Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/1cfb9cd0-3b07-3e3d-9b15-5c6ed9037ae3.roa
File:                     1cfb9cd0-3b07-3e3d-9b15-5c6ed9037ae3.roa (raw, json)
Hash identifier:          rFrVWI7jOMFE2IZZ4bV4MeMypMyCphfeVLjHfitybVk=
Subject key identifier:   4C:4F:EC:E8:19:9E:78:18:47:AD:39:77:E1:B2:1B:93:27:9E:C3:44
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F432858483F8028CE86801ED2E8C2B9C0
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/1cfb9cd0-3b07-3e3d-9b15-5c6ed9037ae3.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     14218
IP address blocks:        47.19.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:28:ce:86:80:1e:d2:e8:c2:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=d2f15b17-def2-433b-8b04-e7dacb75777e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8f:32:1e:ca:36:64:7a:5a:34:d2:3d:f2:c0:
                    62:7d:10:f5:d1:0b:2c:92:71:9f:0b:66:68:99:7d:
                    e8:47:5a:c4:1c:f5:2e:3c:f2:c8:0c:6f:f1:65:eb:
                    86:a0:ad:3b:0e:57:c2:4b:a7:d9:5e:d7:4f:af:a9:
                    0f:1c:a1:5b:0f:bf:97:08:c3:9d:9c:36:f8:fb:74:
                    59:0a:69:f5:72:f8:8a:e8:61:2f:c2:ea:df:b4:9e:
                    ef:e8:3f:74:0a:9a:5d:34:ae:95:7b:bd:ea:17:71:
                    ff:89:46:e8:3e:b9:21:ba:ba:f5:6c:39:9f:6c:b0:
                    17:5b:e3:07:0f:3d:73:5e:16:54:2a:a5:5c:61:4f:
                    11:f9:bb:56:82:61:1a:2e:5d:25:d6:03:81:65:f7:
                    e4:16:9c:f3:13:a4:0f:7b:28:04:44:7f:89:cb:7f:
                    51:25:55:51:7a:fb:46:85:0f:fb:17:5c:cf:20:b0:
                    15:9e:77:9f:13:58:b9:f1:85:63:a2:55:ea:52:ae:
                    15:e0:bd:5e:26:65:ad:08:ac:15:e9:2c:44:ce:52:
                    91:f4:5a:70:3b:3e:73:31:3b:eb:64:8d:6f:c2:0d:
                    77:3f:af:a5:c8:82:7c:fd:94:2f:e2:dc:55:4e:a9:
                    43:05:3d:94:f6:cb:50:02:3e:1f:9b:3d:96:3a:0e:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4F:EC:E8:19:9E:78:18:47:AD:39:77:E1:B2:1B:93:27:9E:C3:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/1cfb9cd0-3b07-3e3d-9b15-5c6ed9037ae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:c0:c2:de:58:b3:2f:02:62:95:a3:d2:c2:bf:d3:79:a1:ec:
         1f:47:8a:77:58:ff:c7:38:cc:2a:4a:55:f9:b7:83:0e:22:39:
         df:33:24:d3:56:80:1d:5a:17:e6:d7:d9:4b:fd:dd:a4:20:c8:
         bb:dc:c2:b8:7c:27:b6:68:72:b0:35:67:f9:c5:72:18:68:5f:
         d5:5a:80:5a:fd:0d:07:21:69:42:95:e0:86:f2:0b:b4:9b:13:
         50:28:3d:c6:be:01:8b:2e:ce:73:93:0f:2d:ad:3a:7c:7f:7a:
         3b:14:4d:3f:78:d8:13:0c:13:be:1c:69:d8:04:87:e1:b9:ae:
         7d:72:d3:10:48:d2:52:87:ef:40:f6:79:f7:a9:f2:9a:7a:14:
         0f:16:63:e7:80:90:c5:d0:2e:4b:cf:86:b4:14:93:15:07:2f:
         0b:5f:39:04:3d:44:3e:42:0c:82:54:a6:d1:a0:95:f3:5d:a5:
         3b:f5:10:30:50:3e:55:82:83:4f:dd:34:c0:4f:92:5b:dc:6c:
         9a:fb:26:9a:54:73:05:3c:4e:82:fe:9b:a7:52:6d:cf:51:d4:
         d4:e3:18:d3:36:b8:37:7f:c5:f3:63:6e:66:46:9a:d7:e9:d5:
         fd:ac:3a:66:96:e7:c6:2e:e3:66:b5:42:8f:a0:66:63:a3:74:
         b3:7d:ae:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:47 2025 by rpki-client