Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/b8dc5976-9941-3e8c-a11e-f3f96d1d5b2f.roa
File:                     b8dc5976-9941-3e8c-a11e-f3f96d1d5b2f.roa (raw, json)
Hash identifier:          yTmnd5j9Z6cswquRHP+oE8Xl0Eub0Z80H7lxnwkij2M=
Subject key identifier:   4D:4F:DE:22:47:30:7D:EF:63:90:57:38:2C:19:F6:84:DA:32:23:2E
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F43285849D594D64FE6971E6C1FE581C0
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/b8dc5976-9941-3e8c-a11e-f3f96d1d5b2f.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     23069
IP address blocks:        47.19.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d6:4f:e6:97:1e:6c:1f:e5:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=63ddef58-c13d-4e42-8ff8-24fb955ba192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:6a:87:e1:bf:3d:f0:b3:d4:c8:e9:cc:cd:
                    d9:62:02:b7:2d:28:9f:0b:02:24:0c:16:84:18:8d:
                    cb:9f:b4:1a:2b:64:14:cb:bc:e2:7b:e6:c5:19:86:
                    94:3b:31:e2:4b:51:11:dd:61:ee:34:84:52:0a:2b:
                    cf:d8:fb:00:09:60:bc:10:27:c6:77:f5:0a:84:23:
                    40:77:24:e3:ee:a5:83:4f:13:cb:6f:40:4e:cc:6a:
                    82:04:12:03:a7:3a:d2:b2:82:b4:47:38:2b:8b:e0:
                    e9:61:15:6d:96:53:a0:66:e6:75:9e:88:b1:57:46:
                    c8:4c:d8:9d:d2:c7:9e:d7:fb:6d:11:0f:28:0b:59:
                    41:4d:b5:4b:01:5b:b8:e2:1c:8c:ae:0e:ec:7b:b7:
                    49:68:c8:ae:e0:26:47:b7:44:73:53:c5:eb:5c:12:
                    78:30:a1:36:ef:f9:5e:0d:d4:95:3f:61:a6:75:8e:
                    c8:e2:37:d5:b3:ab:ce:82:ef:06:bf:1d:e2:5a:3c:
                    37:4c:5a:9a:dc:fa:94:ac:ca:7a:66:33:ed:42:cf:
                    73:8a:65:64:75:22:da:59:81:42:8d:2c:a5:50:e4:
                    ab:c5:56:ae:46:08:95:d8:2b:44:0a:e4:bf:21:f3:
                    5f:40:1c:ee:1e:d6:d4:74:d7:64:64:86:c8:71:fe:
                    1c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:4F:DE:22:47:30:7D:EF:63:90:57:38:2C:19:F6:84:DA:32:23:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/b8dc5976-9941-3e8c-a11e-f3f96d1d5b2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:de:b7:8e:b5:b3:6a:a9:18:c0:04:88:82:af:47:13:39:82:
         eb:40:40:63:81:14:cb:dc:2f:df:29:e6:18:37:92:cc:d4:7a:
         91:06:28:ab:01:85:8f:37:d2:46:5f:52:12:c4:de:2f:b1:67:
         6a:eb:b0:18:29:b7:10:4f:d0:95:a5:02:54:54:bc:ed:15:55:
         d1:b4:d8:12:63:a1:d8:7c:77:94:28:b4:ed:c1:4d:98:d7:42:
         44:14:7c:b7:fe:d5:63:eb:88:18:36:0e:55:c7:5a:9e:e8:f8:
         73:a5:b9:ee:55:ff:5a:0d:72:fc:5a:a2:78:04:40:0f:b6:04:
         4b:5c:c6:4d:63:4c:dd:a8:12:73:4d:cd:a7:ed:8a:41:4e:be:
         0b:26:73:82:38:d3:ff:f1:42:44:03:81:ed:b1:b3:97:b5:4b:
         7b:bb:15:f3:07:a8:90:d8:d6:a1:67:a4:4f:ce:66:b4:14:bc:
         3f:6d:2f:fb:da:62:fb:10:79:9c:ad:50:04:06:88:78:a9:a9:
         3b:32:db:a1:a5:89:65:c0:ab:9a:09:42:c9:c8:6d:e8:76:98:
         73:dd:9b:ce:91:59:cf:83:ab:b5:8f:8a:06:07:5e:96:c2:70:
         9c:2d:68:55:e7:f7:00:72:f9:62:6e:02:b9:49:96:03:69:c9:
         c5:48:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:33:12 2025 by rpki-client