Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/b8dc5976-9941-3e8c-a11e-f3f96d1d5b2f.roa
File:                     b8dc5976-9941-3e8c-a11e-f3f96d1d5b2f.roa (raw, json)
Hash identifier:          9zsP7tzP2wZX984bHa5vmVWQHWhlO6piwspuNG8HPAs=
Subject key identifier:   3B:32:00:2C:70:FA:A0:1F:3F:06:E7:FB:B2:D6:66:F9:C9:06:7F:8D
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584B970CD336EFA7E57C3B7C7A00
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/b8dc5976-9941-3e8c-a11e-f3f96d1d5b2f.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     23069
IP address blocks:        47.19.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d3:36:ef:a7:e5:7c:3b:7c:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=11f3e8f9-81af-4f90-8251-7daae902c2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:28:c1:bb:3d:f6:a8:d3:e1:29:fd:e6:23:
                    e3:34:ab:19:b4:76:9b:da:35:d8:b7:da:29:9c:64:
                    8a:6a:44:40:6f:37:87:62:0c:4a:27:50:a4:b9:ed:
                    49:56:a0:59:71:f0:10:55:3b:82:0c:6d:af:46:ee:
                    a0:cf:2c:06:92:b0:b3:7d:71:d1:d9:d2:bb:90:43:
                    0b:2e:90:dd:3d:da:a4:ef:d5:ac:fe:ce:99:59:7b:
                    87:36:fc:cc:e9:5d:f7:b7:1b:b3:ac:49:43:63:d9:
                    f4:24:0d:f9:16:91:eb:0d:af:81:4e:b1:fe:8e:44:
                    47:4b:e5:96:40:1e:c8:46:f8:d6:a5:eb:ed:c8:a1:
                    ab:25:e8:a0:af:32:e8:dd:eb:ff:03:e4:04:be:2b:
                    a6:52:36:f7:6d:6e:f7:f6:4c:55:26:45:1b:28:86:
                    eb:71:06:69:35:fe:68:05:39:6e:49:da:e5:bf:e5:
                    f1:e6:e5:05:61:7c:35:81:c7:62:53:7c:b7:58:ae:
                    f7:db:7a:7c:d6:a4:b9:64:2c:e5:f1:cd:00:1a:41:
                    a2:1d:02:de:6f:12:41:2f:96:61:ed:fc:5c:96:0c:
                    78:16:12:50:e6:71:31:ae:a6:c2:53:99:30:47:2b:
                    c6:9f:d5:9e:65:74:45:7f:1d:63:fb:bf:b0:eb:99:
                    c1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:32:00:2C:70:FA:A0:1F:3F:06:E7:FB:B2:D6:66:F9:C9:06:7F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/b8dc5976-9941-3e8c-a11e-f3f96d1d5b2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:48:05:28:e6:c1:f0:dc:b3:10:08:48:77:0e:63:ee:01:71:
         fd:aa:27:45:9b:33:fd:ee:a2:aa:09:50:67:5a:c1:55:12:79:
         77:33:33:e2:2f:d8:fc:45:8a:60:1f:93:49:24:f9:17:d3:e8:
         de:30:54:e2:f1:8d:6e:87:6b:f1:3e:fd:5e:8b:b8:84:c7:20:
         ee:0c:73:dd:e9:25:1b:76:c2:d4:76:93:db:aa:3c:b8:22:4f:
         81:ca:df:a9:fc:9f:b5:9c:65:c4:1f:a7:18:a4:ad:eb:5e:22:
         11:85:08:fe:95:b7:cf:cf:a1:94:fe:20:27:6e:68:6e:2b:57:
         60:4d:de:31:d0:c1:09:24:23:9d:56:9d:de:be:14:01:c4:08:
         05:f9:8e:d1:10:01:d7:65:84:cf:65:5d:fb:db:1f:45:56:ba:
         86:7b:28:b1:fd:57:c7:7d:ec:6d:b3:4a:b4:91:ba:15:f1:ea:
         e4:b6:75:06:12:03:4d:6e:f8:71:53:b0:9e:7e:e4:74:a5:c1:
         b2:bd:fe:98:16:b3:49:34:64:04:ba:8e:0b:2d:23:d4:9f:d0:
         f5:24:6e:3b:03:84:ea:3a:bf:43:00:3f:0a:60:6c:ad:74:7d:
         6b:69:84:1f:55:62:92:f0:06:22:aa:f2:2a:f6:84:85:69:73:
         0b:8e:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:10:01 2025 by rpki-client