Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/027bf517-b491-3c25-89b0-e629b879ba32.roa
File:                     027bf517-b491-3c25-89b0-e629b879ba32.roa (raw, json)
Hash identifier:          CVEv0Ct4jUgl7SYbqcehQ/LWXzpAmTo701Q5sMKDZCs=
Subject key identifier:   73:36:94:32:2E:13:C7:BC:80:9E:B5:D5:E6:A2:60:C3:0A:86:46:CC
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F43285847537B72693A2C1C60CBFBD190
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/027bf517-b491-3c25-89b0-e629b879ba32.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     54004
IP address blocks:        47.19.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:72:69:3a:2c:1c:60:cb:fb:d1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=e95d3a49-f38c-4e95-a26a-aa5649b068b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:97:c8:5e:02:c9:cf:f7:d9:dc:dd:c0:c7:f6:
                    9e:56:37:2b:ec:57:18:4a:8d:89:83:01:e9:0c:f2:
                    0a:f2:bf:52:4c:90:9b:f9:9f:2c:8b:ee:ff:eb:3a:
                    6a:ab:be:34:2a:97:75:06:04:67:e9:b7:ff:33:7b:
                    cb:ef:b0:88:01:31:64:19:5d:fd:d1:5b:82:64:6e:
                    77:35:d4:0e:02:b0:2e:24:fa:f2:65:d3:85:37:69:
                    2c:e1:1d:cb:02:bd:28:15:da:07:4f:ac:e4:26:f2:
                    e4:57:4b:12:91:80:fd:3e:f1:83:e9:3e:04:43:06:
                    39:48:70:a9:96:d5:8c:5f:ac:c8:14:30:da:de:b0:
                    80:5d:2a:ea:67:58:bc:5a:fa:af:ab:d6:80:38:6a:
                    72:14:d2:78:6c:e9:c8:66:2d:b4:7f:9e:c5:ba:a7:
                    c9:d1:1a:7f:78:85:8b:14:b9:ae:4e:9c:7f:6d:02:
                    4d:54:f0:f6:aa:71:d4:03:9d:07:d7:88:ca:8a:2d:
                    bd:2a:98:ed:4a:02:87:64:a1:b2:d3:f9:0f:07:67:
                    14:cd:2c:48:aa:f0:4f:5d:43:1f:5a:0a:08:43:81:
                    db:be:2d:28:49:2f:66:b2:04:ed:00:a4:3c:47:ef:
                    6d:04:ad:db:91:1e:ba:33:74:8a:c9:5e:12:8e:9c:
                    70:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:36:94:32:2E:13:C7:BC:80:9E:B5:D5:E6:A2:60:C3:0A:86:46:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/027bf517-b491-3c25-89b0-e629b879ba32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f5:17:22:ef:1d:cd:e4:6f:70:fe:c3:63:6f:f6:90:49:ad:
         c6:ef:61:c5:e7:1a:a3:b0:6b:97:fd:d0:2c:2f:ba:2d:f6:61:
         9c:f8:63:26:e2:cb:54:53:dd:4b:a9:13:85:96:f1:96:25:c8:
         69:da:de:e4:e0:1b:72:04:02:2e:86:02:88:8e:38:24:69:31:
         27:36:93:b5:16:83:69:d8:bf:2e:33:c7:9b:30:4e:85:95:c6:
         76:4c:98:ad:b9:5a:8c:bf:26:bf:0b:e5:52:54:a6:4c:e2:3e:
         11:57:1d:39:b4:db:af:39:23:fa:c8:5c:6a:f8:6d:7a:a3:83:
         81:4a:eb:25:c8:29:1a:ec:6d:fd:de:da:34:38:41:8b:ba:1c:
         ee:99:8f:d8:92:5a:53:4c:cd:18:77:a9:30:5f:41:d8:8f:59:
         0e:db:c3:76:79:a3:31:37:55:66:e6:52:48:bc:ed:81:3d:1e:
         1a:19:fc:37:5c:e3:ad:6f:77:20:48:6d:bc:66:97:60:1e:02:
         0b:1e:8a:3d:ea:59:5c:45:34:97:b9:33:ba:5c:49:b9:91:7f:
         94:85:15:15:78:d8:d0:6b:19:c1:ae:2c:5a:76:52:0b:df:dc:
         37:d7:7f:3e:8f:43:0e:04:17:55:07:69:bf:0e:97:cc:5c:fa:
         e5:39:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:16:31 2024 by rpki-client on console-fra.rpki-client.org