Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/3e042176-14af-3ff3-9d26-030d297d912d.roa
File:                     3e042176-14af-3ff3-9d26-030d297d912d.roa (raw, json)
Hash identifier:          PBawCG4ycHYBiPDyNs2ZOXaMUiLjVZpZiLWWuBIRV1I=
Subject key identifier:   70:38:18:15:29:64:66:D5:88:77:71:49:66:92:48:D7:31:AD:D6:1B
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F432858459368C785F14320B333889440
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/3e042176-14af-3ff3-9d26-030d297d912d.roa
Signing time:             Wed 17 Apr 2024 13:00:34 +0000
ROA not before:           Wed 17 Apr 2024 13:00:34 +0000
ROA not after:            Tue 16 Jul 2024 13:00:34 +0000
asID:                     63397
IP address blocks:        47.19.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:93:68:c7:85:f1:43:20:b3:33:88:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Apr 17 13:00:34 2024 GMT
            Not After : Jul 16 13:00:34 2024 GMT
        Subject: CN=0ae4f98b-86fe-4cf9-a26a-8b117a6670eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f8:66:d1:3b:7c:a3:3c:47:ce:bb:30:f8:88:
                    e2:ea:5c:ee:38:bc:0d:ee:2d:4d:85:0e:48:2b:ee:
                    00:c9:86:a3:d4:6a:44:10:c6:bb:fe:32:47:e5:4f:
                    28:dc:50:a3:f6:c7:b1:60:2b:0f:91:55:4e:e6:46:
                    49:79:30:9c:61:7d:32:cf:57:6b:0b:76:ad:ee:5c:
                    75:bc:09:a8:4a:91:fe:df:c2:8e:e0:98:b3:8b:62:
                    ef:32:bc:86:ee:86:ee:9e:00:3f:2e:f2:61:e5:96:
                    b3:03:31:72:eb:1a:f5:b5:69:f8:bb:db:d3:a6:da:
                    09:3c:2a:99:8a:77:ed:2d:86:7c:d0:a8:22:65:28:
                    ee:66:5c:b2:4a:ce:14:79:2e:30:9e:92:3f:d4:40:
                    be:a0:65:5c:22:24:10:fb:99:81:c0:fc:d0:7d:95:
                    5a:1a:2c:d9:05:0f:6b:cd:7d:f4:66:6b:46:a4:b9:
                    7a:1c:1f:29:71:2a:20:66:b3:71:80:22:38:af:5f:
                    17:b8:ba:0a:15:ec:c0:7e:87:5d:56:ec:20:39:f8:
                    e2:0c:2f:50:5c:3b:4d:6b:00:59:b4:d2:1d:76:33:
                    35:0c:e8:d0:4a:71:fb:92:f5:1b:0f:6f:3f:98:50:
                    d7:1d:ec:80:11:8c:c3:dc:2e:cf:78:93:62:40:67:
                    f0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:38:18:15:29:64:66:D5:88:77:71:49:66:92:48:D7:31:AD:D6:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/3e042176-14af-3ff3-9d26-030d297d912d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:3b:5a:a3:d1:31:43:02:46:76:3d:5c:cb:e3:ea:01:74:60:
         cf:3f:98:01:0e:8e:2c:b1:fb:76:b3:18:c6:e9:22:94:59:ac:
         58:72:51:19:d7:55:44:23:78:c9:f7:81:4e:60:9d:df:1f:07:
         74:ed:4e:d1:c1:56:55:a0:e7:67:a3:61:89:15:62:fb:13:fb:
         eb:23:1b:e5:e5:a8:f6:c5:12:2c:9e:21:14:ac:49:e0:6f:81:
         a8:b6:39:ae:32:8a:8f:95:70:52:97:c4:3f:20:79:c1:8c:89:
         0b:8d:3e:0e:b8:19:0e:0b:cd:c1:27:07:4d:a8:dd:f7:a1:d4:
         c3:1c:8b:06:62:0e:2d:2b:d4:c6:ea:e0:1e:ca:32:1c:65:b4:
         a9:02:4d:17:31:3e:73:f5:24:98:65:98:4c:2d:f2:13:57:56:
         1f:70:4e:87:4c:e1:77:72:97:00:ea:b6:f9:b7:27:2d:79:3e:
         d7:9a:8a:bd:f8:10:52:02:8c:d2:56:92:cf:97:1b:41:75:d2:
         95:b9:cd:d1:cb:24:aa:ea:c2:08:f8:5f:bc:08:2f:92:53:8b:
         00:98:a2:bc:69:71:97:d6:a3:51:e5:c7:ff:a9:1f:05:81:93:
         2b:0c:05:90:c9:5a:7f:2c:31:41:1f:80:95:d7:10:da:7a:27:
         5f:b8:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:25:32 2024 by rpki-client on console-fra.rpki-client.org