Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/a29d2050-628b-3929-9a54-f5868fc91694.roa
File:                     a29d2050-628b-3929-9a54-f5868fc91694.roa (raw, json)
Hash identifier:          gPFnaKWFsqVyO0/8WkYGaoyCfE9xkj3d6dJb9ESwjHU=
Subject key identifier:   34:9D:98:25:AB:0B:33:8F:9A:65:36:1E:58:07:A9:07:AC:52:8B:94
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584AB650DCBE93C0715241CF3700
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/a29d2050-628b-3929-9a54-f5868fc91694.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     6128
IP address blocks:        47.19.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:dc:be:93:c0:71:52:41:cf:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=ee9fed2a-592f-4945-9f6d-d4d9d5a86814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:9a:08:c3:b1:5e:ff:dc:01:06:3b:47:b5:
                    9d:fb:d5:e7:96:59:7f:1a:90:59:14:0a:ff:a0:61:
                    63:24:2a:8f:ce:e2:13:d4:57:87:2f:fa:b2:b0:47:
                    83:f7:9b:91:d4:f9:6b:27:fa:ed:dd:ce:f1:46:12:
                    cb:25:f8:ae:e5:62:c8:d8:be:10:16:ad:f9:cb:26:
                    9b:b9:47:4e:19:d2:57:35:3e:8e:f6:58:51:89:32:
                    8f:fa:38:79:e7:5c:e8:dd:ea:92:0f:12:bf:39:28:
                    e2:33:fe:02:08:8e:ad:02:0e:c0:4e:19:6c:7d:e8:
                    95:ba:8d:c4:aa:f3:b1:52:b5:6e:2b:ee:09:c9:bd:
                    71:c6:00:1d:8c:f3:48:98:0c:1e:c8:be:24:18:f7:
                    46:9d:37:57:25:a0:2e:ce:98:c7:a5:ec:c9:1e:5d:
                    59:a8:42:2c:2a:fc:3a:b8:5a:5e:49:20:7a:42:15:
                    f5:eb:3e:18:c1:b7:f2:f8:f3:30:01:0d:72:ce:eb:
                    55:2a:39:54:b0:27:7c:62:e7:42:ad:ec:ef:fe:ae:
                    06:9c:0f:7e:fe:74:da:d3:bb:85:24:ff:7e:a5:b4:
                    bf:76:11:96:1e:16:3b:d0:d0:18:b3:82:fe:d8:ca:
                    20:12:a2:ac:6f:d0:51:b5:3e:7f:c1:ea:5c:8d:c8:
                    d7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9D:98:25:AB:0B:33:8F:9A:65:36:1E:58:07:A9:07:AC:52:8B:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/a29d2050-628b-3929-9a54-f5868fc91694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:54:51:ac:99:7c:92:8f:e5:1d:28:44:5e:1a:89:b5:1b:d5:
         03:e1:1f:05:e7:8e:21:24:20:99:7e:9e:de:6f:3f:fd:bc:98:
         62:f7:86:8a:49:d7:12:5b:65:90:c0:b7:63:77:61:63:de:22:
         be:0d:b2:c5:eb:e2:bd:a5:4a:64:b9:8c:68:a6:f7:cc:d1:2c:
         06:dd:ac:99:af:2c:dd:76:ee:5c:cb:07:21:9c:e1:2f:01:d6:
         2f:e9:1b:29:36:c3:8c:16:b2:a5:e7:cc:9f:ff:90:f6:af:30:
         d4:6b:21:2b:88:33:d6:dd:78:1f:b9:f9:66:57:7e:9f:2d:f6:
         e5:cb:ff:bb:3d:44:b6:93:be:31:d7:6c:99:a0:7e:57:97:8e:
         85:06:64:22:3c:29:01:4a:33:0e:e8:f8:fc:e9:a5:cf:ab:0b:
         7a:b6:04:6d:a6:6b:4a:49:09:34:a8:b3:67:43:9f:71:08:f2:
         8a:1b:32:1c:3c:b6:39:bf:e5:3e:8e:b1:c7:70:08:4f:7a:dc:
         50:6c:d0:f2:20:79:de:52:5a:5b:d2:d0:2b:27:e0:eb:de:9f:
         f1:e7:43:a2:73:b1:2e:15:88:e9:15:38:c4:d6:29:0a:3c:ce:
         3e:cd:0d:35:85:42:76:4a:05:7d:b3:22:22:20:6e:06:d9:7a:
         6a:4f:cd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:39:46 2025 by rpki-client