Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/f17a7794-92b9-342e-8946-3f08261769d0.roa
File:                     f17a7794-92b9-342e-8946-3f08261769d0.roa (raw, json)
Hash identifier:          /semCG8s4JsYWxz7j5xchXzhPT7mzF7aYFiWWNc7k1M=
Subject key identifier:   29:5F:E9:77:8A:BC:48:D2:26:13:33:1A:31:91:3D:A5:A3:F0:E6:5B
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584BB2F7C3A4B84BB2FB7E583D00
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/f17a7794-92b9-342e-8946-3f08261769d0.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     63397
IP address blocks:        47.19.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:c3:a4:b8:4b:b2:fb:7e:58:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=fbffc222-a319-4142-b9eb-565108182af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dc:dd:0e:c9:6e:45:f3:5b:a6:37:f7:42:33:
                    59:9b:42:16:cb:1e:c5:e6:4e:dd:3d:88:52:31:63:
                    bf:3c:f7:e6:bc:b8:ee:11:3c:e9:bf:f7:74:ec:fe:
                    5a:fc:a9:54:a2:eb:08:1c:ea:2b:b3:7e:7c:f8:82:
                    18:9f:44:23:d5:0b:2f:ee:0a:7d:bb:a5:0f:4b:6b:
                    1b:f0:9b:ba:25:e4:5e:2e:07:01:66:28:82:98:d5:
                    6c:cb:77:61:9f:c9:68:92:81:d3:6d:21:8e:c5:d1:
                    a3:9c:bb:4a:6c:11:67:7f:d2:68:a6:bd:7c:49:23:
                    39:21:05:4b:7b:90:b9:0f:47:99:40:c6:c9:44:e3:
                    6a:e9:d2:c4:b2:a5:d0:c0:69:6f:9e:b8:5f:0c:04:
                    4d:37:2b:a1:c6:aa:7f:21:1c:66:f8:37:2c:22:e2:
                    99:01:30:4c:78:13:d2:17:b9:f8:3c:ca:63:a9:6f:
                    b9:7c:b9:8d:02:9e:4b:aa:74:52:f7:58:9e:7e:4f:
                    f3:58:4d:59:8f:e4:7e:94:9c:6a:91:29:6a:98:55:
                    ef:48:04:18:f7:57:2c:f5:13:ca:1c:ff:9b:bb:d3:
                    46:91:84:a2:fd:c9:43:9e:f5:9d:bb:c2:4e:3a:d8:
                    fd:5d:8b:30:28:26:45:01:5e:ae:1b:9c:f8:f7:22:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5F:E9:77:8A:BC:48:D2:26:13:33:1A:31:91:3D:A5:A3:F0:E6:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/f17a7794-92b9-342e-8946-3f08261769d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:11:8a:2b:84:3b:2c:6e:c3:dd:f7:d5:d2:45:bb:c1:66:60:
         70:13:00:fe:d4:18:4c:3d:45:7b:59:0a:20:f9:f2:a1:78:31:
         00:ef:fb:3c:8a:b0:0d:a2:d2:52:71:49:57:d4:eb:64:64:00:
         7c:bb:99:97:31:51:5d:05:d3:78:23:1c:69:6a:b2:2b:10:67:
         8d:48:c2:7f:04:90:c6:9e:3c:41:f4:47:d0:26:78:93:d7:47:
         35:f1:7e:18:00:65:d4:22:4a:6e:32:e9:0d:40:17:81:ed:98:
         d0:6b:58:ad:91:43:66:4e:f8:ea:fb:55:55:f6:30:a7:cd:c4:
         22:5d:f2:44:5a:01:1c:e1:16:63:0e:37:84:81:7d:e4:68:13:
         0c:00:6b:89:6a:66:26:c1:e5:88:af:0d:b9:31:86:cc:68:54:
         8d:78:3a:f5:aa:1d:64:6c:45:96:04:2c:32:f9:d9:b5:6f:fd:
         25:b9:8a:c7:ae:85:b9:16:8f:0c:d5:8d:6a:5f:d3:3f:a4:ca:
         f5:6a:ea:7f:5f:9c:1d:bd:c3:d6:50:6a:b2:00:fa:c8:15:3c:
         4b:49:b3:bb:48:b5:bd:d3:f5:30:be:74:90:87:dd:7c:4a:a3:
         00:e0:3b:0f:6f:de:48:6b:a0:89:9f:9b:db:77:b2:ad:a4:9d:
         77:3a:6c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:43:41 2025 by rpki-client