Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa
File:                     5cf8fa1d-c180-3677-93af-e4ff155a7924.roa (raw, json)
Hash identifier:          qUu/1yQpps6LJKhLc0klUiL2qdRpreYycK6PKvcg7sw=
Subject key identifier:   CA:47:1F:72:3E:80:5C:0C:D3:A6:91:96:05:6D:5D:FC:17:DB:7F:BC
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584ACCA651F34FFB9099E40B4B80
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     5511
IP address blocks:        196.27.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:51:f3:4f:fb:90:99:e4:0b:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=838c8da4-6e9b-45b4-99cf-1560d5726f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ce:47:c2:75:52:b9:2c:ce:bb:cc:40:5d:54:
                    dd:b4:ad:af:bf:42:c0:bd:03:08:04:15:a5:26:5d:
                    b0:1d:94:37:4b:ca:8a:34:39:2a:24:95:8a:fa:62:
                    b7:42:19:34:f7:72:94:a2:be:de:91:06:d1:74:06:
                    8e:09:e9:a4:be:86:fa:3b:41:b5:69:f9:c9:07:3f:
                    2d:e1:0d:c3:f0:38:62:6a:53:c1:4d:11:ab:c3:79:
                    b5:0c:8b:62:89:b5:96:e3:74:49:3c:d1:9c:41:43:
                    40:29:9b:f0:9d:3b:71:f8:75:89:fb:91:fe:07:5b:
                    e6:52:de:6e:a5:f7:68:8b:d9:c3:87:ea:39:21:51:
                    7e:db:44:d7:3f:ef:07:c5:50:e3:a5:6e:4a:1d:dc:
                    32:d2:ae:07:60:71:33:22:39:db:20:f3:ef:7e:ff:
                    06:06:3d:98:79:22:2c:fa:d2:fe:2f:7f:bb:e6:62:
                    72:c5:14:60:ff:24:5b:57:f3:8d:d8:12:82:6d:b0:
                    3a:4d:e2:57:f4:cb:3e:cb:b2:61:25:58:fc:3d:cf:
                    30:56:9c:7c:41:7b:49:56:b4:20:d0:79:d2:33:1b:
                    02:bb:58:94:7d:54:fe:2a:d5:81:7b:fb:f2:aa:a8:
                    97:8e:7a:1a:53:8c:7c:60:82:de:80:88:9a:b6:f7:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:47:1F:72:3E:80:5C:0C:D3:A6:91:96:05:6D:5D:FC:17:DB:7F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/5cf8fa1d-c180-3677-93af-e4ff155a7924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.27.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:b1:b0:ec:c3:f8:3d:e4:9b:65:10:99:7f:5f:25:08:9d:02:
         80:1c:4c:77:dc:e1:d0:e2:c5:6b:eb:f5:2c:1d:7e:80:bf:b5:
         d2:47:e4:4d:88:de:31:df:9f:92:f9:e6:c8:68:1b:57:89:85:
         a2:a9:37:00:ce:72:ec:76:6a:bc:6c:ef:f0:8f:38:29:dc:47:
         68:57:83:77:7c:37:3f:d2:87:e2:33:43:70:ab:a0:68:84:aa:
         a6:5c:89:23:82:e2:0a:89:d5:02:03:b3:18:9f:46:77:c8:ae:
         f9:c2:6f:d1:9e:71:4d:ce:e4:9b:90:43:60:7e:dc:77:3e:2d:
         1b:eb:b1:52:81:ff:58:dd:c9:ec:c1:d1:11:f2:de:de:a3:f4:
         db:23:96:50:f2:8a:24:3e:0e:fe:88:4a:4c:d3:eb:e6:10:04:
         9d:d2:8a:9e:d0:ed:72:89:62:7a:46:99:70:6c:08:5b:e7:21:
         a3:27:b4:af:00:cc:e8:c3:28:1d:d3:9a:40:c4:27:a7:4e:c0:
         bd:bf:55:fb:6a:0a:eb:52:7b:20:8f:8f:d9:50:21:18:2a:0d:
         9d:5f:e4:40:43:fb:71:c7:89:70:b6:98:47:83:9b:f6:79:77:
         4d:7c:08:07:c6:a4:35:9b:b0:50:f5:3b:cc:37:3b:f4:eb:56:
         2a:ea:a7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:52:39 2025 by rpki-client