Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa
File:                     32b7203d-9659-3b14-bb18-4e5cd1159b83.roa (raw, json)
Hash identifier:          ZOSoYpMrnzSyphevyYHeQcns3s6rmu+cgUUAkufEmrI=
Subject key identifier:   64:DF:31:A7:C8:2C:FF:B3:FB:AA:92:0C:00:A9:BC:59:E6:21:9A:37
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F432858498E64831955D291ADD36F7B80
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     40493
IP address blocks:        216.37.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:83:19:55:d2:91:ad:d3:6f:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=80f0c01a-cbf0-4de2-b28e-45bb091fdfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3f:0e:7a:d0:44:21:8f:dc:1d:75:8e:d5:72:
                    b4:c5:30:c5:77:a6:ed:db:22:1c:fe:b1:90:95:a6:
                    b1:60:1d:3c:5d:12:e3:94:0a:6b:98:d3:09:26:18:
                    90:5b:31:aa:60:1c:bc:3d:27:2a:70:60:79:df:06:
                    f0:fd:df:10:71:03:b6:6b:c2:76:e2:33:4b:42:3f:
                    3c:96:2e:26:a0:73:eb:a2:6c:cf:b4:6f:2c:da:d7:
                    6d:cc:16:d5:6a:27:2f:02:1c:b9:63:7f:a1:be:2b:
                    9d:c9:89:c5:71:2a:34:f3:fd:eb:84:55:ca:01:a2:
                    73:fb:b3:f3:75:a2:27:2d:7d:c1:cb:e1:4e:64:b0:
                    f6:35:ba:72:a0:9a:3c:53:61:49:ee:9b:8d:4d:81:
                    77:67:0f:6c:b4:e4:e0:7b:db:47:de:91:0c:e2:1f:
                    c7:89:cd:63:e5:ac:08:34:45:32:11:6b:79:63:ac:
                    d8:7c:44:f4:78:ab:79:0d:b8:22:aa:96:c2:e5:17:
                    5c:25:92:37:05:a6:d5:c2:34:06:f6:64:35:36:f9:
                    9d:8b:43:3e:8e:79:fe:60:bd:45:7a:bb:a0:37:66:
                    59:5d:3c:96:e4:55:b7:8d:b3:80:24:45:92:75:30:
                    cf:0c:aa:7c:59:cd:4d:d4:64:ce:2e:c5:23:e6:7d:
                    ce:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DF:31:A7:C8:2C:FF:B3:FB:AA:92:0C:00:A9:BC:59:E6:21:9A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/32b7203d-9659-3b14-bb18-4e5cd1159b83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.37.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f1:eb:e7:97:00:70:77:88:4b:fa:a9:5a:d6:b6:62:5d:2e:
         60:e6:65:ae:e3:ec:74:59:a5:21:2f:2c:1d:df:1d:b4:7e:b3:
         e3:2c:5a:25:be:06:a1:cd:40:1f:92:88:b2:0d:e7:2a:f6:7b:
         04:1e:2e:e8:8c:b8:51:ca:ab:57:37:92:5a:f8:a0:15:59:e7:
         a3:68:ee:85:e5:53:fb:08:af:ad:73:bd:8d:6d:48:f4:be:9d:
         36:c6:a2:06:ae:c9:cc:ea:46:f4:ce:44:a9:be:2d:b2:20:ba:
         bb:ea:0e:35:91:e4:d2:9a:8a:0e:ff:14:70:44:b2:c8:d3:97:
         31:bd:8f:d3:cd:03:fc:94:46:77:d8:2b:96:45:c0:db:7b:ab:
         36:38:a9:3d:df:58:21:0c:5d:6d:1b:ff:d9:be:d7:23:4f:ba:
         9b:2e:ef:b5:be:83:6d:94:f3:b8:6e:2b:69:c7:df:73:72:91:
         36:c5:d1:dc:a0:f5:3e:86:d0:93:af:1a:77:c8:17:fc:fd:74:
         33:08:18:69:8c:00:fc:ca:23:7a:3c:3e:20:aa:c9:e4:2e:2a:
         3c:3f:87:32:96:37:f0:c0:c9:de:bf:da:25:40:83:02:95:ca:
         9b:2b:06:6f:fc:18:15:4e:1d:cb:cd:8b:91:83:99:89:2e:89:
         b9:53:91:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:28:16 2025 by rpki-client