Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/c05b3c5b-2714-397b-ba60-6738fd712ce1.roa
File:                     c05b3c5b-2714-397b-ba60-6738fd712ce1.roa (raw, json)
Hash identifier:          IClVpwXP7hgVXMdZLhYuuNP1DGlj88RCLtm2TlreWc0=
Subject key identifier:   1C:EA:8F:05:05:83:B2:58:F1:FB:A9:6E:73:85:3C:4F:17:98:82:91
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F4328584A6DBB426B0D306C866A90BA00
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/c05b3c5b-2714-397b-ba60-6738fd712ce1.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     62802
IP address blocks:        47.19.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:42:6b:0d:30:6c:86:6a:90:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=f5d91d5c-df19-45bb-89e5-042a02ae9e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:6a:51:71:f3:f9:0f:a9:fc:0f:66:68:a0:
                    67:9c:72:04:8f:b5:e7:37:9f:7b:93:58:b3:e6:e2:
                    f7:57:b1:51:fd:46:70:ab:27:c3:b4:ba:d3:94:98:
                    98:c4:6c:ba:f9:86:50:c3:f2:54:64:a8:f7:46:ac:
                    22:56:83:f7:e9:61:08:d7:0d:2a:a4:47:8f:60:e4:
                    d1:92:49:45:e8:84:6e:9b:4a:3a:21:4f:59:70:24:
                    c3:38:7c:94:dd:d3:fd:c8:66:70:40:57:4d:0d:86:
                    e3:57:21:ad:17:d1:cb:31:b2:66:58:cd:31:44:e7:
                    1f:6b:69:d6:00:94:8c:9a:b1:05:b1:a3:51:cd:a7:
                    80:83:42:87:ef:39:3f:de:ed:c5:6a:aa:85:34:8f:
                    75:d1:71:23:88:39:36:42:52:db:f9:64:12:3f:f7:
                    96:93:0f:a2:9f:1f:9f:41:16:39:ac:4c:d6:79:84:
                    d1:75:0e:43:5f:95:84:2d:fb:25:f6:d1:1b:63:56:
                    10:3b:8c:92:20:e1:1e:cc:e5:d2:d0:3d:dc:f6:0c:
                    96:4d:34:6c:40:57:6a:f7:02:0d:3f:9c:c3:27:69:
                    97:ad:73:26:51:ff:b1:f0:d9:e6:d7:98:76:40:01:
                    2f:15:e0:e0:0a:19:87:4f:2c:b7:94:2d:6c:98:c1:
                    fb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EA:8F:05:05:83:B2:58:F1:FB:A9:6E:73:85:3C:4F:17:98:82:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/c05b3c5b-2714-397b-ba60-6738fd712ce1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:59:48:90:a3:27:b4:0e:27:02:9f:19:5f:b9:1a:87:e7:bc:
         a3:c5:c8:2d:1d:4b:a7:a8:c2:a7:dd:0e:99:df:eb:02:14:e1:
         ed:78:6a:c0:50:9b:88:2e:65:60:69:79:67:80:b7:47:7c:e6:
         d2:32:d5:1c:4a:3c:bf:c5:37:9d:7c:df:ad:73:d2:03:65:82:
         47:43:70:f6:1e:c5:6d:47:ee:0d:7e:2d:b0:41:58:4f:c0:23:
         40:f3:83:7f:9b:b5:1a:ec:89:27:59:93:68:d9:5f:28:d7:a7:
         4f:5c:1c:aa:01:9d:a7:28:bf:7a:6c:04:58:57:b7:22:d7:98:
         69:c2:24:9e:d4:eb:f0:6b:72:56:07:a7:55:fb:17:95:00:5b:
         a9:42:38:94:c1:46:49:5c:8d:93:95:68:1f:f2:96:c7:6a:bb:
         98:8f:d2:67:b3:5d:ba:45:4d:63:55:fd:11:99:61:63:2e:99:
         8d:ab:78:5d:31:07:3d:72:c6:da:6f:28:65:ae:c7:e7:bb:d9:
         c2:11:7c:c3:a4:45:66:d5:bf:d5:71:e8:55:87:9d:e8:15:10:
         ab:d7:3f:41:a0:fa:99:1c:74:3d:a0:c0:81:46:f3:62:f7:5f:
         7a:c5:9a:d4:3e:1c:8d:7a:95:37:09:8a:a2:e8:8e:78:05:8e:
         27:2e:b2:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0JrDTBshmqQugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDU0NmIzZWUtMWYxMS00NTI1LTg1NzYtZjIzOGExOWZi
N2JhMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
ZjVkOTFkNWMtZGYxOS00NWJiLTg5ZTUtMDQyYTAyYWU5ZTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOhqUXHz+Q+p/A9maKBnnHIEj7XnN597k1iz
5uL3V7FR/UZwqyfDtLrTlJiYxGy6+YZQw/JUZKj3RqwiVoP36WEI1w0qpEePYOTR
kklF6IRum0o6IU9ZcCTDOHyU3dP9yGZwQFdNDYbjVyGtF9HLMbJmWM0xROcfa2nW
AJSMmrEFsaNRzaeAg0KH7zk/3u3FaqqFNI910XEjiDk2QlLb+WQSP/eWkw+inx+f
QRY5rEzWeYTRdQ5DX5WELfsl9tEbY1YQO4ySIOEezOXS0D3c9gyWTTRsQFdq9wIN
P5zDJ2mXrXMmUf+x8Nnm15h2QAEvFeDgChmHTyy3lC1smMH74QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBzqjwUFg7JY8fupbnOFPE8XmIKRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2
YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4YTE5ZmI3YmEvYzA1YjNjNWItMjcxNC0z
OTdiLWJhNjAtNjczOGZkNzEyY2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDU0NmIzZWUtMWYxMS00NTI1LTg1
NzYtZjIzOGExOWZiN2JhLzA1NDZiM2VlLTFmMTEtNDUyNS04NTc2LWYyMzhhMTlm
YjdiYS5jcmwwHwYDVR0jBBgwFoAUS2BVW9iQXvtZnH3Rgkxp+tbjJ2UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wNTQ2YjNlZS0xZjExLTQ1MjUtODU3Ni1mMjM4
YTE5ZmI3YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALxPRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChZSJCjJ7QOJwKfGV+5GofnvKPFyC0dS6eowqfdDpnf6wIU4e14asBQ
m4guZWBpeWeAt0d85tIy1RxKPL/FN518361z0gNlgkdDcPYexW1H7g1+LbBBWE/A
I0Dzg3+btRrsiSdZk2jZXyjXp09cHKoBnacov3psBFhXtyLXmGnCJJ7U6/BrclYH
p1X7F5UAW6lCOJTBRklcjZOVaB/ylsdqu5iP0mezXbpFTWNV/RGZYWMumY2reF0x
Bz1yxtpvKGWux+e72cIRfMOkRWbVv9Vx6FWHnegVEKvXP0Gg+pkcdD2gwIFG82L3
X3rFmtQ+HI16lTcJiqLojngFjicusgs=
-----END CERTIFICATE-----
Generated at Thu Jul 10 03:53:58 2025 by rpki-client