Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/49249c03-cb9b-399f-a21b-87c0626554b1.roa
File:                     49249c03-cb9b-399f-a21b-87c0626554b1.roa (raw, json)
Hash identifier:          6fAbwSulf5zA0IJeObhHJ0XO5kCKWmX67VpwembK13A=
Subject key identifier:   BE:40:87:DB:87:F5:46:C3:B7:D9:F8:2E:91:E8:AD:2B:D7:7F:58:41
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584AB91B83D43D385FA3287304C0
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/49249c03-cb9b-399f-a21b-87c0626554b1.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     10584
IP address blocks:        47.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:83:d4:3d:38:5f:a3:28:73:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=bdb7439f-0e9b-4a29-b23c-463aa794c0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:09:87:36:55:4f:d8:05:3a:e0:cb:cc:a8:9a:
                    12:87:98:81:c8:92:14:ff:5b:01:14:54:76:ca:d9:
                    83:54:6b:0d:28:ae:08:a1:89:81:51:fe:9a:ef:1a:
                    22:08:f8:b5:17:e7:86:b3:a5:fc:a4:52:73:53:3e:
                    ef:2e:09:a8:3d:51:86:28:56:40:e3:3d:27:5f:57:
                    a2:89:38:a7:29:c4:c9:8d:7e:c3:fd:a6:ef:a9:5e:
                    0e:4d:c2:c4:4f:27:bb:56:db:bd:e0:d5:21:6f:3b:
                    af:8d:76:6f:cd:15:db:ff:59:2e:14:b6:b1:1c:79:
                    02:a2:77:d4:82:57:6b:ee:2a:51:0e:10:7a:43:f9:
                    43:96:56:ec:f7:f3:fc:9a:9c:55:7b:47:5d:c3:52:
                    e9:31:f2:87:2c:f9:b4:c8:e8:c7:00:a4:74:70:ea:
                    40:5f:2c:80:72:10:a7:4c:db:b2:19:ef:55:7f:e3:
                    75:de:37:6a:4f:06:bb:f0:c1:c1:cb:a1:80:da:c4:
                    17:6c:2b:ad:0c:31:41:6e:c3:66:d8:1b:a0:77:60:
                    37:df:ff:59:88:0b:ac:91:5d:40:de:56:a7:f3:79:
                    43:6b:47:cb:83:37:d2:49:11:34:42:b0:0f:a1:23:
                    f6:86:db:7d:33:b3:01:e8:62:59:d3:ee:82:73:3c:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:40:87:DB:87:F5:46:C3:B7:D9:F8:2E:91:E8:AD:2B:D7:7F:58:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/49249c03-cb9b-399f-a21b-87c0626554b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:67:d4:22:5b:d7:4b:e4:c6:1a:ae:a5:45:ad:42:23:aa:1d:
         5f:d7:0a:a6:d9:76:66:de:bc:75:e9:cb:c9:1b:c3:43:ff:a4:
         1b:bc:97:c1:ba:6c:c9:e3:e9:f1:85:17:1f:90:fc:b0:82:e2:
         59:4a:10:83:af:ed:8f:a7:c9:2f:9e:99:11:66:75:65:8f:a1:
         c9:7e:33:66:d9:f5:9e:9d:01:5b:3d:38:a3:d2:da:6a:6b:25:
         e1:0c:f2:49:39:f3:90:76:46:76:3a:e6:44:67:e9:c9:9e:f2:
         63:ce:a2:b4:9f:14:98:13:b9:55:f9:6d:ba:52:90:08:43:02:
         23:4d:28:97:18:ba:a1:4c:fd:69:c4:04:70:46:4a:39:c4:4f:
         1b:b6:f4:a0:9b:3b:e2:53:59:46:04:d1:0d:3d:46:d5:08:1e:
         15:7e:1b:c8:c1:c9:c5:8e:7e:e5:05:9d:23:cd:9d:b3:99:e5:
         d3:4f:67:23:c3:45:d0:10:c0:0c:44:fc:96:54:0b:16:10:f9:
         97:d8:9c:42:b5:15:11:86:a7:eb:18:0b:8c:7e:47:2b:df:89:
         48:df:b5:62:32:76:a9:7b:7e:32:5f:2c:ca:cd:2f:7d:d1:b3:
         1b:34:22:f0:aa:7a:34:80:4a:7e:d5:55:fe:51:8a:d1:18:88:
         ec:17:da:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:26:59 2025 by rpki-client