Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/b7b68721-0087-353a-8208-f878575e0c80.roa
File:                     b7b68721-0087-353a-8208-f878575e0c80.roa (raw, json)
Hash identifier:          1PAo06uSxC6EQru+42hyh90GWf2hVw2Bv+8APCDSA+s=
Subject key identifier:   22:31:F0:67:78:31:18:E8:56:C7:9E:F4:46:CF:35:DE:AC:04:15:7B
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F432858473FF0919F0D4E412D39487600
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/b7b68721-0087-353a-8208-f878575e0c80.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     6102
IP address blocks:        47.19.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:91:9f:0d:4e:41:2d:39:48:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=0ee56e5b-7d80-4f00-afc8-40063997e58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:07:80:64:09:a8:84:22:46:e0:60:5c:c0:
                    9c:16:52:eb:5d:a7:d0:ab:b9:19:46:fe:29:36:ba:
                    6d:f4:af:a4:9e:b5:ea:89:95:17:c7:c7:56:ed:59:
                    a9:c5:55:1c:9a:ba:63:9f:32:08:91:72:16:cc:cb:
                    03:db:d4:80:42:cd:a7:02:c2:b7:3c:24:72:f2:1d:
                    d2:82:69:4a:92:52:73:6b:2b:b5:fc:cc:9a:a9:fb:
                    e6:01:de:b1:b1:da:0a:63:d1:d9:bb:ef:13:6b:20:
                    2c:30:73:3d:61:f8:74:1b:c3:c8:a8:3a:71:de:41:
                    d2:82:cb:7a:1a:51:06:03:2f:65:ac:d5:2a:32:3d:
                    a4:6a:1d:75:21:a4:9d:7a:13:ff:ad:98:d8:cb:f9:
                    db:54:30:0c:58:be:01:74:c8:30:0c:d2:c2:23:37:
                    10:4b:26:c1:92:fe:eb:5d:28:83:ad:33:61:fc:b6:
                    fa:43:47:ab:42:62:40:46:92:4c:aa:1b:95:38:d2:
                    98:a7:08:54:19:42:92:06:32:a7:82:94:a8:aa:41:
                    a1:3b:5f:8f:1a:d0:4f:24:c7:3f:9a:db:16:c9:eb:
                    1a:07:bd:79:32:f8:73:fe:ee:16:9c:dc:eb:5e:3b:
                    7b:cf:0a:bd:3e:92:3c:67:98:98:39:98:1c:32:61:
                    14:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:31:F0:67:78:31:18:E8:56:C7:9E:F4:46:CF:35:DE:AC:04:15:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/b7b68721-0087-353a-8208-f878575e0c80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:d4:fd:5c:97:5f:89:86:8e:b8:42:8d:00:6d:a9:e9:50:30:
         b2:f5:db:b4:2c:94:93:91:3c:d7:00:08:da:9a:d9:d5:97:78:
         69:ba:9b:95:a1:2b:d9:c3:51:dc:75:cd:39:fe:b3:d6:8b:08:
         10:d2:ca:10:ea:d5:fc:04:89:e9:69:73:a2:07:31:54:f7:d5:
         4f:bb:e0:e9:30:79:bd:bf:9d:b0:46:2e:95:7e:6c:21:59:c2:
         f3:e1:d1:75:28:ce:51:ad:c4:a6:91:f8:65:56:de:72:f3:ae:
         35:f5:27:18:02:8a:48:60:05:d0:72:59:d3:5b:63:8f:ad:45:
         a6:cb:88:e2:d7:64:76:ec:2b:64:0a:48:89:6d:3e:a2:94:3e:
         2a:76:05:87:d2:13:c2:97:1f:3e:20:c4:59:aa:6f:6f:c3:ea:
         d6:94:cb:82:a8:2a:ff:2d:c4:3e:6a:38:5c:8c:6b:c5:9c:cc:
         5c:3f:1a:ac:86:7a:94:65:ef:d7:27:a0:fd:ea:27:30:77:f6:
         b4:a7:9e:2d:7d:ce:81:27:19:d1:70:06:74:bc:89:88:cf:da:
         41:c1:8a:fa:b8:89:9f:2e:5e:49:63:84:89:97:82:e1:72:1a:
         32:ca:47:7e:a9:b1:d1:5b:8c:f9:01:74:c2:8c:37:61:0d:6c:
         85:e3:d7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:59 2024 by rpki-client on console-ams.rpki-client.org