Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/453e5d8c-1f70-34ea-bfd1-a2f75ec32e36.roa
File:                     453e5d8c-1f70-34ea-bfd1-a2f75ec32e36.roa (raw, json)
Hash identifier:          nCoKOyfPev5L4PE9diwx/SnVXmh6xKliLRcwnNryHB4=
Subject key identifier:   4C:6B:65:03:FC:C5:4B:69:DD:11:05:2A:41:DF:90:EF:DB:B7:37:DC
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F43285849D16502B0A04F2F6DE434F7A0
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/453e5d8c-1f70-34ea-bfd1-a2f75ec32e36.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     63378
IP address blocks:        47.19.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:02:b0:a0:4f:2f:6d:e4:34:f7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=7a015199-32c9-4885-9f78-f8f15ae53823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:51:e8:c6:31:58:27:e2:85:8f:95:6e:47:
                    d5:18:d6:eb:0a:d0:96:49:d5:6c:22:dc:af:26:17:
                    80:d9:b0:ca:d0:ca:b2:01:e8:72:31:ec:5d:d5:ed:
                    c3:0a:04:60:a5:cb:07:e7:86:c7:e7:94:a3:6e:94:
                    97:2c:03:a5:fb:3b:14:05:61:17:65:7b:03:94:34:
                    06:c5:b3:84:cf:57:a4:33:fe:aa:c5:f0:c7:1c:57:
                    aa:08:9a:ac:7a:f0:c8:c5:2e:b1:c6:0d:1e:52:17:
                    3c:22:dc:75:08:ee:61:b9:ce:09:28:2f:ac:b5:c8:
                    08:24:b3:c4:9a:58:c4:56:44:6e:9c:39:7c:ef:68:
                    a3:45:fc:68:a3:10:29:99:e0:cf:03:3c:3e:a7:f2:
                    8b:1b:25:60:0e:5d:e5:ce:bf:55:b9:9c:da:c4:0e:
                    b3:c3:fd:2a:bb:cf:59:6a:4e:9d:f0:16:58:9b:39:
                    51:38:2f:f8:5f:70:2d:3c:ea:bd:3f:a4:42:22:48:
                    3f:3e:8e:ea:09:73:c0:bb:0a:a5:a6:34:8b:23:30:
                    06:ae:cb:c8:47:c1:ab:77:44:d7:7a:24:c3:6c:4f:
                    2d:df:90:f3:41:30:5a:b2:ba:e2:c2:a6:76:76:10:
                    3b:2a:31:ea:90:07:55:4b:e2:ab:bd:7b:5e:e7:e0:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6B:65:03:FC:C5:4B:69:DD:11:05:2A:41:DF:90:EF:DB:B7:37:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/453e5d8c-1f70-34ea-bfd1-a2f75ec32e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:64:f8:94:de:63:35:59:95:c5:37:1a:ee:b3:80:d3:60:7e:
         1c:b9:e1:83:b8:15:b7:68:af:17:51:a1:80:0e:13:d6:3d:76:
         ac:8b:61:3f:37:ab:3a:5e:ef:5a:b5:af:a3:a4:14:e0:d9:b8:
         df:4b:34:26:b5:9f:fc:03:b8:89:d4:93:51:cc:65:61:40:fa:
         69:65:43:66:db:bf:91:f7:fd:1f:64:7a:c3:8b:c1:3b:44:2e:
         b0:78:3c:d4:80:40:02:60:a8:f4:a5:8c:4d:36:d8:39:3a:19:
         2e:05:0b:a9:0a:c0:c1:2e:05:bc:14:d7:73:f4:31:e2:c0:95:
         02:0b:14:67:a6:8b:fb:e1:ba:93:7a:68:ff:67:b9:a9:10:9f:
         dc:6d:a6:5b:7d:64:67:b6:41:4f:fe:2e:9d:5c:17:56:76:8f:
         ec:fd:cb:bd:95:99:ef:1c:12:70:3d:c9:b7:89:47:8b:04:0c:
         da:00:b2:04:23:79:8a:a8:71:c3:15:cc:6d:4e:98:ac:3a:72:
         22:a1:a9:8b:ef:88:4d:bb:62:92:a7:76:4a:f1:6d:92:62:55:
         4e:93:4b:27:8f:e4:4d:86:fb:08:10:4a:19:0d:6a:f7:8c:16:
         c9:fc:f5:66:69:6e:8b:de:18:0c:a3:4d:7c:08:a9:fd:ce:d8:
         ce:25:14:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:28:18 2025 by rpki-client