Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/6d33c619-91ca-3272-9303-b69a7f9ca2f6.roa
File:                     6d33c619-91ca-3272-9303-b69a7f9ca2f6.roa (raw, json)
Hash identifier:          rWJfq8SAvxF/UJNF5Bs1BZoX9yCDkX99cDYapXtUxfM=
Subject key identifier:   4F:07:2A:F0:03:20:00:E7:9F:A4:63:89:68:BD:9F:E2:68:36:C8:54
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584A3E45A3F647B0570E4C139FC0
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/6d33c619-91ca-3272-9303-b69a7f9ca2f6.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     31774
IP address blocks:        47.19.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a3:f6:47:b0:57:0e:4c:13:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=dabf1a7a-f132-4953-a440-75d3a4b329ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d5:9b:ab:b7:93:99:2f:fc:9c:ca:50:66:05:
                    86:44:ab:49:1d:72:ad:ac:e4:81:ed:3c:15:5c:16:
                    63:51:e6:09:bf:b0:22:ad:8b:28:57:8e:47:34:13:
                    e6:f6:49:de:91:97:00:26:cc:3c:9f:46:0b:88:6c:
                    f5:f4:fc:ce:c0:8e:a0:70:c0:40:4c:ad:04:c4:0c:
                    2f:85:48:e2:c3:d8:29:f6:2f:cd:3f:42:9d:d4:bb:
                    83:c4:5e:53:b4:5a:be:3a:c2:fc:81:f1:63:43:dc:
                    16:8a:8c:15:de:bd:0a:2d:73:b6:80:4f:7a:51:cc:
                    13:04:b2:b6:88:fc:ad:7a:0b:66:48:2b:6e:2a:06:
                    3a:d9:76:58:2d:01:03:96:c7:9f:52:3c:e5:73:f3:
                    6a:21:c0:5e:ee:a4:2e:5b:e7:b6:28:27:59:de:0d:
                    e8:e5:67:0f:93:c9:03:38:91:ea:34:7a:8e:14:ec:
                    c6:b2:a0:3d:ff:18:a9:02:c0:84:24:4d:c1:a5:ef:
                    a4:ef:25:cd:66:98:c8:f8:22:3e:99:e0:c6:89:70:
                    c4:94:c9:a5:bd:5f:90:de:01:77:26:1e:22:ea:2b:
                    1d:82:2f:0e:52:61:6d:a9:f8:f9:43:bb:07:56:fa:
                    a6:df:ac:c7:de:ff:f7:10:45:22:09:4b:30:15:02:
                    d1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:07:2A:F0:03:20:00:E7:9F:A4:63:89:68:BD:9F:E2:68:36:C8:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/6d33c619-91ca-3272-9303-b69a7f9ca2f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:62:03:e0:7d:9f:05:c4:8f:34:f5:7f:42:13:55:6c:41:6c:
         51:b6:f8:c0:b1:13:66:11:83:84:b0:e8:1d:2c:50:b7:28:62:
         b0:6a:e4:43:6c:c8:dc:0b:f5:b9:96:20:bd:b4:7a:16:cd:26:
         42:b2:ad:33:3a:e7:4d:73:5b:84:ab:14:7e:50:47:db:2a:48:
         5f:cb:84:5f:82:b0:bc:3e:2e:f7:61:15:9f:68:6d:2a:78:3e:
         27:52:4a:30:ab:c9:19:67:58:59:91:97:2c:43:e9:9c:ce:83:
         03:9e:e9:b9:51:8b:c1:03:91:10:3f:9b:5f:1f:71:ab:d9:ac:
         01:8e:c6:59:19:41:dc:81:99:a1:c3:67:cf:8c:4f:dd:f0:f0:
         42:89:e5:8c:14:e3:85:85:29:cc:8a:d6:01:2b:f2:b7:2e:4f:
         60:40:55:b9:f2:71:b1:ef:a4:14:ad:5f:69:b2:94:5e:2d:2b:
         bf:2a:7b:9b:9e:d7:d9:bd:5e:b0:3a:16:86:0f:6e:cf:da:47:
         9c:c3:57:a9:8e:88:1e:99:9f:bd:05:b6:8a:34:86:c8:25:64:
         30:5a:e9:0e:df:f6:3a:f7:e6:7b:e2:dd:5c:8f:e1:70:51:79:
         ac:52:7e:35:2d:21:5a:9d:95:a7:40:0c:05:6d:0f:62:3c:6d:
         22:33:bc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:31:12 2025 by rpki-client