Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/7a14b93c-aca4-3f46-a736-4c3d1b62bd56.roa
File:                     7a14b93c-aca4-3f46-a736-4c3d1b62bd56.roa (raw, json)
Hash identifier:          7CHSGIEinogPIuOCnOGoQh22aqt3qIJ8p+w6btXK8I4=
Subject key identifier:   50:E0:58:9F:EF:67:27:BE:31:BC:47:FF:C0:23:2C:D7:91:18:B5:C4
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584BB2F7C43D09FBDA8CA2E38E00
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/7a14b93c-aca4-3f46-a736-4c3d1b62bd56.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     21656
IP address blocks:        47.19.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:c4:3d:09:fb:da:8c:a2:e3:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=8e923947-0abf-4aba-9f96-b323d33b6be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:e4:cb:cf:3e:37:5a:12:d5:f6:86:22:46:
                    64:38:1f:1a:f4:2d:78:d4:4d:e2:ab:c6:cc:f5:2d:
                    5d:12:cc:7c:1e:a7:bc:6a:20:38:3c:c8:f7:75:72:
                    64:1b:ab:ed:8e:66:da:15:69:04:91:21:5c:28:6e:
                    d1:28:ac:07:54:cf:84:05:8d:2b:df:7d:1f:dd:8d:
                    b6:c4:ed:54:91:34:6f:99:4c:0f:1c:b1:50:5b:d1:
                    1c:86:b5:c8:f7:31:cd:28:2c:58:14:00:3b:67:72:
                    95:f5:cd:f3:f2:81:b3:64:c6:ab:00:ff:cb:04:a8:
                    39:eb:01:fa:01:33:3c:e2:a3:a6:c6:50:94:5e:20:
                    9c:6e:4e:85:5a:8b:15:61:f2:94:ac:81:6c:f8:52:
                    de:df:d1:94:18:9f:d8:cb:0d:18:05:f2:69:ef:b7:
                    2f:c9:e2:b5:46:a3:58:c6:db:1e:43:d9:0d:47:57:
                    5c:6b:de:a4:ea:e8:d6:43:af:d9:e9:09:6c:07:15:
                    a8:03:9a:65:1d:6c:51:dc:d9:10:ba:2c:fc:cb:d0:
                    5b:d0:c1:95:1c:3f:83:61:b8:21:7b:05:15:b1:ae:
                    84:d3:e1:e0:f6:ce:32:f7:fa:4e:54:21:86:6c:fc:
                    58:39:49:70:92:2b:e8:2f:11:cc:44:93:a7:81:6f:
                    33:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E0:58:9F:EF:67:27:BE:31:BC:47:FF:C0:23:2C:D7:91:18:B5:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/7a14b93c-aca4-3f46-a736-4c3d1b62bd56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:4c:55:ac:04:c8:a9:d7:99:04:4f:1b:b4:4b:4f:0a:ce:6c:
         de:b9:44:c2:71:77:ce:35:83:ae:dd:86:17:9f:38:2f:c7:61:
         5f:9e:c9:9c:cc:8a:73:eb:40:c2:e1:78:1e:4c:4a:58:ff:ae:
         31:7f:9e:17:b0:18:d3:b0:0e:8b:01:9c:2b:8f:2e:b7:04:d9:
         28:2d:9e:68:d8:ac:4d:0c:e5:48:fe:96:c9:92:f8:ef:4a:81:
         45:7f:5b:7a:56:55:43:b5:df:94:40:29:69:ff:65:a9:4a:83:
         50:49:bc:c6:d3:17:6c:bb:f3:9b:22:10:d4:c1:59:22:19:ca:
         bf:27:65:0f:75:d8:cb:b4:3c:fc:d9:53:72:f5:ab:d3:bc:12:
         54:be:8b:10:de:fa:b0:30:e3:ed:ab:64:97:6f:36:3e:81:c5:
         6c:bb:f7:b4:61:89:43:51:66:62:39:ad:1a:97:3c:61:74:32:
         76:07:13:ca:e8:65:25:fa:d4:ed:42:9a:64:bc:f8:f9:29:da:
         6b:6c:6e:8c:3f:b3:1c:40:36:c8:83:2b:08:4d:de:9a:a0:ef:
         1d:ff:77:5f:02:60:33:b8:b3:bc:71:76:91:15:4a:2a:76:13:
         98:77:56:99:88:57:65:62:4f:f4:4c:ec:02:08:c9:31:38:da:
         64:32:cc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:17:27 2025 by rpki-client