Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/27f4285b-a323-321f-8a2d-3af0e31f159b.roa
File:                     27f4285b-a323-321f-8a2d-3af0e31f159b.roa (raw, json)
Hash identifier:          Dqj5kq/YrDkVKNZLM1C9pqA5U3RU81kMo68/RQN719w=
Subject key identifier:   C4:AD:AB:71:2D:F5:EB:96:37:1D:68:BD:6F:77:B2:AD:A7:1B:AA:31
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F432858491246AF79B43A01D603CF9CCC
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/27f4285b-a323-321f-8a2d-3af0e31f159b.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     22271
IP address blocks:        47.19.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:af:79:b4:3a:01:d6:03:cf:9c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=8a208aa8-9ae8-44ea-a97b-9fa3eecf1bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:10:41:cb:7f:61:20:aa:f1:9e:a5:78:0e:00:
                    f7:79:6b:06:98:71:9a:25:a6:11:41:e7:8e:82:2f:
                    f4:f9:32:23:2c:98:86:7e:ab:58:2c:4f:7b:f2:2e:
                    5c:67:76:3f:22:d7:1b:61:55:2c:16:99:95:f6:67:
                    ff:46:6f:99:44:6d:80:0b:b7:09:ef:11:a7:b8:69:
                    b4:cd:d2:9d:98:65:9b:4c:f8:9e:0a:c2:58:76:7e:
                    92:53:37:25:f9:fd:a1:d0:2d:39:3d:e6:19:8b:e5:
                    6a:ee:68:f7:b7:e9:ba:23:47:86:f7:57:82:7d:f7:
                    43:22:c5:4b:bd:eb:2d:9b:a8:08:66:ce:22:81:c3:
                    e0:1c:d2:86:ce:c7:d5:b9:a1:21:4d:b0:d1:dd:c0:
                    84:31:f7:f2:f7:a8:03:1e:f7:d8:f6:ec:aa:3b:65:
                    7b:b0:55:07:50:49:5c:3a:00:0c:4c:5c:58:91:4c:
                    c1:c0:e4:fb:a0:ee:ad:1a:94:21:c2:92:de:69:2f:
                    7e:fe:18:b6:d0:4a:1d:54:a0:ff:6b:ca:68:30:da:
                    0d:45:d0:c4:7e:bc:42:b6:cf:d5:0a:0c:6c:68:2e:
                    26:d1:2c:14:2c:9f:93:27:58:ab:69:22:7c:9c:b2:
                    23:ae:f6:03:8d:ef:67:24:aa:2d:77:e0:0f:60:62:
                    b8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AD:AB:71:2D:F5:EB:96:37:1D:68:BD:6F:77:B2:AD:A7:1B:AA:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/27f4285b-a323-321f-8a2d-3af0e31f159b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:eb:35:31:a3:be:57:22:12:07:c0:ca:f4:8c:6f:11:8c:a8:
         32:4d:0c:bf:b1:e3:c1:8d:e3:b8:c6:da:19:d1:52:7a:23:b1:
         fc:3d:d4:2e:68:0a:97:a5:ef:36:ff:67:57:ed:2d:71:64:e6:
         c1:0f:82:49:12:d4:83:53:87:8d:9e:21:97:84:f8:dd:cd:5a:
         40:8a:89:db:26:48:85:7b:6e:91:13:49:f7:35:09:da:73:8b:
         59:45:ca:c2:70:0a:60:a2:67:55:bb:b1:40:77:c0:16:c1:38:
         5c:33:a4:20:e5:51:e8:f7:89:4d:1c:02:b3:f3:50:02:da:92:
         90:3b:3f:75:ee:ab:08:3d:97:a3:c2:63:0e:ea:c9:17:ce:5f:
         d9:a7:79:b9:fa:4e:ef:6d:2e:06:f5:70:d2:ac:f0:0d:66:86:
         59:83:93:0c:36:f2:00:06:46:30:7e:31:df:ae:aa:bd:8b:ab:
         00:9e:48:2d:54:92:65:86:29:25:63:a2:87:bb:0a:25:e5:2b:
         df:04:88:84:c3:d0:3c:30:3d:6e:17:51:ce:e4:43:43:8a:e2:
         69:3c:c3:ef:01:96:ab:30:bf:6b:00:cd:d3:7d:20:2d:b6:67:
         a4:d4:43:b4:85:e5:f3:e1:51:a6:4b:c9:a7:5b:f5:22:3e:a2:
         7c:82:a0:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRq95tDoB1gPPnMwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDU0NmIzZWUtMWYxMS00NTI1LTg1NzYtZjIzOGExOWZi
N2JhMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
OGEyMDhhYTgtOWFlOC00NGVhLWE5N2ItOWZhM2VlY2YxYmNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphBBy39hIKrxnqV4DgD3eWsGmHGaJaYRQeeO
gi/0+TIjLJiGfqtYLE978i5cZ3Y/ItcbYVUsFpmV9mf/Rm+ZRG2AC7cJ7xGnuGm0
zdKdmGWbTPieCsJYdn6SUzcl+f2h0C05PeYZi+Vq7mj3t+m6I0eG91eCffdDIsVL
vestm6gIZs4igcPgHNKGzsfVuaEhTbDR3cCEMffy96gDHvfY9uyqO2V7sFUHUElc
OgAMTFxYkUzBwOT7oO6tGpQhwpLeaS9+/hi20EodVKD/a8poMNoNRdDEfrxCts/V
CgxsaC4m0SwULJ+TJ1iraSJ8nLIjrvYDje9nJKotd+APYGK4YQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMStq3Et9euWNx1ovW93sq2nG6oxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2
YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4YTE5ZmI3YmEvMjdmNDI4NWItYTMyMy0z
MjFmLThhMmQtM2FmMGUzMWYxNTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDU0NmIzZWUtMWYxMS00NTI1LTg1
NzYtZjIzOGExOWZiN2JhLzA1NDZiM2VlLTFmMTEtNDUyNS04NTc2LWYyMzhhMTlm
YjdiYS5jcmwwHwYDVR0jBBgwFoAUS2BVW9iQXvtZnH3Rgkxp+tbjJ2UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4
YTE5ZmI3YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALxNWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKXrNTGjvlciEgfAyvSMbxGMqDJNDL+x48GN47jG2hnRUnojsfw91C5o
Cpel7zb/Z1ftLXFk5sEPgkkS1INTh42eIZeE+N3NWkCKidsmSIV7bpETSfc1Cdpz
i1lFysJwCmCiZ1W7sUB3wBbBOFwzpCDlUej3iU0cArPzUALakpA7P3Xuqwg9l6PC
Yw7qyRfOX9mnebn6Tu9tLgb1cNKs8A1mhlmDkww28gAGRjB+Md+uqr2LqwCeSC1U
kmWGKSVjooe7CiXlK98EiITD0DwwPW4XUc7kQ0OK4mk8w+8Blqswv2sAzdN9IC22
Z6TUQ7SF5fPhUaZLyadb9SI+onyCoMY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:26:59 2025 by rpki-client