Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2a5a9fb-9933-3cd7-847e-fa6a28136044.roa
File:                     d2a5a9fb-9933-3cd7-847e-fa6a28136044.roa (raw, json)
Hash identifier:          pfWo1y3JCXxPuA4HEgkmYXm5ync26WYqTd/VkmyngyY=
Subject key identifier:   3D:B5:12:32:50:19:6C:1C:DE:F1:CA:88:4C:C8:F4:56:C1:74:45:F2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584A8410FCE83CD88512EDCA2800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2a5a9fb-9933-3cd7-847e-fa6a28136044.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     7155
IP address blocks:        67.54.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:fc:e8:3c:d8:85:12:ed:ca:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7a10d7e5-2762-458e-825e-2b3b55a3a535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:ff:a8:a8:95:ab:33:db:ec:b1:aa:fe:cf:
                    70:5d:13:1f:94:29:5d:1e:38:db:0a:e1:da:b2:f4:
                    98:ff:e7:cd:da:3b:58:bc:77:55:0d:58:f3:cd:24:
                    f6:1b:8f:9d:01:a9:83:0a:17:bc:43:cd:9b:10:80:
                    ed:12:ee:20:46:c7:cf:dc:b0:9c:54:0c:4e:de:d0:
                    5e:36:bb:8e:ce:d6:ab:e2:15:01:53:71:51:af:04:
                    80:c0:07:32:d8:92:0b:49:a5:f4:17:f4:81:84:4e:
                    3a:66:a5:12:31:93:13:e3:19:38:c5:94:68:c1:64:
                    23:a8:9a:e5:f5:fd:85:e0:cb:62:25:06:fa:79:0f:
                    47:62:6b:a8:eb:3e:cf:e9:a2:d7:f3:ed:dd:73:d7:
                    62:fb:d9:42:b7:1c:7c:00:af:c2:48:56:e2:f5:9e:
                    0e:e4:a7:d2:6c:a3:c7:bf:af:44:91:46:6f:21:e6:
                    d7:de:e1:ec:42:22:d3:c8:cf:00:26:85:5c:fe:98:
                    66:3b:1b:32:dd:d1:fe:95:32:e1:86:0c:9a:76:34:
                    0e:b7:56:7d:42:40:ef:e7:5b:61:ca:10:83:41:45:
                    0d:44:aa:fd:90:60:41:fa:ad:8c:23:bc:50:d7:d1:
                    dd:9d:b3:6b:12:a1:e0:31:d8:0c:2c:f5:ce:58:e1:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B5:12:32:50:19:6C:1C:DE:F1:CA:88:4C:C8:F4:56:C1:74:45:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2a5a9fb-9933-3cd7-847e-fa6a28136044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:b1:80:5b:91:7e:55:ff:4b:c9:27:2d:a5:c2:72:d4:0a:2b:
         0e:da:49:b6:02:19:46:77:1a:b8:2b:3e:24:fa:f1:6c:12:25:
         34:80:4c:c8:0c:d6:20:c4:c5:a1:dd:54:c8:64:a2:9c:99:f3:
         7d:60:5a:f3:fa:3b:df:67:ee:d0:21:50:7e:e5:e2:a3:2d:b1:
         67:d4:4b:de:33:1c:36:4a:ee:4d:e2:c4:29:6b:06:fa:58:ad:
         8e:b0:99:7c:86:f9:26:26:f1:43:f6:e1:86:eb:5e:b9:16:23:
         ac:1c:a1:57:b2:38:3c:52:3d:13:9c:d1:06:f0:68:33:85:40:
         07:b4:c3:a4:06:a8:8f:6e:54:e7:5c:24:7c:4e:ef:a5:b2:d6:
         32:a2:3e:f5:fe:45:0b:18:87:7b:b1:af:74:d2:3c:7f:5a:85:
         7d:7e:55:aa:a7:84:b5:8f:df:43:72:a9:bd:86:e1:0c:94:f4:
         94:e7:c9:e5:22:b0:58:53:97:5f:a1:4f:84:ba:a7:f5:ec:e8:
         8e:52:5b:64:2d:4e:b6:42:25:29:39:46:a7:72:d9:b6:40:1c:
         52:43:9e:aa:f1:13:6b:2c:70:b9:ff:cb:0d:4c:5b:16:2c:d6:
         81:22:e9:8b:e9:11:86:e3:0f:c3:3a:70:54:63:e0:91:88:e8:
         0b:61:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:09:10 2025 by rpki-client