Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa
File:                     5cf8fa1d-c180-3677-93af-e4ff155a7924.roa (raw, json)
Hash identifier:          9uZZlHRbpofFM+sEF9c7mXp7ebMu6POJsIazG6ibviY=
Subject key identifier:   95:9D:41:ED:8D:2F:4A:72:C3:6D:2A:26:FB:21:27:FE:72:B4:AB:5B
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F432858482D5A8F3A3E38038EF6124B00
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa
Signing time:             Thu 12 Dec 2024 02:00:38 +0000
ROA not before:           Thu 12 Dec 2024 02:00:38 +0000
ROA not after:            Wed 12 Mar 2025 01:00:38 +0000
asID:                     5511
IP address blocks:        196.27.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2d:5a:8f:3a:3e:38:03:8e:f6:12:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Dec 12 02:00:38 2024 GMT
            Not After : Mar 12 01:00:38 2025 GMT
        Subject: CN=8883fc6f-0308-4a7b-a1f8-4bbabef9f6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:3f:95:6b:fe:fa:51:56:f6:6a:b9:ac:03:
                    0c:75:90:36:47:ea:9a:79:84:48:d1:87:85:4c:90:
                    7d:44:11:15:e8:55:ec:f5:73:a7:94:59:66:9b:9c:
                    8f:65:7f:47:9b:27:7c:70:e1:83:9c:76:2c:bc:53:
                    01:6f:a9:7c:4b:0a:bc:79:bd:9e:e4:7d:c6:4c:ba:
                    7b:ba:30:3b:52:e5:69:c4:3d:35:7f:1c:f6:4b:24:
                    50:6f:15:5a:06:c7:4d:2b:49:e7:92:b9:94:ff:05:
                    d9:f6:33:64:e9:59:1f:ee:59:5a:8b:e9:e9:17:77:
                    e9:97:6d:fe:80:90:d2:1c:79:e2:7d:d1:db:07:d4:
                    d7:57:1f:d1:86:45:5e:b8:69:3e:25:38:8e:ca:53:
                    b6:72:0f:a2:0c:f0:4e:ca:15:4d:46:ed:a0:a4:76:
                    15:27:37:23:2f:bd:4a:5d:03:73:ae:4c:fc:8d:63:
                    09:e5:a9:f4:03:1f:1c:b4:79:29:81:32:ee:65:7f:
                    8e:54:3e:42:e5:2d:9c:60:f5:d4:33:c1:a7:6a:6d:
                    9f:6d:30:69:79:b0:9d:41:72:c2:dd:e8:db:9e:18:
                    26:9c:8e:09:f5:f8:7c:de:10:ea:be:81:b2:8c:aa:
                    e5:65:83:1c:72:3f:d7:87:5c:f9:bc:81:a6:bd:77:
                    78:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9D:41:ED:8D:2F:4A:72:C3:6D:2A:26:FB:21:27:FE:72:B4:AB:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.27.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ce:e6:9d:9c:23:48:8d:fa:fa:f4:ed:32:ba:30:25:4b:af:
         4d:a7:f6:d3:80:b0:f4:c0:02:fd:d9:ad:9e:0d:bc:f0:38:35:
         d2:7e:f0:ed:af:ff:61:08:c7:c8:b0:da:10:e2:ab:f3:be:ed:
         ed:aa:1c:e9:d0:aa:c8:0a:08:28:50:b2:5d:6c:0b:09:9e:b4:
         de:8c:f3:43:de:5b:9a:f8:04:b8:49:c9:dd:c6:ca:d8:ba:d6:
         fc:4b:ff:3c:6c:b8:45:77:24:22:b1:d8:f7:e5:de:42:2a:06:
         eb:62:25:05:21:ab:67:33:9f:20:95:e0:bd:86:fc:a0:88:d9:
         1e:6d:d6:72:6f:ba:87:86:3e:35:60:6d:b3:f1:fb:22:31:5d:
         bd:3b:6b:7a:ca:10:24:fd:5a:0e:55:26:27:88:99:de:50:fc:
         af:cf:e8:f4:e5:d9:c4:93:38:50:5f:ce:59:23:9e:af:8c:af:
         eb:d6:54:d2:f1:c8:fc:87:40:15:2e:d6:77:c2:66:8c:27:c0:
         ce:50:c1:c9:8a:5c:a5:5e:05:2f:82:10:e8:42:f8:de:fb:2d:
         ba:f8:98:aa:34:8c:81:d5:0b:a3:33:01:df:33:0d:05:96:57:
         a6:ad:dd:1d:14:c8:c4:0b:ee:a7:ca:ba:27:78:28:f8:15:40:
         49:08:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:49:18 2025 by rpki-client