Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/7c85c66c-6c22-3862-b5ef-1373f96b6921.roa
File:                     7c85c66c-6c22-3862-b5ef-1373f96b6921.roa (raw, json)
Hash identifier:          duRKnlsAhFjwzg7Yuo1kEr/lQ9sWz9w2UhC5bvkPNLw=
Subject key identifier:   1A:C8:95:08:D0:6D:64:42:0B:4E:34:BC:9A:78:A8:70:34:62:8F:93
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584ABA80C5271A6577DFE2451020
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/7c85c66c-6c22-3862-b5ef-1373f96b6921.roa
Signing time:             Sun 03 Aug 2025 01:00:32 +0000
ROA not before:           Sun 03 Aug 2025 01:00:32 +0000
ROA not after:            Sat 01 Nov 2025 01:00:32 +0000
asID:                     64521
IP address blocks:        47.19.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:80:c5:27:1a:65:77:df:e2:45:10:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Aug  3 01:00:32 2025 GMT
            Not After : Nov  1 01:00:32 2025 GMT
        Subject: CN=6e9e3948-78de-4ba1-b879-a609b6487e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c9:56:2e:ea:41:09:eb:aa:39:46:a5:67:32:
                    88:72:4f:da:cb:44:59:27:48:7c:6e:6a:29:a4:37:
                    f2:41:95:aa:c1:7b:63:f9:5f:72:de:a4:71:c7:cc:
                    bf:04:96:10:95:7b:fd:d0:62:3b:e0:08:c8:96:b1:
                    9e:28:44:d2:60:e7:8d:54:b2:32:b7:48:4b:36:58:
                    a1:7d:15:45:14:3f:b8:1a:52:52:37:5d:0e:c7:dc:
                    ff:91:99:55:2b:7d:cb:5f:6b:00:81:0d:94:a9:2f:
                    88:61:5a:6d:08:27:29:a3:8b:8c:6f:d0:ab:bd:c9:
                    9f:ac:30:1a:fd:7c:d0:13:1d:a1:a2:fe:7d:6a:30:
                    47:a4:40:36:d2:a2:df:aa:17:66:47:93:54:b6:d7:
                    2c:f2:74:2f:82:85:42:6a:a1:b8:1c:9a:1d:27:55:
                    77:0e:48:e1:a3:66:b9:c7:bf:ae:79:f9:14:a7:32:
                    87:70:c9:cd:6c:27:09:08:c2:84:00:f1:39:57:d9:
                    86:b1:c1:69:a8:da:64:1f:2c:87:6c:64:fe:a3:50:
                    c3:25:9d:0d:9e:6e:3a:55:5f:ac:62:16:85:fa:a3:
                    2f:8a:42:5d:90:8a:3b:45:84:b8:c0:fa:18:8d:fb:
                    50:f4:c4:05:af:44:88:ed:91:51:da:9c:77:f6:37:
                    80:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C8:95:08:D0:6D:64:42:0B:4E:34:BC:9A:78:A8:70:34:62:8F:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/7c85c66c-6c22-3862-b5ef-1373f96b6921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e0:65:00:fe:60:1a:60:f9:77:7a:89:36:76:14:be:e0:32:
         39:b9:c8:f1:2a:75:7b:83:da:a5:0a:b6:3b:07:28:a6:e3:ac:
         7f:d2:de:e5:83:f4:89:e2:17:11:de:5e:17:3b:84:b6:bd:62:
         84:55:31:c5:42:fb:3a:fc:7d:2d:f4:1c:1c:fb:8d:98:4e:2e:
         60:82:6d:45:1b:b8:af:df:33:f7:53:5a:9a:70:05:46:d1:a7:
         79:a6:c2:73:7c:c2:15:a6:86:8a:a5:c6:ff:78:a3:20:01:87:
         01:79:9c:f0:33:4f:c0:c2:44:78:26:b0:38:d7:51:96:81:51:
         3e:ea:15:a1:3e:85:a7:0a:99:e3:0c:ea:7c:04:85:89:17:3f:
         c8:7a:c3:19:b5:51:da:b8:55:9c:83:70:ae:36:d8:39:9f:d5:
         82:84:74:2e:2b:51:11:b4:90:82:8e:7e:8e:17:69:bc:4c:ea:
         9b:85:3e:5b:46:ff:7b:92:d5:60:c9:f5:75:25:cd:89:6b:ea:
         a2:99:71:04:eb:70:1e:f2:80:07:ea:62:f4:46:5a:e5:2a:fc:
         e2:aa:92:19:a5:30:d6:6b:eb:d0:d7:e4:56:bd:af:ae:e6:55:
         e3:57:a6:93:13:6c:3d:be:5d:12:3d:b5:cf:93:e4:bc:f6:ea:
         26:bf:5f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:26:14 2025 by rpki-client