Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/38eed031-2f26-37d2-9433-38e44e47e238.roa
File:                     38eed031-2f26-37d2-9433-38e44e47e238.roa (raw, json)
Hash identifier:          p+fS3qfm3BGlJUMM5nxjDNwl57dR8tL6IyZHfL3xaSc=
Subject key identifier:   1A:65:D8:3D:E8:7A:65:7E:17:EA:FC:C7:B1:B6:12:14:C5:B7:7C:75
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F432858458DD34CAD5E1E8E8453A6D2C0
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/38eed031-2f26-37d2-9433-38e44e47e238.roa
Signing time:             Mon 15 Apr 2024 13:00:35 +0000
ROA not before:           Mon 15 Apr 2024 13:00:35 +0000
ROA not after:            Sun 14 Jul 2024 13:00:35 +0000
asID:                     51964
IP address blocks:        196.27.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8d:d3:4c:ad:5e:1e:8e:84:53:a6:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Apr 15 13:00:35 2024 GMT
            Not After : Jul 14 13:00:35 2024 GMT
        Subject: CN=bd6b5ee0-bfe1-4b1f-a617-63fb34616729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:d8:1b:8e:94:fc:4d:d5:1d:1f:b2:24:8d:
                    48:28:a6:3f:a5:b4:1b:e5:6f:1f:69:94:43:d0:4d:
                    f3:6e:20:74:2f:5d:10:d2:d7:d6:ef:2a:14:c1:08:
                    46:6a:65:20:bc:58:28:ba:e5:b9:0c:60:8c:a1:3e:
                    e0:61:70:df:f8:65:4a:a4:de:78:fc:0b:4c:49:fe:
                    3f:19:c9:16:3a:39:a9:90:05:b2:9f:c1:97:6a:9f:
                    48:26:58:ec:5a:de:3c:77:af:65:86:22:d2:1f:47:
                    76:b3:93:c1:e0:32:83:49:51:f3:c3:bc:03:b9:40:
                    50:e8:08:ff:47:36:99:08:35:06:20:9b:24:1c:e5:
                    96:50:c2:26:90:9a:3e:fd:b5:41:1f:6d:0b:48:48:
                    9c:f4:da:62:7c:92:dc:a7:cc:40:c3:1d:64:91:2c:
                    0c:6d:1d:90:49:45:26:f2:a3:16:de:83:13:2d:d6:
                    e2:5e:3a:af:2e:49:f9:56:87:54:24:77:36:87:9b:
                    57:fd:84:d5:bf:5d:68:fa:d0:bc:06:7b:86:f7:f6:
                    45:eb:c0:80:07:b4:58:5a:dd:fd:d9:75:08:9b:ab:
                    63:6f:ad:6d:b9:87:5f:4c:6c:14:13:76:de:50:cf:
                    62:36:13:c3:a2:7e:6e:14:35:43:8b:69:a0:cb:54:
                    71:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:65:D8:3D:E8:7A:65:7E:17:EA:FC:C7:B1:B6:12:14:C5:B7:7C:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/38eed031-2f26-37d2-9433-38e44e47e238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.27.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:5c:a5:9d:62:94:df:69:c2:a0:ed:0c:12:1d:ba:53:e2:32:
         e6:b7:de:25:dd:7a:76:47:e5:30:c8:8b:eb:47:b3:23:b2:75:
         9c:06:be:ac:37:e4:79:66:e1:88:20:2c:3d:2c:57:b6:2d:21:
         38:44:78:2b:a6:06:9e:40:d8:c7:77:47:eb:95:2f:56:12:d5:
         df:4d:2f:da:6c:8a:be:01:b4:ba:df:59:0b:d0:21:ee:32:3d:
         0b:57:8f:78:70:e3:f6:f7:e0:c3:a3:4c:70:e4:35:d6:6a:64:
         a3:bf:ce:a3:7c:56:42:7c:6f:e8:1e:c1:a5:d0:03:af:92:1d:
         5d:30:51:a0:fc:90:25:62:6a:be:e1:5e:06:a0:b2:d7:5f:63:
         3e:65:c6:35:82:dd:97:cb:f9:3d:60:af:81:6b:d7:ca:5a:0b:
         3c:76:33:90:fc:51:b1:50:47:de:09:ca:f7:4e:21:5b:7c:58:
         49:bc:0e:6c:16:37:76:32:19:0f:4a:d8:ef:08:f7:85:18:6e:
         f1:b0:2c:93:79:7c:ca:56:20:0e:fe:07:fc:81:a3:7e:88:6d:
         3d:18:7f:0a:41:17:23:95:c8:a6:67:d7:b8:e0:90:9c:a0:6b:
         1a:dc:97:55:5b:37:51:e3:e5:da:c4:34:3c:89:76:77:19:ea:
         3f:b6:fd:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWN00ytXh6OhFOm0sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm
ZTM3MB4XDTI0MDQxNTEzMDAzNVoXDTI0MDcxNDEzMDAzNVowLzEtMCsGA1UEAxMk
YmQ2YjVlZTAtYmZlMS00YjFmLWE2MTctNjNmYjM0NjE2NzI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi/YG46U/E3VHR+yJI1IKKY/pbQb5W8faZRD
0E3zbiB0L10Q0tfW7yoUwQhGamUgvFgouuW5DGCMoT7gYXDf+GVKpN54/AtMSf4/
GckWOjmpkAWyn8GXap9IJljsWt48d69lhiLSH0d2s5PB4DKDSVHzw7wDuUBQ6Aj/
RzaZCDUGIJskHOWWUMImkJo+/bVBH20LSEic9NpifJLcp8xAwx1kkSwMbR2QSUUm
8qMW3oMTLdbiXjqvLkn5VodUJHc2h5tX/YTVv11o+tC8BnuG9/ZF68CAB7RYWt39
2XUIm6tjb61tuYdfTGwUE3beUM9iNhPDon5uFDVDi2mgy1RxsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBpl2D3oemV+F+r8x7G2EhTFt3x1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw
ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvMzhlZWQwMzEtMmYyNi0z
N2QyLTk0MzMtMzhlNDRlNDdlMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2
NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi
ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm
MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxBsgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtcpZ1ilN9pwqDtDBIdulPiMua33iXdenZH5TDIi+tHsyOydZwGvqw3
5Hlm4YggLD0sV7YtIThEeCumBp5A2Md3R+uVL1YS1d9NL9psir4BtLrfWQvQIe4y
PQtXj3hw4/b34MOjTHDkNdZqZKO/zqN8VkJ8b+gewaXQA6+SHV0wUaD8kCViar7h
XgagstdfYz5lxjWC3ZfL+T1gr4Fr18paCzx2M5D8UbFQR94JyvdOIVt8WEm8DmwW
N3YyGQ9K2O8I94UYbvGwLJN5fMpWIA7+B/yBo36IbT0YfwpBFyOVyKZn17jgkJyg
axrcl1VbN1Hj5drENDyJdncZ6j+2/Y4=
-----END CERTIFICATE-----
Generated at Sun May 12 01:32:34 2024 by rpki-client on console-fra.rpki-client.org