Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa
File:                     32b7203d-9659-3b14-bb18-4e5cd1159b83.roa (raw, json)
Hash identifier:          iLGDCsegBZKonJdPaESj+UjRt9pQDpFDj7cC25z7ZfI=
Subject key identifier:   7A:03:31:4B:E8:CB:09:40:AC:90:7D:38:8E:BA:8C:16:CC:2A:9A:EE
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F4328584A6DBB406F1224F0CB0FB7A940
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     40493
IP address blocks:        216.37.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:40:6f:12:24:f0:cb:0f:b7:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=36534334-f5d2-47d6-a30f-7365f11462ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:10:82:6f:d0:52:dd:1d:2d:23:69:81:4a:
                    6f:10:f3:e9:9e:bf:c6:c1:3f:93:eb:03:71:f8:20:
                    64:a3:17:dd:4d:02:56:66:74:5e:ff:d5:db:94:3b:
                    a4:47:73:33:e9:ea:ae:72:e7:b4:e1:12:58:78:2c:
                    78:f0:89:30:5a:68:91:34:c8:7a:ae:fc:0b:05:b4:
                    ee:28:67:2a:4e:19:65:f9:46:e0:4b:59:81:5f:f4:
                    5c:12:46:b3:3d:d5:6c:84:5d:f4:4a:d4:3c:ef:ec:
                    a1:94:21:95:21:c7:1c:12:e4:bb:1c:52:89:2b:46:
                    46:7a:2e:d6:bf:3d:9c:71:d9:bd:f0:8d:8b:8b:3c:
                    70:1e:50:03:b3:f0:c5:ab:f2:df:8d:0b:2e:e6:4d:
                    10:ff:e3:13:91:5d:78:d3:f1:0f:4b:ad:8e:bc:41:
                    6c:5e:2e:1e:01:9a:af:4a:20:58:dc:eb:d3:d7:4b:
                    67:ff:6b:58:3f:7f:fe:18:6b:cd:0c:ed:f1:18:50:
                    21:7c:28:c9:a0:89:a0:92:32:a9:b2:f4:66:04:bb:
                    49:5d:7d:7a:4a:fe:f9:cb:7e:3a:7d:92:ee:b1:1e:
                    b0:9b:7d:e4:9a:4c:bf:8a:77:18:92:db:54:2f:ce:
                    00:d2:4b:ed:f4:c4:9a:49:59:8d:06:a5:44:30:0f:
                    c4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:03:31:4B:E8:CB:09:40:AC:90:7D:38:8E:BA:8C:16:CC:2A:9A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.37.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d5:53:14:df:75:d8:cf:c3:e7:04:66:c4:40:53:94:eb:a5:
         83:f7:a7:48:81:ce:70:ee:14:39:81:40:62:db:b5:3c:5f:32:
         74:d0:40:98:76:ff:cd:61:31:7f:de:98:0f:df:eb:53:4a:c3:
         d5:96:1c:53:92:10:67:13:64:67:ad:9b:5e:00:98:ae:e6:7b:
         e9:d6:9b:c1:93:2d:e6:5c:56:1d:66:dd:dc:bf:2a:22:a7:c5:
         54:e0:1c:88:53:a7:63:db:63:34:73:9b:a5:85:17:bc:39:57:
         88:9e:90:c9:8e:f6:fe:f9:cc:40:70:f5:d9:20:8b:4b:33:71:
         1f:5c:f2:05:fc:5b:34:9e:c1:65:ff:ae:bf:c2:61:99:d1:e6:
         b5:a8:fc:01:3d:2b:cf:1e:9e:25:a6:5a:6f:b4:f4:d0:9b:b6:
         40:39:a6:30:ec:fd:d2:ad:de:06:62:d3:8f:e9:e2:f7:30:23:
         ed:97:2f:3d:e6:ba:53:5d:8e:66:f6:ae:67:54:31:d3:30:71:
         31:91:31:d4:2d:66:a9:54:5d:df:08:1a:c6:74:c6:64:e6:d6:
         02:4a:55:c8:8c:56:ca:d4:d5:cc:d6:52:99:d3:a7:36:72:7d:
         35:f0:38:69:85:b1:88:cc:72:87:a6:df:36:2d:86:99:97:b9:
         f2:ad:53:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 05:01:50 2025 by rpki-client