Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/1fd7258e-feec-301d-af72-6ed4e679e267.roa
File:                     1fd7258e-feec-301d-af72-6ed4e679e267.roa (raw, json)
Hash identifier:          WqF3uVuwnVxC3J7dcu/jHxAY0wQLuzMS+OQ3pi3y7GI=
Subject key identifier:   B2:8D:7D:CD:79:6D:D8:58:51:C5:1E:3A:A6:45:48:0F:4E:E3:51:96
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584A119AA7B2F04D1D786FA83640
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/1fd7258e-feec-301d-af72-6ed4e679e267.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     53482
IP address blocks:        47.19.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:a7:b2:f0:4d:1d:78:6f:a8:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=4c24f91a-e16c-4148-805a-4d4788c08e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:40:4e:83:29:46:16:d3:fb:93:b8:eb:0f:a9:
                    34:8b:20:f5:e5:84:cf:ff:89:e5:cd:18:f4:3d:5b:
                    99:35:43:0a:7d:35:da:6a:a6:c9:c6:c9:86:88:4e:
                    7f:78:f9:f0:c1:f2:29:11:35:a8:c6:e9:a2:70:7c:
                    01:d7:ab:dc:22:ef:7a:5d:d8:d4:b3:d2:83:36:b1:
                    25:1b:16:2e:fb:fe:24:a8:bc:99:0f:22:fa:d2:ed:
                    3d:11:72:51:65:8c:32:62:33:e2:35:2a:5c:89:4b:
                    51:df:55:f3:a9:ac:39:f2:f9:c8:b4:c1:8c:b8:c7:
                    8d:eb:be:76:9b:db:49:62:69:ca:ad:d3:6a:dd:e7:
                    f0:dc:29:da:70:e8:65:8d:dd:0e:fe:fd:7c:1d:ca:
                    9b:8b:e6:c0:69:21:fb:90:cc:53:6b:69:b5:10:01:
                    56:18:ad:0d:7e:d8:57:0c:bf:9c:1b:4a:34:d4:cb:
                    07:51:fe:4c:de:12:7b:e8:2b:ba:5d:99:27:fa:d9:
                    d3:61:de:5b:c3:55:25:de:0d:a8:21:6e:2b:0c:f0:
                    38:28:6e:47:85:4b:2e:d3:b8:a6:8c:f5:19:06:de:
                    12:54:db:b5:2f:21:30:a5:c9:09:c6:fd:1e:91:b1:
                    a9:24:71:6b:0f:8f:0c:6f:72:f2:83:38:9a:8d:ec:
                    a4:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:8D:7D:CD:79:6D:D8:58:51:C5:1E:3A:A6:45:48:0F:4E:E3:51:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/1fd7258e-feec-301d-af72-6ed4e679e267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f8:07:ef:d8:28:96:bd:f6:e6:74:15:f9:3f:31:40:5f:4c:
         bd:7d:18:b2:a7:f6:50:b6:03:35:a9:a7:33:f9:70:05:85:7b:
         3b:c9:58:d4:59:bc:fa:02:4a:fa:b8:80:09:76:83:c1:90:ef:
         62:f0:a9:89:08:03:cf:85:13:ad:bd:52:af:ad:05:0e:6d:d1:
         94:e6:85:f3:5f:4c:b2:97:d7:c6:49:78:b3:08:95:04:29:78:
         e2:4b:07:fc:6b:5a:e1:a4:14:c2:6d:d5:5b:4a:f3:fb:80:18:
         38:0d:34:c5:04:8f:20:e8:87:b6:38:b1:12:ef:da:45:5d:a3:
         7d:c4:bc:19:2d:10:df:0b:53:3e:f4:99:42:5e:08:4c:a3:23:
         e2:d8:88:11:4b:35:16:a3:3e:cd:22:84:e1:7e:c9:63:f4:57:
         ed:1d:cb:18:5e:82:c0:61:94:eb:3c:a6:91:03:7f:20:fb:65:
         80:b8:c1:1f:a0:64:72:f0:ff:ff:b9:d7:e5:eb:1d:86:b5:49:
         57:bd:73:f3:0e:a5:87:9d:a0:c8:b1:24:0d:f5:25:de:5a:9e:
         6f:80:2e:5b:55:1c:a7:ff:40:27:87:40:23:a5:7d:32:1b:20:
         60:6a:a9:9b:a4:fa:48:29:52:65:f2:8b:5f:3a:c5:d1:a0:5a:
         c5:dd:e4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:07:21 2025 by rpki-client