Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/67b9ff28-853f-3dbd-a917-29952b8649ea.roa
File:                     67b9ff28-853f-3dbd-a917-29952b8649ea.roa (raw, json)
Hash identifier:          MQCztM9ZS3ROdvOqGKnp/6e+9uvm8WCdQM1HmJW0CYU=
Subject key identifier:   2F:F0:96:DD:AA:C3:97:A5:0C:36:30:3B:E2:55:7E:F0:62:0B:55:15
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584A5FC5DA459DEC0FF33712A900
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/67b9ff28-853f-3dbd-a917-29952b8649ea.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     46183
IP address blocks:        47.19.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:da:45:9d:ec:0f:f3:37:12:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=bab3dc59-8846-4949-bc4b-81e93c7f24ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6c:9c:b3:6b:9d:91:5b:51:e1:c5:0a:ec:88:
                    da:4d:c9:59:05:c9:36:57:f8:4d:c8:2b:00:86:46:
                    80:17:e8:c0:33:a9:9f:18:de:99:b2:28:99:23:b1:
                    8d:1d:ed:42:69:5f:95:01:83:e7:03:17:da:08:fd:
                    7c:ee:f0:7d:e3:76:dd:8a:f6:04:77:1c:8f:39:1d:
                    da:be:72:35:2a:44:76:27:e3:f5:7f:16:0f:3e:aa:
                    a7:7a:af:c2:df:c8:8a:e1:cd:6a:7c:75:7e:f8:5b:
                    c4:13:29:04:70:c7:cb:d0:19:f4:79:12:7a:fd:48:
                    a1:4a:4a:7e:63:43:b2:66:8d:e8:51:a1:ac:9c:af:
                    0b:18:c1:a3:5d:da:0e:64:e7:06:c2:c6:d8:d2:44:
                    66:88:06:dd:21:34:bd:a8:db:77:07:60:0f:45:60:
                    9e:07:e7:7c:c0:ef:eb:c2:e7:db:aa:16:2e:11:9d:
                    3b:a3:ba:ce:2a:78:c8:f1:cf:68:7f:99:9b:b2:4f:
                    f6:b5:c8:95:a4:c9:d1:f5:66:81:15:68:24:0c:ed:
                    c6:04:6f:6c:0a:a1:b4:7a:ca:46:f1:be:e1:ff:bf:
                    54:8a:36:c8:94:0a:bf:b9:1c:97:36:fc:4e:e4:07:
                    f0:31:c4:64:da:ee:db:a6:b2:4b:aa:0d:63:aa:70:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F0:96:DD:AA:C3:97:A5:0C:36:30:3B:E2:55:7E:F0:62:0B:55:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/67b9ff28-853f-3dbd-a917-29952b8649ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:00:b3:25:a2:39:22:e9:c6:ab:57:f3:fe:f3:2b:14:7a:e7:
         26:1e:dd:a3:22:61:24:00:fb:5f:e4:89:f1:0c:0a:4d:47:9f:
         3b:39:fe:6e:f2:86:1f:63:90:02:16:91:1f:65:7e:59:ce:32:
         43:95:06:9e:83:2b:6b:2a:cd:92:94:52:69:70:22:f5:2b:c4:
         66:0d:47:45:87:73:c0:c7:3e:91:00:d2:94:d2:83:4e:76:39:
         18:41:fe:a0:5a:13:ee:4f:5e:7f:5d:06:f7:2c:bd:5e:8d:06:
         62:61:8b:16:19:fd:9d:90:bb:d8:01:cb:a9:38:a2:3e:ae:dd:
         20:0c:f0:0a:77:53:87:d8:fb:c9:de:5a:5b:48:01:17:29:19:
         dd:d9:f2:9e:fd:d6:53:d5:2f:fb:01:77:d6:33:5d:b9:97:25:
         67:e8:34:0e:25:21:f6:51:61:b8:90:62:9a:ce:06:c8:f9:3a:
         4a:61:3f:a6:16:57:39:59:42:70:16:7d:83:cb:f6:58:27:62:
         72:3d:17:96:04:9d:c6:09:30:4a:fd:85:6d:65:b2:d5:df:fe:
         eb:f6:75:c8:6d:1b:71:8e:f4:af:9d:78:a5:cd:e3:aa:00:d6:
         18:aa:b4:4e:13:d5:b1:d1:64:86:07:81:a0:72:04:cd:76:ed:
         57:9a:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 03:39:43 2025 by rpki-client