Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/453e5d8c-1f70-34ea-bfd1-a2f75ec32e36.roa
File:                     453e5d8c-1f70-34ea-bfd1-a2f75ec32e36.roa (raw, json)
Hash identifier:          JjHBmNJ2MCEueDziTMkD+p9pSbHisMEkpdSDwgEJV5s=
Subject key identifier:   08:4B:18:A4:F8:C7:FF:9D:7A:A8:CE:3D:AE:FF:B8:79:AE:00:D9:5B
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584812D52D5CF6F274E64B9FC440
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/453e5d8c-1f70-34ea-bfd1-a2f75ec32e36.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     63378
IP address blocks:        47.19.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:2d:5c:f6:f2:74:e6:4b:9f:c4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=b37f1288-7a60-46b4-8706-e67d3eef3b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:6f:be:cd:7e:ab:ef:92:ac:7b:bd:ff:39:
                    89:7a:2e:57:44:ba:9d:0c:6c:99:cf:da:f7:dd:49:
                    cb:72:4c:e4:0a:fe:f8:9f:62:47:a4:53:b6:58:24:
                    8e:33:b2:ce:af:87:a2:29:ec:ba:db:cb:f8:5a:7c:
                    16:18:d6:b3:b1:7b:41:a7:97:59:36:46:8c:d2:7e:
                    c7:54:9d:02:f0:1a:24:05:be:f0:ba:d7:63:a3:a5:
                    7d:ea:91:fd:2e:c5:45:ad:27:b8:0d:5b:ea:4c:61:
                    6a:7b:2b:1a:e2:b7:a6:8d:33:9e:7c:33:47:21:6c:
                    c4:a5:87:f3:bd:dd:40:16:95:aa:ec:95:93:8c:15:
                    e3:ee:36:b1:ce:23:b6:31:b3:58:a7:dd:b1:2f:5f:
                    31:0b:c5:c2:c9:4e:cc:af:bc:19:7f:03:f2:4e:8f:
                    94:83:e9:bd:f2:8f:cc:04:6b:7e:41:b5:f3:f1:43:
                    cb:5b:2e:ee:76:c4:5d:58:38:b6:e3:74:41:6c:ac:
                    12:3c:79:e3:25:e4:73:88:72:39:a9:62:8e:55:8a:
                    34:61:c5:a6:5d:14:dd:8b:9f:a7:af:fb:9e:69:ad:
                    58:86:c3:fe:19:b9:2b:b9:d6:03:3e:c6:ac:a6:ae:
                    35:73:44:7c:04:e5:95:cb:4e:f7:c3:8f:5f:a7:ac:
                    44:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:4B:18:A4:F8:C7:FF:9D:7A:A8:CE:3D:AE:FF:B8:79:AE:00:D9:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/453e5d8c-1f70-34ea-bfd1-a2f75ec32e36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:9b:0e:87:dc:ec:f7:32:30:3c:89:f3:18:b1:1f:ee:ec:74:
         b5:f8:aa:4b:10:7a:26:63:ab:c1:8a:28:cc:99:d7:10:d6:64:
         45:52:ae:cf:5b:dd:63:2a:37:4c:08:fd:05:9f:45:e7:ee:70:
         bf:e0:a9:fd:ba:a9:8a:b9:e8:e5:a8:c3:c8:26:8c:c5:b3:29:
         88:6b:23:6c:0f:32:4d:50:68:4e:e3:53:f4:e1:67:f4:ab:0a:
         e5:1d:61:4c:d5:23:fb:bd:fe:fb:16:45:ff:2c:36:60:a1:21:
         95:c5:3d:b9:3f:49:42:85:09:98:88:7c:21:08:f9:4b:e8:a4:
         e4:03:5a:cc:5a:2e:47:f2:5a:c2:ed:71:95:6b:64:3c:ab:b7:
         42:6a:f4:70:65:c5:21:a1:2c:35:23:6d:4d:09:74:3b:5d:a1:
         ff:6b:de:3e:ba:ae:e7:54:17:56:02:38:dd:6f:c8:ae:09:44:
         49:fb:db:71:6c:7c:be:02:b0:25:1d:bd:48:34:3b:1b:4d:09:
         97:bf:05:66:08:d7:6b:9a:89:58:e1:47:df:a9:cd:fd:8d:64:
         90:2d:5d:a3:4e:2f:0a:b8:a0:f1:15:1b:49:33:fb:ee:b8:4b:
         10:43:67:36:4f:d4:1a:84:44:9e:6c:65:52:00:f6:46:eb:03:
         88:a1:92:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgS1S1c9vJ05kufxEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDU0NmIzZWUtMWYxMS00NTI1LTg1NzYtZjIzOGExOWZi
N2JhMB4XDTI0MTIwMjE0MDA1MVoXDTI1MDMwMjE0MDA1MVowLzEtMCsGA1UEAxMk
YjM3ZjEyODgtN2E2MC00NmI0LTg3MDYtZTY3ZDNlZWYzYjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdZvvs1+q++SrHu9/zmJei5XRLqdDGyZz9r3
3UnLckzkCv74n2JHpFO2WCSOM7LOr4eiKey628v4WnwWGNazsXtBp5dZNkaM0n7H
VJ0C8BokBb7wutdjo6V96pH9LsVFrSe4DVvqTGFqeysa4remjTOefDNHIWzEpYfz
vd1AFpWq7JWTjBXj7jaxziO2MbNYp92xL18xC8XCyU7Mr7wZfwPyTo+Ug+m98o/M
BGt+QbXz8UPLWy7udsRdWDi243RBbKwSPHnjJeRziHI5qWKOVYo0YcWmXRTdi5+n
r/ueaa1YhsP+GbkrudYDPsaspq41c0R8BOWVy073w49fp6xElwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAhLGKT4x/+deqjOPa7/uHmuANlbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2
YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4YTE5ZmI3YmEvNDUzZTVkOGMtMWY3MC0z
NGVhLWJmZDEtYTJmNzVlYzMyZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDU0NmIzZWUtMWYxMS00NTI1LTg1
NzYtZjIzOGExOWZiN2JhLzA1NDZiM2VlLTFmMTEtNDUyNS04NTc2LWYyMzhhMTlm
YjdiYS5jcmwwHwYDVR0jBBgwFoAUS2BVW9iQXvtZnH3Rgkxp+tbjJ2UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4
YTE5ZmI3YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALxOcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAKbDofc7PcyMDyJ8xixH+7sdLX4qksQeiZjq8GKKMyZ1xDWZEVSrs9b
3WMqN0wI/QWfRefucL/gqf26qYq56OWow8gmjMWzKYhrI2wPMk1QaE7jU/ThZ/Sr
CuUdYUzVI/u9/vsWRf8sNmChIZXFPbk/SUKFCZiIfCEI+UvopOQDWsxaLkfyWsLt
cZVrZDyrt0Jq9HBlxSGhLDUjbU0JdDtdof9r3j66rudUF1YCON1vyK4JREn723Fs
fL4CsCUdvUg0OxtNCZe/BWYI12uaiVjhR9+pzf2NZJAtXaNOLwq4oPEVG0kz++64
SxBDZzZP1BqERJ5sZVIA9kbrA4ihku8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:02 2025 by rpki-client