Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dfafc76-a0e4-3760-af6d-44f2966b4425.roa
File:                     8dfafc76-a0e4-3760-af6d-44f2966b4425.roa (raw, json)
Hash identifier:          eZafXgu9kTLGRvZMdcFNFGcIlUhDXhh5KhpKEd16oZ8=
Subject key identifier:   F2:A8:17:FB:6A:D0:9F:F5:CB:55:DB:05:F6:E9:96:E2:2A:8A:88:32
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A84119CCC1B0DCAA3E0D50140
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dfafc76-a0e4-3760-af6d-44f2966b4425.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        67.54.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:11:9c:cc:1b:0d:ca:a3:e0:d5:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=95cac1d9-9878-42b0-93e8-751239325c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:6b:04:a8:4c:8b:ab:72:0b:bd:f4:ff:94:
                    e2:9a:ef:89:66:f2:7e:8f:79:5e:c6:42:31:c0:da:
                    91:d0:92:b2:5f:7d:20:69:66:d5:b8:ca:4f:4b:16:
                    15:a5:5e:74:2e:1f:92:81:b1:2f:58:a2:96:c6:96:
                    af:6b:9f:16:3e:07:78:d5:59:2d:d5:b2:b5:8d:75:
                    0c:f0:01:2e:54:22:d3:a1:fb:00:e8:fe:30:19:22:
                    51:24:c8:4a:8a:f9:91:d1:93:4a:38:3a:b5:c2:9a:
                    2e:de:5b:b5:52:57:e1:c1:b4:fe:44:14:e3:16:a9:
                    d8:7e:39:a2:24:9e:0d:2f:95:b8:c7:0e:b1:c6:71:
                    ad:60:ef:4f:26:4d:59:e5:a6:b1:72:c6:1d:93:38:
                    c0:e3:70:b2:da:0b:a8:6d:bd:82:df:4c:bc:b2:c7:
                    7e:30:6f:9a:86:24:9e:4d:29:ac:2f:f0:73:9f:3c:
                    fb:4e:da:34:df:7b:b5:cb:3e:e2:34:2f:88:23:e4:
                    6e:a1:49:c4:2b:e9:93:7d:e7:e4:11:ff:58:f3:51:
                    99:b6:bd:ef:61:f7:5f:6e:67:9e:32:70:4b:e1:0c:
                    2a:16:f2:b2:f4:aa:a1:2e:aa:11:69:1c:64:2f:10:
                    ea:c4:7a:27:70:5c:3d:bb:d3:02:df:d7:d3:1c:84:
                    48:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A8:17:FB:6A:D0:9F:F5:CB:55:DB:05:F6:E9:96:E2:2A:8A:88:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dfafc76-a0e4-3760-af6d-44f2966b4425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:eb:fc:41:aa:31:78:04:99:9e:f2:a9:12:08:9e:14:3b:6b:
         50:37:20:b9:4b:ee:50:d1:6e:89:00:88:0a:dd:17:9b:6d:75:
         b2:00:35:09:67:54:97:b7:54:bc:b3:7b:d6:34:6e:23:76:99:
         b4:e3:0a:46:d5:a3:be:9c:76:47:2f:f5:56:8a:d3:50:fa:e1:
         03:9a:d2:ff:93:7a:e8:f5:96:27:f3:9d:08:54:58:92:cd:84:
         c9:bf:14:01:8f:b1:41:95:75:e8:1f:22:1b:b4:a5:43:b3:09:
         46:b8:f9:5b:fe:30:05:0b:83:5d:05:07:58:5b:f7:fe:eb:5f:
         58:55:30:32:40:61:f5:cb:55:a7:ec:a7:a9:90:13:0d:ea:9a:
         eb:ca:3b:08:49:11:1c:9c:30:36:dd:bd:34:32:50:2a:a6:3f:
         6a:2b:73:40:b3:28:9c:31:88:4e:42:9b:61:5b:ee:42:e4:f0:
         a7:5c:52:6e:a2:8c:60:47:95:ca:94:ba:3a:1a:21:d2:1a:d9:
         35:09:7b:00:e9:c8:cb:5d:c1:c5:e9:2c:4f:90:de:2e:07:dd:
         0e:d6:89:bf:d9:28:68:65:13:e5:76:4a:6c:da:08:ab:9b:8f:
         85:5a:d4:d0:a4:62:5e:d8:72:de:80:b0:6d:bf:22:1b:da:b5:
         cb:ce:89:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZzMGw3Ko+DVAUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
OTVjYWMxZDktOTg3OC00MmIwLTkzZTgtNzUxMjM5MzI1YzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHxrBKhMi6tyC730/5Timu+JZvJ+j3lexkIx
wNqR0JKyX30gaWbVuMpPSxYVpV50Lh+SgbEvWKKWxpava58WPgd41Vkt1bK1jXUM
8AEuVCLTofsA6P4wGSJRJMhKivmR0ZNKODq1wpou3lu1UlfhwbT+RBTjFqnYfjmi
JJ4NL5W4xw6xxnGtYO9PJk1Z5aaxcsYdkzjA43Cy2guobb2C30y8ssd+MG+ahiSe
TSmsL/Bznzz7Tto033u1yz7iNC+II+RuoUnEK+mTfefkEf9Y81GZtr3vYfdfbmee
MnBL4QwqFvKy9KqhLqoRaRxkLxDqxHoncFw9u9MC39fTHIRI9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPKoF/tq0J/1y1XbBfbpluIqiogyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGRmYWZjNzYtYTBlNC0z
NzYwLWFmNmQtNDRmMjk2NmI0NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQza8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAADr/EGqMXgEmZ7yqRIInhQ7a1A3ILlL7lDRbokAiArdF5ttdbIANQln
VJe3VLyze9Y0biN2mbTjCkbVo76cdkcv9VaK01D64QOa0v+Teuj1lifznQhUWJLN
hMm/FAGPsUGVdegfIhu0pUOzCUa4+Vv+MAULg10FB1hb9/7rX1hVMDJAYfXLVafs
p6mQEw3qmuvKOwhJERycMDbdvTQyUCqmP2orc0CzKJwxiE5Cm2Fb7kLk8KdcUm6i
jGBHlcqUujoaIdIa2TUJewDpyMtdwcXpLE+Q3i4H3Q7Wib/ZKGhlE+V2SmzaCKub
j4Va1NCkYl7Yct6AsG2/IhvatcvOifc=
-----END CERTIFICATE-----
Generated at Sat Jul 26 00:05:43 2025 by rpki-client