Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/c05b3c5b-2714-397b-ba60-6738fd712ce1.roa
File:                     c05b3c5b-2714-397b-ba60-6738fd712ce1.roa (raw, json)
Hash identifier:          S43AuGKXeYmz6nQzuAtP9Vuenb7qtjNbwlNi8+aCy3Q=
Subject key identifier:   57:65:E0:0C:28:FE:D9:21:F4:44:80:62:0D:CD:04:AD:68:15:97:98
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584B4E77120859E3B6FA78524E40
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/c05b3c5b-2714-397b-ba60-6738fd712ce1.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     62802
IP address blocks:        47.19.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:12:08:59:e3:b6:fa:78:52:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=08dc9ef6-28cb-4e30-a101-47905eb0a513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:84:49:bb:d0:ab:b4:df:ce:c8:c2:58:66:
                    07:da:e6:20:ce:c8:84:c4:15:83:b7:c8:76:3d:ca:
                    f9:54:c9:21:3f:a8:c7:87:7d:40:7d:9d:4b:54:5a:
                    55:27:ed:f7:0f:a2:a1:c1:44:8e:3b:8c:18:af:36:
                    53:68:0d:95:bb:1b:96:04:64:68:14:2b:f1:a3:e2:
                    0a:23:d3:8c:c7:b9:c8:cc:26:5b:d1:d4:1e:e9:d2:
                    ae:e4:80:f9:ef:d7:5e:7f:42:57:b7:83:b2:c6:a7:
                    51:d1:4a:bb:38:91:98:b2:63:5f:b3:5a:92:e9:5c:
                    13:0b:de:9c:b3:fa:f9:08:cb:c8:8e:41:2f:22:0b:
                    2b:a5:4b:da:9b:8d:37:97:93:4b:50:95:fa:f3:43:
                    34:d8:70:65:7f:d1:97:4b:34:a9:39:81:7e:4d:03:
                    38:14:3a:a0:37:51:c0:ae:b2:31:61:80:e1:59:35:
                    f2:d3:e1:e0:92:e7:48:eb:7c:91:3a:ba:08:2c:60:
                    77:55:33:56:bf:d0:b7:03:d4:ea:e0:43:a9:a7:fe:
                    82:f2:d9:1e:b5:29:7e:2a:dd:25:cd:ba:43:01:91:
                    6d:7b:ed:de:66:4f:db:3f:7a:a1:2f:52:08:7c:4f:
                    01:4b:60:16:92:29:8d:5a:ca:ad:92:1a:43:cb:8a:
                    cc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:65:E0:0C:28:FE:D9:21:F4:44:80:62:0D:CD:04:AD:68:15:97:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/c05b3c5b-2714-397b-ba60-6738fd712ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:48:d3:15:15:85:04:d1:97:26:fe:9b:68:d3:9b:e2:fc:99:
         fc:b4:a6:1a:76:74:e7:b7:14:89:87:81:1f:ee:e5:3e:50:6a:
         57:13:fb:3b:a4:53:09:da:6f:9b:90:4b:e7:61:ee:3b:44:03:
         f1:2b:93:8d:81:a2:59:36:72:b2:d1:81:fb:3f:be:d4:8d:05:
         91:67:be:3d:23:d1:fc:c1:fa:0b:6b:cc:7d:5b:ab:1c:4b:9f:
         00:59:4c:fc:d6:63:cd:69:de:90:8c:db:e4:de:7d:16:cb:75:
         87:34:17:aa:ee:47:d0:05:1e:af:fa:46:6c:9d:bb:5b:f5:fb:
         7a:43:0c:ec:0b:b7:c3:46:4f:0d:97:5c:02:4e:8b:06:1f:15:
         af:bb:89:d2:f7:63:24:93:43:bf:51:a5:7b:aa:f8:5a:82:bd:
         be:39:1d:fa:7a:26:7a:51:21:40:ce:5d:32:49:df:6f:bd:db:
         18:21:77:c8:8e:17:1f:fa:5d:5d:c4:bf:b8:8b:cc:e0:24:17:
         15:2b:78:fd:66:6e:85:1b:0c:d8:a1:8a:f5:e6:61:81:e8:a6:
         34:de:59:9b:4f:f0:af:14:2b:dd:1b:06:3a:9a:67:5a:50:13:
         a2:39:3e:a6:e8:d7:f6:b8:5a:58:d1:c8:30:9c:2b:78:6b:91:
         1f:f8:65:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:02:23 2025 by rpki-client