Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/49249c03-cb9b-399f-a21b-87c0626554b1.roa
File:                     49249c03-cb9b-399f-a21b-87c0626554b1.roa (raw, json)
Hash identifier:          CO/YkdcbrsGzPq59LCmQ1wZy0nL4s3GM1sE1FnJICQk=
Subject key identifier:   22:8B:A9:67:AF:EC:E2:8A:D8:68:50:B7:7C:8A:BD:09:64:90:D1:6F
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584819CFC4A0275C63CD42A97700
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/49249c03-cb9b-399f-a21b-87c0626554b1.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     10584
IP address blocks:        47.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:c4:a0:27:5c:63:cd:42:a9:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=aa2e0da5-3d37-44bc-b2d4-dc4af663ac15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:1a:18:0a:99:27:20:90:f7:0a:96:ba:d8:
                    ff:07:6a:e8:e5:a5:61:50:d7:ec:84:e9:b7:d5:e7:
                    7d:8b:99:e2:ce:5f:da:07:76:19:7a:62:9c:8f:2f:
                    bf:14:16:0d:83:6a:50:12:a6:8e:40:cb:07:1c:72:
                    99:77:d5:4c:8d:7e:35:03:14:89:ac:48:20:a4:38:
                    e0:5f:67:62:13:4f:f6:f5:29:7e:39:21:8a:24:ff:
                    08:36:85:34:de:29:aa:11:8f:24:63:42:e0:47:7d:
                    1f:c4:f7:1c:46:64:4e:02:1c:76:2f:c8:01:a8:4c:
                    6e:ad:9c:b2:e9:9b:8b:c9:3f:76:29:c2:be:c6:c0:
                    3d:c9:a2:01:b0:6f:f0:66:8c:69:16:69:f3:35:94:
                    96:10:11:e8:14:e8:06:2e:24:e9:c7:4b:a8:e8:d1:
                    f3:df:db:3c:8a:2e:2b:0a:e8:b6:a5:89:21:5e:45:
                    2d:a3:02:2f:0d:73:bf:0d:a7:26:46:b1:34:f0:a1:
                    f5:8a:eb:96:8e:ec:78:ae:cd:b2:c7:4b:8c:bc:70:
                    27:c0:c4:c7:4d:a6:44:db:ca:fe:d1:c3:04:48:33:
                    c7:3f:b0:3d:05:70:06:a9:97:e8:79:42:22:32:78:
                    aa:d2:97:5a:be:bb:41:1c:92:3d:d0:23:e6:33:dd:
                    38:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8B:A9:67:AF:EC:E2:8A:D8:68:50:B7:7C:8A:BD:09:64:90:D1:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/49249c03-cb9b-399f-a21b-87c0626554b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:0a:6f:e1:c9:8e:5c:33:69:ce:d1:d3:48:14:51:fb:e7:3e:
         2a:a9:b0:f2:9f:9e:d5:98:e4:84:75:5b:f7:ef:00:5f:dd:0d:
         2c:87:c8:4f:e3:a5:68:58:48:4f:60:b3:cc:7a:f0:84:35:c1:
         17:49:c7:17:cd:d0:29:0d:ff:75:0f:b4:0a:1c:83:10:9e:9e:
         3d:7c:1f:43:d1:47:27:7a:af:b6:76:35:f3:63:be:fe:90:73:
         58:15:a5:9c:13:d1:1f:53:7f:c0:9f:fa:90:c4:78:72:aa:f3:
         d4:cf:3e:b3:ea:7e:90:8e:a6:b8:0b:c3:b6:a0:7c:f1:41:4e:
         1d:3b:02:23:e7:d7:cf:8a:84:d9:25:3d:ab:a0:cd:4e:3b:09:
         17:34:94:4d:8d:19:a2:0c:a5:a6:1f:61:4f:c3:68:7d:7a:03:
         38:ae:8a:fb:a4:6b:8f:1e:3e:90:a6:b2:a3:4b:d2:c3:ae:92:
         e5:0d:4d:92:dc:93:f0:b8:dc:93:db:41:5b:22:f2:4b:3f:de:
         e1:6a:91:7d:c8:43:22:38:07:06:79:2b:ab:84:37:e0:21:e7:
         dc:5c:81:02:b1:bc:96:8c:6d:ea:88:da:5f:25:e1:9c:83:72:
         07:e5:96:5a:b5:1a:b9:c6:0b:eb:14:b3:b3:f0:5e:45:50:4a:
         b8:41:3a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:55 2025 by rpki-client