Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/c06834c1-05d6-3d91-9fb4-f8256a5edbd0.roa
File:                     c06834c1-05d6-3d91-9fb4-f8256a5edbd0.roa (raw, json)
Hash identifier:          MfdPnLJwFggvQjSdzA9u3yNJJ2EubiF4gNA6pDazLrM=
Subject key identifier:   81:6A:FC:EB:03:B4:19:CC:72:83:C0:29:41:54:57:E8:E0:FC:8E:3C
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F432858485F9AE134EEDB12C390D09140
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/c06834c1-05d6-3d91-9fb4-f8256a5edbd0.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     54004
IP address blocks:        47.19.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:e1:34:ee:db:12:c3:90:d0:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=1b0eb5c4-c059-41aa-a055-fbbdf1c92f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ec:6c:4d:9a:bc:60:2c:fa:92:f0:d8:6f:b2:
                    8b:fe:17:f4:5b:25:c0:a5:6d:67:82:2a:90:35:25:
                    e6:3b:90:97:b5:a5:f8:51:d2:62:f8:19:8c:88:a4:
                    23:9a:a9:05:17:96:f0:79:5d:16:74:1d:48:e6:eb:
                    cf:5e:87:6d:b3:24:37:fa:f9:c6:6d:2e:5b:63:3e:
                    73:e9:bc:3a:39:a6:9b:91:17:3d:f6:22:e7:c4:95:
                    4d:08:d5:54:8f:22:e8:e3:c8:d7:36:7d:7c:ce:12:
                    f4:5f:3e:22:5f:63:16:b0:f7:89:ad:1e:9c:f3:e4:
                    77:34:92:f1:ff:dd:af:0d:f5:cc:65:e1:e2:d8:91:
                    6b:11:04:ab:9c:c0:69:20:64:8d:be:b4:5a:c5:17:
                    4f:db:77:5a:c0:ba:73:e8:f2:62:ea:9c:11:07:93:
                    83:91:0d:05:3d:59:81:71:13:92:84:7a:d9:37:88:
                    39:1a:62:8f:53:fc:22:73:0f:5b:fc:4c:34:46:50:
                    e1:6f:82:8b:14:f7:50:cc:d2:bb:7c:68:7b:22:1f:
                    5f:40:d7:11:22:42:05:74:f4:24:cb:d7:90:87:bd:
                    48:da:e6:7d:cd:2e:c2:16:a3:5a:e8:ef:d9:3f:cf:
                    cf:37:0c:fc:5e:4f:18:e5:cd:d1:a4:a9:93:76:ec:
                    a4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6A:FC:EB:03:B4:19:CC:72:83:C0:29:41:54:57:E8:E0:FC:8E:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/c06834c1-05d6-3d91-9fb4-f8256a5edbd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:22:86:08:d2:83:8a:da:42:e0:a6:ef:42:6d:4f:d6:7a:40:
         07:06:55:a9:32:79:d9:1c:26:bb:14:d9:84:20:0b:d2:37:1a:
         be:fb:9e:7f:79:cd:ee:59:c2:8a:3e:10:24:a9:b0:29:bc:a5:
         98:d3:c6:ff:ce:74:b7:37:a0:d9:87:74:0a:ec:29:e6:52:8e:
         b4:98:4d:45:67:15:d3:d7:a0:8d:7b:6c:c1:42:e9:72:d8:7e:
         fc:20:db:65:7a:ab:7b:5f:ed:b0:8e:d7:f7:79:89:c8:22:ba:
         18:63:dc:fd:7f:d9:6a:34:c4:17:86:fd:05:24:db:99:75:b3:
         d0:78:2e:15:64:de:9f:b5:f8:1b:b1:1b:c7:6a:50:a8:bd:84:
         20:8a:e7:c7:55:76:0a:b0:d2:14:7d:ef:5b:27:09:80:0c:82:
         75:1f:62:74:c0:46:48:7a:29:05:43:79:6a:83:8a:78:60:87:
         7b:eb:b2:2c:cc:41:41:a8:8b:78:1c:e1:d8:f9:4e:cd:8b:37:
         89:24:51:4a:36:02:1e:8f:e4:fa:0a:c2:5c:11:75:23:0c:67:
         94:dc:9d:92:c5:ba:a4:dd:dd:08:a5:c8:21:9c:39:e2:1a:bb:
         ec:02:04:94:84:76:23:26:86:b7:88:e8:fa:2b:5e:0c:b3:51:
         04:02:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:45 2025 by rpki-client