Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89dc4be2-10ea-36db-bac9-0f0528784800.roa
File:                     89dc4be2-10ea-36db-bac9-0f0528784800.roa (raw, json)
Hash identifier:          HmZAHT2veH3Cl562AQPixx6iu8A/916lKmq1k7Sig6E=
Subject key identifier:   5C:F1:79:3A:1A:2E:EB:02:3E:14:C2:63:AE:D1:FA:6C:E4:DE:D4:BF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84119C026C2465544248F6C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89dc4be2-10ea-36db-bac9-0f0528784800.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        67.54.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:9c:02:6c:24:65:54:42:48:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=d70aaa7a-5b05-48ef-a20d-75c7488d0959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:24:a6:ba:f7:4c:34:f3:0f:71:be:f5:2b:c9:
                    39:bf:bf:64:4c:09:f5:26:58:88:bf:9b:d9:0f:b0:
                    72:ac:2c:70:cc:59:bd:a1:50:79:74:dc:ba:87:a5:
                    a9:10:eb:23:c3:ff:3f:00:61:2a:26:e4:8d:b1:14:
                    2b:45:3e:74:5d:56:57:17:5b:e1:f8:64:20:e2:c6:
                    b7:1f:3b:9f:bc:bd:f2:47:68:e5:1d:f6:92:55:8f:
                    a0:62:02:d1:d2:9e:2f:6b:38:28:5f:bf:70:ad:5d:
                    1d:b6:2b:78:45:28:02:0a:ac:22:7a:1b:07:f0:99:
                    de:09:3a:1f:79:98:dd:72:61:01:ad:98:d8:23:1d:
                    a6:10:78:eb:94:45:b3:5f:c3:fe:07:a7:25:a1:ea:
                    a8:53:30:b6:5c:6d:26:51:3e:2a:b9:bf:f5:d1:1e:
                    03:ce:a6:7a:b2:03:20:7b:c3:72:dc:ea:7a:c2:97:
                    d8:a2:3c:92:96:8b:86:ce:04:ce:36:10:c2:e4:09:
                    9d:fd:97:d9:47:d7:b5:ed:27:b8:21:cd:84:07:72:
                    ef:a9:9a:21:c3:d0:3a:2c:08:25:06:68:ef:12:a8:
                    51:c2:87:1c:06:ca:6c:02:8c:ab:61:ed:2e:ba:4c:
                    bf:31:7d:c2:b0:1c:cd:53:4e:a3:a9:34:96:8b:79:
                    b0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F1:79:3A:1A:2E:EB:02:3E:14:C2:63:AE:D1:FA:6C:E4:DE:D4:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89dc4be2-10ea-36db-bac9-0f0528784800.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:92:51:4f:ee:4a:a1:13:01:46:17:4b:f2:e7:d9:e6:97:71:
         39:bc:88:c6:67:1d:32:ea:ba:61:58:3e:3e:b0:ad:93:a1:b8:
         bc:1d:44:0b:85:8d:34:62:d2:cd:32:83:39:1b:ee:db:ed:a3:
         39:74:e6:29:c5:2d:06:32:2f:6f:a6:2a:c8:78:43:89:86:57:
         df:2c:1e:31:72:88:57:a9:44:d9:7b:c3:f4:f2:cb:79:a4:bb:
         38:3b:40:6f:07:14:ea:77:ab:75:07:e0:62:b6:8e:c9:0a:da:
         a7:0e:bb:26:75:dd:ad:aa:ee:21:e5:c1:52:7b:23:bf:77:ff:
         81:74:5b:a1:83:10:66:eb:79:da:13:ab:6a:32:34:aa:8d:48:
         3f:b9:cd:1b:6f:01:cb:85:69:bc:87:e9:00:bf:0f:cd:95:3d:
         aa:0d:f2:01:bf:3a:e8:7f:13:8f:b1:c5:27:0c:a8:bb:f5:96:
         a8:e6:96:cb:fd:7e:2f:80:5b:56:3d:a1:e7:31:a9:d9:ba:10:
         c3:d2:e0:00:0b:32:72:c5:88:d6:46:1a:a4:dc:18:a8:00:50:
         01:ee:a2:27:ad:79:57:b7:df:65:f1:e8:54:47:fb:3b:15:ff:
         7e:90:43:43:f1:7a:cb:cd:85:d4:9b:3d:f3:e2:f5:c5:7d:e1:
         3e:34:3f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:13:05 2025 by rpki-client