Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/c06834c1-05d6-3d91-9fb4-f8256a5edbd0.roa
File:                     c06834c1-05d6-3d91-9fb4-f8256a5edbd0.roa (raw, json)
Hash identifier:          s640gmM/qTDaTsktuptn53H7BNUY3vS/0t28IyP5cMA=
Subject key identifier:   D0:63:49:37:70:24:A8:87:C5:DD:5D:BB:2E:74:83:A1:E7:7E:AD:9A
Certificate issuer:       /CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
Certificate serial:       010D0C9F43285845C17918A5031E81A4F72C2250
Authority key identifier: 4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/c06834c1-05d6-3d91-9fb4-f8256a5edbd0.roa
Signing time:             Sat 04 May 2024 01:00:25 +0000
ROA not before:           Sat 04 May 2024 01:00:25 +0000
ROA not after:            Fri 02 Aug 2024 01:00:25 +0000
asID:                     54004
IP address blocks:        47.19.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c1:79:18:a5:03:1e:81:a4:f7:2c:22:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0546b3ee-1f11-4525-8576-f238a19fb7ba
        Validity
            Not Before: May  4 01:00:25 2024 GMT
            Not After : Aug  2 01:00:25 2024 GMT
        Subject: CN=1717e361-44cb-4cda-b852-646f6357ad5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:f6:90:0e:e2:5f:9c:89:04:df:7e:f6:b6:
                    55:1e:95:16:0f:57:9b:f8:1c:71:85:15:f7:5f:3f:
                    c3:ec:f7:a0:61:95:b7:b0:32:b0:5b:ee:25:07:07:
                    c6:42:cd:bd:79:5d:6b:c2:c3:37:c2:5e:14:03:2e:
                    75:9f:b4:6b:c6:e6:45:20:12:4b:03:18:7b:f4:b8:
                    c0:3b:db:d3:6c:72:fe:5e:6a:8d:b8:7a:ce:63:59:
                    74:bd:65:cb:d5:b0:b7:58:35:27:fa:4d:2a:8f:44:
                    39:de:4a:d8:ff:65:84:a5:54:88:c3:5b:a7:33:59:
                    65:61:8e:27:ef:05:15:93:6a:03:c4:ac:83:30:83:
                    17:91:a3:64:60:01:b0:16:38:5f:28:6b:33:f5:a8:
                    d3:d2:43:a5:48:18:da:24:23:24:a6:33:6f:30:d5:
                    7b:41:ee:90:3d:35:a8:52:23:18:2d:df:c1:ee:15:
                    16:b9:89:09:b3:74:0a:40:1c:b1:f9:b7:dd:8f:96:
                    cb:d3:a6:b2:cf:4f:25:4b:91:5e:fb:f8:c4:27:e2:
                    bb:47:c0:3e:03:1b:13:58:6e:fa:9d:a0:ed:e7:66:
                    4c:85:b0:9a:db:d0:e3:e6:de:c4:63:b8:c6:d1:f7:
                    b8:f1:d5:a9:0b:23:74:7f:ef:78:02:80:9a:6a:68:
                    80:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:63:49:37:70:24:A8:87:C5:DD:5D:BB:2E:74:83:A1:E7:7E:AD:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/c06834c1-05d6-3d91-9fb4-f8256a5edbd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba/0546b3ee-1f11-4525-8576-f238a19fb7ba.crl

            X509v3 Authority Key Identifier:
                keyid:4B:60:55:5B:D8:90:5E:FB:59:9C:7D:D1:82:4C:69:FA:D6:E3:27:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0546b3ee-1f11-4525-8576-f238a19fb7ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.19.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:1d:4b:58:91:1c:8e:24:85:c3:bf:45:78:a4:02:72:1a:d3:
         02:aa:b1:42:73:c6:51:19:bf:e2:71:43:75:49:0d:63:30:bf:
         df:e9:a8:69:d9:70:f7:51:26:28:74:bd:a2:5d:91:61:8f:3b:
         3c:85:18:72:ef:74:f4:d4:73:7e:c4:93:10:4d:67:24:75:bc:
         13:81:26:d8:04:b9:68:26:3a:85:62:30:37:02:2e:7d:d1:9e:
         ad:06:18:3a:6f:ea:67:db:81:7a:1c:c7:2e:58:35:31:d2:27:
         9c:c2:b1:e9:91:af:07:c0:57:1f:26:a3:00:0b:73:a4:a4:50:
         52:ad:09:fb:f4:68:a5:75:91:dd:82:8e:ec:91:e9:9a:b6:4b:
         77:63:c6:32:9c:c7:95:34:95:45:4b:8b:ea:b9:fc:2d:a6:32:
         85:f2:67:0f:60:00:4a:0c:81:a3:bd:0c:5d:e2:ee:e9:fc:23:
         10:ea:24:03:a7:6a:27:7e:d8:9a:32:30:c6:57:8f:b5:b6:e2:
         bf:04:92:1d:0b:e9:3f:e8:9e:95:bd:3b:b6:52:eb:10:e4:34:
         20:a4:6f:8f:2e:95:41:eb:96:8b:47:a1:39:32:dc:e1:ba:9f:
         ec:07:93:0a:e0:6c:bf:a6:f8:76:3d:88:da:e6:d2:a1:dc:94:
         97:aa:09:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 16:40:12 2024 by rpki-client on console-ams.rpki-client.org