Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/3e042176-14af-3ff3-9d26-030d297d912d.roa
File:                     3e042176-14af-3ff3-9d26-030d297d912d.roa (raw, json)
Hash identifier:          vGsLSonnAATmx6016CGeXxCBQ5VAMSy9zRA4L0WtY9Y=
Subject key identifier:   D4:99:2B:3A:86:83:98:2A:3A:00:8B:00:1A:CE:C7:D8:5C:C4:42:3D
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584AD23BC5B8B5F97A03E2232880
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/3e042176-14af-3ff3-9d26-030d297d912d.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     63397
IP address blocks:        47.19.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:c5:b8:b5:f9:7a:03:e2:23:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=f9bdb5b2-410f-4627-94f4-7cb42fb5c41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cf:50:ce:92:13:c8:92:c2:fc:5b:5b:dc:1e:
                    27:99:a0:b0:17:73:7c:8f:db:47:51:b4:93:4b:07:
                    20:f0:97:a3:4c:aa:f9:29:17:22:97:78:e4:cb:c7:
                    25:25:96:2d:fd:32:98:39:6b:dd:77:60:66:5d:3e:
                    b0:39:3d:68:3f:df:90:8d:2a:fe:d4:80:86:a8:b7:
                    8d:fa:0f:ed:19:3b:2d:46:7c:57:b6:b6:f2:c6:64:
                    18:d0:34:b5:79:65:41:d0:b2:00:1a:f9:c4:44:59:
                    bb:36:b9:32:78:de:08:fd:ac:b8:10:0c:80:40:7a:
                    d4:9d:31:00:d1:7d:9a:ad:95:0a:a4:d0:bb:8d:5f:
                    37:ad:b8:e6:4b:76:01:4d:64:9c:2e:81:27:22:09:
                    8e:c3:39:8b:9f:bb:d0:22:71:18:f9:22:90:00:94:
                    54:6a:aa:17:9b:87:5a:86:2b:c5:0b:f0:d8:87:97:
                    32:53:d5:c8:95:11:4d:71:0e:a6:93:ed:0e:53:42:
                    3b:42:37:ca:f6:6f:11:af:c3:a3:c1:4e:2f:36:5d:
                    36:ff:95:6e:94:cc:2a:2e:04:03:d7:5e:0a:23:fa:
                    60:81:fb:86:26:bb:d9:da:db:ee:52:3e:a7:f4:6d:
                    80:ac:a8:6c:3b:08:e5:4a:ba:26:37:02:7c:74:93:
                    3c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:99:2B:3A:86:83:98:2A:3A:00:8B:00:1A:CE:C7:D8:5C:C4:42:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/3e042176-14af-3ff3-9d26-030d297d912d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:c9:2f:e1:e0:a6:93:e0:d6:37:29:a7:98:2e:07:42:cf:c1:
         73:0b:7f:ac:a1:2d:b7:de:62:07:e1:87:2a:65:fe:ca:f8:91:
         03:30:43:f3:0d:70:34:c4:5d:9a:ba:f4:f7:17:33:a3:18:f2:
         1f:94:25:5b:2e:ed:33:20:0c:a4:c5:3b:85:79:9e:df:79:8a:
         c7:d4:1b:2b:9c:21:bd:30:b0:bb:e9:aa:b7:77:ae:6d:01:05:
         12:bd:93:15:6c:9c:7f:9a:ca:fd:67:e3:67:f0:da:7c:58:d4:
         7b:ed:de:57:38:07:18:2b:b0:c6:3d:e3:e6:5f:6b:71:3f:0c:
         f8:7a:15:55:8b:bd:35:af:8d:f7:fd:b6:c9:fe:01:3d:5d:c1:
         42:c7:0d:f4:32:22:8a:81:30:f4:9a:68:b6:58:b1:4a:58:4c:
         fc:b8:38:0e:95:d7:23:90:2a:33:80:e2:09:b9:19:b2:46:35:
         29:39:26:93:34:b1:43:41:15:04:98:f7:f7:2a:c2:a4:77:ea:
         e4:07:67:32:d7:5f:bb:67:5d:10:dd:46:31:de:f1:3e:d1:a5:
         04:a1:64:7e:35:d4:2d:11:ad:08:94:3a:ca:31:21:f5:45:76:
         2f:c1:25:1a:67:44:40:3a:15:2a:7a:e9:15:68:58:ea:08:99:
         e2:e1:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:05:00 2025 by rpki-client