Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/510d0509-5727-3ca4-9659-7e0167c2c546.roa
File:                     510d0509-5727-3ca4-9659-7e0167c2c546.roa (raw, json)
Hash identifier:          A+doiOX1t+aW/wLooGj+KRytsn7dq+DNGjDLLTQd7xY=
Subject key identifier:   78:B3:00:49:B5:CC:A4:12:34:FE:19:BD:B3:A9:C7:79:80:2D:57:AD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84119B27F5FA8FC97F83B700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/510d0509-5727-3ca4-9659-7e0167c2c546.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        67.54.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:9b:27:f5:fa:8f:c9:7f:83:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=6d51420a-f3ec-4782-9a95-8501a85fdc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a1:52:d6:aa:53:4f:1c:ca:67:3d:35:c1:76:
                    00:13:c1:bf:43:ef:ed:56:3a:8c:7a:3f:3d:83:33:
                    9e:77:83:3b:7b:7d:4c:7d:7f:87:62:1c:24:a1:ec:
                    29:53:0a:fb:b6:e2:c3:a8:0b:9e:f5:54:3d:20:0e:
                    4f:a8:e3:49:45:dd:74:6b:56:e5:ef:3f:ab:26:c6:
                    66:be:8a:64:f9:e6:02:ee:26:0f:6d:04:01:f9:44:
                    70:25:26:ac:4d:24:cc:17:00:be:a5:fe:e5:00:db:
                    b6:0d:f0:14:7d:da:4c:36:1b:80:98:31:e6:df:71:
                    67:01:33:14:58:8e:30:ec:9a:7a:cf:0b:43:99:a4:
                    e7:07:66:60:14:b2:e4:a5:6c:7f:a8:91:cf:28:49:
                    7d:a7:75:6a:7b:97:79:fe:f1:13:90:9b:2a:0c:5a:
                    a2:76:9e:89:d4:95:f9:8d:53:77:14:92:16:dc:2b:
                    1c:69:e6:83:7f:73:d3:e3:4c:4b:e7:ae:65:f9:f7:
                    be:4a:09:44:83:46:1f:f2:9d:d6:a2:77:19:cd:f7:
                    a4:d2:e4:4b:5f:ef:13:08:99:d5:0d:93:ba:5e:b8:
                    8b:53:6b:60:2a:b4:16:4e:a6:73:1a:5c:43:9e:09:
                    4d:8a:32:02:55:89:de:ea:3c:16:e0:2d:5e:76:d5:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B3:00:49:B5:CC:A4:12:34:FE:19:BD:B3:A9:C7:79:80:2D:57:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/510d0509-5727-3ca4-9659-7e0167c2c546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:58:ae:b6:e0:e0:66:10:6b:7c:2d:75:8d:fd:40:90:37:81:
         d0:b7:98:9c:e1:0d:01:99:76:fd:74:cf:5b:04:7a:74:ec:4f:
         46:3a:f3:38:98:2f:6c:48:74:8e:fc:16:ce:23:4e:6c:3c:6f:
         e3:02:cc:c2:c4:cd:25:e2:34:06:aa:67:dc:af:79:07:25:9b:
         2c:ed:9f:be:e2:8f:eb:f6:52:5c:22:5b:66:b1:ef:3e:bc:3f:
         31:bb:fb:6a:9c:62:54:d4:42:6c:77:99:0f:11:5f:14:7f:12:
         75:e4:07:c8:a6:d6:34:bf:4c:2f:96:18:d2:ea:6c:38:4c:87:
         30:0e:00:04:dd:eb:30:f3:3b:c4:43:cb:98:a3:c0:a3:06:ef:
         81:e2:bf:92:cd:e8:ea:ac:2e:7b:2a:1b:48:b2:78:33:16:98:
         9b:e8:ef:7b:fa:92:6a:89:4e:d0:ca:2a:63:b4:2a:87:bd:fe:
         6f:be:37:9f:b5:5f:d6:81:39:38:d3:75:b9:d1:57:10:0f:ee:
         03:9d:ab:99:42:05:c8:8a:a8:25:9e:fa:d7:25:f0:4f:f9:7f:
         37:fd:b1:b4:3e:54:07:6f:37:7e:3c:7f:5f:60:ce:a8:84:6d:
         06:e6:2e:f4:87:f5:63:d6:d2:72:85:57:d8:a5:41:9d:0e:dc:
         4e:fd:c6:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZsn9fqPyX+DtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NmQ1MTQyMGEtZjNlYy00NzgyLTlhOTUtODUwMWE4NWZkYzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaFS1qpTTxzKZz01wXYAE8G/Q+/tVjqMej89
gzOed4M7e31MfX+HYhwkoewpUwr7tuLDqAue9VQ9IA5PqONJRd10a1bl7z+rJsZm
vopk+eYC7iYPbQQB+URwJSasTSTMFwC+pf7lANu2DfAUfdpMNhuAmDHm33FnATMU
WI4w7Jp6zwtDmaTnB2ZgFLLkpWx/qJHPKEl9p3Vqe5d5/vETkJsqDFqidp6J1JX5
jVN3FJIW3CscaeaDf3PT40xL565l+fe+SglEg0Yf8p3WoncZzfek0uRLX+8TCJnV
DZO6XriLU2tgKrQWTqZzGlxDnglNijICVYne6jwW4C1edtXgaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHizAEm1zKQSNP4ZvbOpx3mALVetMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTEwZDA1MDktNTcyNy0z
Y2E0LTk2NTktN2UwMTY3YzJjNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFFYrrbg4GYQa3wtdY39QJA3gdC3mJzhDQGZdv10z1sEenTsT0Y68ziY
L2xIdI78Fs4jTmw8b+MCzMLEzSXiNAaqZ9yveQclmyztn77ij+v2UlwiW2ax7z68
PzG7+2qcYlTUQmx3mQ8RXxR/EnXkB8im1jS/TC+WGNLqbDhMhzAOAATd6zDzO8RD
y5ijwKMG74Hiv5LN6OqsLnsqG0iyeDMWmJvo73v6kmqJTtDKKmO0Koe9/m++N5+1
X9aBOTjTdbnRVxAP7gOdq5lCBciKqCWe+tcl8E/5fzf9sbQ+VAdvN348f19gzqiE
bQbmLvSH9WPW0nKFV9ilQZ0O3E79xkI=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:13:10 2025 by rpki-client