Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/229b3eb8-cc83-36e3-8245-cfd2bba4f1fc.roa
File:                     229b3eb8-cc83-36e3-8245-cfd2bba4f1fc.roa (raw, json)
Hash identifier:          L45zDQ1cueitJX9cgM+zvcd33yv0A6t7ACD/Gj08+Dw=
Subject key identifier:   25:75:DC:3F:7B:73:64:13:A7:30:7A:13:30:0F:14:9A:FD:EF:0D:41
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584823954F16367EFA4F47C13A55
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/229b3eb8-cc83-36e3-8245-cfd2bba4f1fc.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     6128
IP address blocks:        47.16.0.0/15 maxlen: 24
                          47.18.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:4f:16:36:7e:fa:4f:47:c1:3a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=e97679fc-4fc9-4b03-8b9f-1161bf6a49c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3d:11:4e:e2:7b:f6:da:60:5a:b0:fe:55:9e:
                    98:ce:9f:98:b8:47:03:8b:36:90:cb:61:40:69:c1:
                    1c:c4:99:ff:a2:84:ee:d7:ef:b6:f6:bd:ed:90:89:
                    98:3b:f7:7b:cc:f0:9d:67:04:01:da:70:65:ea:cc:
                    c1:4f:5c:f8:4a:db:da:39:3f:58:d1:ac:78:9e:4b:
                    c4:b6:44:97:a3:fc:33:85:fc:db:41:45:c9:56:46:
                    ae:29:8e:84:7c:a4:9e:79:ec:38:09:98:b2:66:94:
                    22:60:fa:94:40:51:8d:d8:28:cc:38:8f:1a:5e:4f:
                    f5:47:0c:23:29:2f:63:71:f4:fc:b7:06:ae:56:85:
                    61:fb:e5:56:57:fe:74:15:5f:93:de:bb:1f:af:78:
                    25:e2:26:24:8d:f9:7c:c5:80:db:75:b0:67:67:44:
                    eb:fd:d7:bf:fa:b1:ca:81:c1:bf:30:39:94:1e:f3:
                    0b:de:23:31:a3:24:54:88:de:74:a9:05:64:e4:9f:
                    ca:92:97:0b:f3:e4:b2:cd:7d:7f:e7:c2:44:20:6f:
                    f3:52:b8:00:09:e6:f1:dc:10:5c:bb:51:c3:a9:63:
                    96:f5:1c:0f:0c:4e:e7:6f:ae:d7:c3:bf:d0:fb:82:
                    6e:45:6f:3c:e6:26:37:5f:3c:38:49:a2:c8:88:59:
                    15:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:75:DC:3F:7B:73:64:13:A7:30:7A:13:30:0F:14:9A:FD:EF:0D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/229b3eb8-cc83-36e3-8245-cfd2bba4f1fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.16.0.0-47.18.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:d4:f3:db:da:59:93:2a:38:70:1a:0e:86:2a:65:98:79:24:
         df:98:f9:3b:7a:c5:c6:35:c6:c7:e9:8f:07:0f:f4:d6:f4:36:
         0b:6b:a2:c4:36:d0:a4:ba:9c:f6:ff:5f:df:45:1f:6f:43:73:
         64:a9:a8:9c:14:35:63:3d:f0:f9:d9:1f:90:7f:17:cd:26:d9:
         fa:43:00:9c:95:25:28:2b:25:b7:dc:17:32:76:1f:47:51:70:
         0c:96:46:9e:87:f6:7f:20:0e:47:83:bb:42:86:6e:01:ae:4f:
         fd:a4:67:fa:85:d2:a4:e8:72:2e:c0:a1:21:ab:22:0a:3b:c4:
         b1:ff:96:f9:d8:79:3a:56:c0:fe:6e:4a:12:ca:69:48:01:64:
         08:39:72:db:1d:f2:15:55:36:a1:b0:d0:77:d6:15:a4:b2:01:
         ac:1b:c3:0e:92:c0:9f:e2:87:bb:41:5b:c8:a4:96:44:fa:68:
         f4:0e:2b:f6:f5:8c:29:dd:05:f7:55:24:4a:7c:76:ec:33:68:
         ad:a1:5a:ab:c1:1e:f6:c3:97:ca:94:8d:a0:61:35:fb:53:bb:
         7e:a1:c2:d7:a8:2d:6b:f7:70:85:9f:ee:d4:9c:41:77:e4:10:
         be:93:57:c5:ba:da:60:35:e6:8e:09:bc:2d:fd:02:6a:c1:87:
         4b:5a:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:15 2025 by rpki-client