Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/027bf517-b491-3c25-89b0-e629b879ba32.roa
File:                     027bf517-b491-3c25-89b0-e629b879ba32.roa (raw, json)
Hash identifier:          qIS13holIMfnxyGw7i6rWgNf8tJoBD3p5Y0+zCZNwik=
Subject key identifier:   36:FD:83:89:AF:B6:FA:13:BE:A0:1E:F9:F2:06:B7:6A:4E:0D:7B:57
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F43285849F17FC74538F7EFD939C69B00
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/027bf517-b491-3c25-89b0-e629b879ba32.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     54004
IP address blocks:        47.19.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c7:45:38:f7:ef:d9:39:c6:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=a29e2cdc-decf-4904-9883-568215a936e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:61:1a:34:45:b3:42:ff:6b:77:ef:6b:d2:8e:
                    7e:66:74:8b:93:75:6d:28:9b:10:ad:69:0f:5a:b4:
                    24:b2:dd:3b:20:95:36:80:f6:f5:80:9d:d7:b2:34:
                    2f:f1:a1:c6:ad:7d:90:40:59:88:9d:3f:b1:ba:4d:
                    04:92:05:19:53:81:d1:96:98:fb:b2:ff:27:f4:2b:
                    3c:2c:bd:03:de:35:a4:b9:4a:c7:4c:53:6c:9e:c7:
                    14:b9:1e:d1:05:d8:ca:f4:fc:7e:23:d9:30:93:4e:
                    0e:9f:11:c2:aa:b8:bf:28:dd:da:71:11:e0:05:fa:
                    76:c8:7d:e1:08:96:43:b4:7e:bd:33:c4:30:4f:8c:
                    73:72:15:69:79:96:1b:6c:c2:b4:da:b7:fb:7f:48:
                    1c:45:c1:d8:6e:30:ef:4b:13:19:b1:c9:25:e9:00:
                    bd:3d:8e:95:9c:2c:da:2d:a0:87:a1:26:71:bb:ef:
                    f3:af:73:e4:47:17:37:08:75:2c:42:e4:4c:8b:c9:
                    ab:7b:30:96:a4:d4:c5:83:60:5e:8e:1a:9a:50:4b:
                    63:a8:1b:4a:35:9c:31:f1:9f:37:88:3a:f9:53:81:
                    8e:29:55:ab:f1:01:c2:b7:d5:e0:ca:21:0f:54:81:
                    48:b4:39:e6:0f:17:8f:01:e1:f8:84:38:33:fc:9a:
                    da:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FD:83:89:AF:B6:FA:13:BE:A0:1E:F9:F2:06:B7:6A:4E:0D:7B:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/027bf517-b491-3c25-89b0-e629b879ba32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:0a:51:65:4c:42:83:98:aa:8a:12:6e:7d:89:f7:0f:03:e5:
         0f:76:68:8b:aa:4e:df:fd:a1:e5:d5:50:c2:be:c3:84:6c:ff:
         07:ef:d2:85:4c:31:83:93:41:25:b4:55:31:7b:9a:5f:8d:29:
         a0:4c:34:fd:3a:db:64:e4:c3:72:64:c3:aa:3c:5a:10:16:b2:
         1b:16:35:bb:74:b9:ea:33:f9:03:7e:31:bc:25:99:a7:0e:75:
         ba:85:37:c2:23:4b:1c:4b:7a:c1:c4:ec:07:f7:b9:8a:7f:d7:
         4e:90:b5:cf:a5:08:8a:ea:6e:7b:99:00:3c:7e:31:1c:65:57:
         e8:07:98:ee:fa:5e:d6:5c:6c:68:2e:84:7f:7d:54:8f:72:0f:
         b2:6b:7c:d8:26:6d:17:05:3b:32:65:12:ab:80:d6:43:f7:5f:
         fc:cb:8a:b4:8b:37:ad:9e:91:01:5e:67:36:19:fc:fc:02:0d:
         d3:cb:0c:59:1a:34:83:0c:ec:f0:df:43:13:69:48:6a:a8:ee:
         14:0c:f8:e9:4e:46:37:89:71:f6:af:5f:02:77:c8:fe:45:a7:
         08:be:e1:e4:b1:aa:32:fd:bd:db:d4:bd:82:b3:e7:15:e4:93:
         cd:fb:96:1f:fc:d4:fc:bb:46:4f:d0:83:1e:2f:af:a0:9e:08:
         f1:1e:45:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8dFOPfv2TnGmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDU0NmIzZWUtMWYxMS00NTI1LTg1NzYtZjIzOGExOWZi
N2JhMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
YTI5ZTJjZGMtZGVjZi00OTA0LTk4ODMtNTY4MjE1YTkzNmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWEaNEWzQv9rd+9r0o5+ZnSLk3VtKJsQrWkP
WrQkst07IJU2gPb1gJ3XsjQv8aHGrX2QQFmInT+xuk0EkgUZU4HRlpj7sv8n9Cs8
LL0D3jWkuUrHTFNsnscUuR7RBdjK9Px+I9kwk04OnxHCqri/KN3acRHgBfp2yH3h
CJZDtH69M8QwT4xzchVpeZYbbMK02rf7f0gcRcHYbjDvSxMZsckl6QC9PY6VnCza
LaCHoSZxu+/zr3PkRxc3CHUsQuRMi8mrezCWpNTFg2BejhqaUEtjqBtKNZwx8Z83
iDr5U4GOKVWr8QHCt9XgyiEPVIFItDnmDxePAeH4hDgz/Jra+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDb9g4mvtvoTvqAe+fIGt2pODXtXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2
YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4YTE5ZmI3YmEvMDI3YmY1MTctYjQ5MS0z
YzI1LTg5YjAtZTYyOWI4NzliYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDU0NmIzZWUtMWYxMS00NTI1LTg1
NzYtZjIzOGExOWZiN2JhLzA1NDZiM2VlLTFmMTEtNDUyNS04NTc2LWYyMzhhMTlm
YjdiYS5jcmwwHwYDVR0jBBgwFoAUS2BVW9iQXvtZnH3Rgkxp+tbjJ2UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4
YTE5ZmI3YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALxPHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIKUWVMQoOYqooSbn2J9w8D5Q92aIuqTt/9oeXVUMK+w4Rs/wfv0oVM
MYOTQSW0VTF7ml+NKaBMNP0622Tkw3Jkw6o8WhAWshsWNbt0ueoz+QN+MbwlmacO
dbqFN8IjSxxLesHE7Af3uYp/106Qtc+lCIrqbnuZADx+MRxlV+gHmO76XtZcbGgu
hH99VI9yD7JrfNgmbRcFOzJlEquA1kP3X/zLirSLN62ekQFeZzYZ/PwCDdPLDFka
NIMM7PDfQxNpSGqo7hQM+OlORjeJcfavXwJ3yP5Fpwi+4eSxqjL9vdvUvYKz5xXk
k837lh/81Py7Rk/Qgx4vr6CeCPEeRVM=
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:13:41 2025 by rpki-client