Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa
File:                     32b7203d-9659-3b14-bb18-4e5cd1159b83.roa (raw, json)
Hash identifier:          /p//ZULtd9viwR1hHG6oV6LKt7MwugEdGL+pZm+xg0k=
Subject key identifier:   3B:FE:DD:E7:B1:51:8D:3E:34:8C:12:7B:79:61:B1:27:F9:74:1B:5B
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F43285847CFD4A723CDFAB8346E69F900
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     40493
IP address blocks:        216.37.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:a7:23:cd:fa:b8:34:6e:69:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=bd81c141-122a-43ee-8b9f-ae116769d94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:08:fa:90:c4:c7:fd:e1:58:68:1a:f2:5d:
                    20:46:d6:91:fc:86:3d:04:8c:2e:24:52:4a:80:1d:
                    61:1c:08:03:96:d6:72:f0:b2:6b:35:b6:19:bc:d3:
                    21:33:5d:9a:fa:67:74:e8:30:27:9a:e6:7f:8c:4f:
                    dc:7b:5a:32:a6:3f:26:a5:82:26:03:9a:c9:5b:ab:
                    ef:7d:48:52:e0:07:fc:ec:24:14:14:ae:5b:94:e3:
                    c5:d2:3a:5f:44:77:4d:3a:27:fe:29:bc:de:8e:57:
                    8a:ac:e6:4e:e0:fe:5e:5a:fb:1a:33:f3:d1:29:bb:
                    40:1f:4d:da:9c:05:5a:c0:65:35:64:35:37:17:cf:
                    63:ac:2b:9f:6a:a4:e9:a2:03:36:af:48:bc:da:57:
                    06:d1:82:6b:1f:fa:c9:0e:03:a0:02:40:28:be:80:
                    7b:96:68:46:78:2d:a7:88:95:2f:6c:d4:f4:86:cc:
                    06:be:b8:85:3d:6a:00:d5:3b:99:ef:b9:76:90:cc:
                    31:c3:cc:85:86:0e:2d:f8:c3:f3:98:30:eb:a6:a8:
                    78:76:44:4f:4a:dd:3c:5e:8c:f2:2f:03:46:21:ef:
                    57:d2:65:6e:fe:be:84:02:ec:9e:60:f2:82:b6:22:
                    bd:25:a8:ea:ad:1c:78:8b:4d:21:cb:4b:c2:e8:2d:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FE:DD:E7:B1:51:8D:3E:34:8C:12:7B:79:61:B1:27:F9:74:1B:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.37.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9a:93:57:61:1e:61:62:79:e4:4b:94:8b:da:03:6c:d0:0e:
         39:00:1c:50:19:a2:89:61:31:e1:20:a9:25:48:24:e8:0c:1c:
         64:d5:64:87:bc:11:0a:38:41:14:b6:10:c6:7d:a7:08:5e:20:
         7f:de:c3:e8:ae:b0:ae:15:db:d4:37:75:6c:ce:d2:db:3b:0a:
         18:63:93:22:10:40:ba:a1:f3:33:82:2a:07:81:fb:d3:80:a3:
         5e:b6:c2:2d:35:47:16:bf:f9:2a:8d:64:95:05:dc:e1:0b:0c:
         1a:6b:1a:cf:54:80:bf:ba:bb:ce:2a:82:1e:b0:64:00:13:f8:
         0d:2d:12:0d:00:0c:97:cc:23:7b:88:19:0d:01:76:d6:b8:15:
         6f:6a:43:df:08:8a:b5:2a:a8:d3:88:74:e7:60:4b:d4:bc:d6:
         68:7b:2a:d4:fb:ea:f7:c2:5c:d3:03:3e:5d:25:71:84:dc:03:
         a7:60:df:7f:8c:56:3d:d6:8c:43:98:a7:f8:7f:c8:cb:29:ec:
         14:9e:26:8e:a1:70:7b:e9:28:a1:48:9a:b4:ce:a3:18:c0:74:
         bd:85:00:20:b8:29:02:cd:42:19:ff:ad:bf:1a:df:c0:46:08:
         d6:73:b2:4b:7e:0c:3b:8a:33:4e:bf:39:ef:f5:3c:20:06:2a:
         f6:8a:cb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:31:29 2024 by rpki-client on console-ams.rpki-client.org