Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/598bf124-57c3-3876-867e-23f6de1c1741.roa
File:                     598bf124-57c3-3876-867e-23f6de1c1741.roa (raw, json)
Hash identifier:          QLLIhzy+eJ3KwipMMecANdCOCrCMli26kYsvPk2UQCk=
Subject key identifier:   EF:71:46:44:31:A2:DF:94:08:68:40:CC:C2:38:71:A0:C6:72:7F:E7
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8410FC47C078F6A5DAD6F780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/598bf124-57c3-3876-867e-23f6de1c1741.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        67.54.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:fc:47:c0:78:f6:a5:da:d6:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=26c78313-7339-4e5f-94fb-222b18b9ee26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ec:9c:dd:c1:be:d0:e7:8a:c2:1f:e3:8a:d3:
                    4b:b1:af:ea:c2:8a:07:06:8c:fc:94:50:4d:ff:88:
                    2e:cf:6b:ee:aa:61:4b:67:4f:77:39:1f:a9:c5:61:
                    e2:6b:c9:5d:40:dc:75:d1:f6:bf:33:43:85:4a:d4:
                    53:8d:97:cc:50:09:94:13:ef:a9:ff:d4:43:e2:73:
                    5d:1a:1a:74:30:18:7e:be:21:21:07:a4:d2:e9:51:
                    1c:97:33:22:c0:ae:17:86:77:e6:6d:2d:59:08:bf:
                    9f:13:07:4b:06:6d:a9:dd:78:53:d0:f8:22:65:b2:
                    0d:6b:d9:09:aa:03:e2:fa:25:92:db:80:ef:47:38:
                    7a:6b:e0:e5:8d:22:27:f6:e3:7c:b2:69:3c:b9:53:
                    ed:56:92:de:91:9c:74:fb:83:b2:5f:e0:77:f8:c1:
                    6e:d6:7e:ba:65:9c:cc:f8:c0:de:02:82:50:97:5e:
                    79:15:0c:15:e9:6c:67:b0:f2:9a:50:9d:58:55:e3:
                    7d:4d:de:80:c9:6a:7d:bd:fd:df:b1:6f:86:b6:4c:
                    9e:40:16:5c:57:38:ba:4c:22:a4:82:25:21:22:09:
                    01:46:23:86:fa:35:ed:54:f6:05:a0:46:c0:26:96:
                    5c:01:d1:05:d2:e1:95:c4:f0:84:c3:29:e5:29:0b:
                    28:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:71:46:44:31:A2:DF:94:08:68:40:CC:C2:38:71:A0:C6:72:7F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/598bf124-57c3-3876-867e-23f6de1c1741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:9c:f9:75:52:05:9e:0f:9c:d6:02:dd:8d:4b:0f:86:0d:
         3c:78:62:cc:b0:43:fe:5e:68:11:a7:b0:c1:39:84:32:a2:ae:
         50:72:24:fd:15:c1:85:80:46:20:ce:92:42:25:6b:44:46:b9:
         8c:90:8f:d1:80:4c:56:f3:96:b5:83:a6:ae:65:a8:f8:00:67:
         77:c9:3a:b0:c3:60:db:b6:26:12:e3:ce:a3:d6:24:32:ca:db:
         08:80:93:2d:31:78:05:ee:81:d0:53:c0:e9:0e:f3:48:e3:a9:
         6e:b8:fa:9b:f8:04:4a:1b:c2:08:71:a0:b4:01:87:15:61:1d:
         06:fb:fc:ca:08:12:52:52:d9:b7:dd:58:2f:c2:60:a1:a2:1e:
         b7:ef:b4:98:db:ac:37:6b:fb:9f:27:c9:11:01:29:2f:3a:57:
         ab:46:60:d9:d8:b7:75:7b:7d:fa:4e:e5:43:2f:4d:d2:80:39:
         e1:b5:11:3f:e3:f9:bd:36:b7:98:f6:e5:15:8a:1a:74:cd:e9:
         30:81:d4:d7:4d:82:5e:b0:81:b4:08:9f:52:55:96:30:23:ba:
         23:df:b7:27:c7:ec:fc:30:20:2d:9f:04:04:ce:c5:4d:9f:64:
         d8:d5:e9:8a:34:22:d3:64:84:4f:f3:80:7e:a8:62:87:7b:eb:
         4c:81:6f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:11:29 2025 by rpki-client