2d:59:25:69:f7:df:66:dc:9c:
         1d:b5:91:d1:d0:a1:8b:69:70:97:37:a7:ba:cd:d3:b4:54:4c:
         43:a7:69:34:ce:c4:38:56:65:2e:4f:ef:8b:38:bc:ce:1e:7d:
         6d:46:6e:9b:f4:e3:50:1b:c0:51:9f:93:ef:bd:33:09:a6:66:
         98:b4:62:f3:48:d3:58:20:48:f2:0e:8d:c2:a9:2b:c0:ad:f6:
         fc:f4:57:22:b9:76:55:74:9e:ae:ab:93:72:4b:07:be:59:dc:
         89:81:04:87:5a:fd:5a:2e:67:30:cb:6c:44:9a:ab:92:25:24:
         8f:3d:be:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:36 2025 by rpki-client