Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0eb77576-5384-37ee-b295-9d118b052dfb.roa
File:                     0eb77576-5384-37ee-b295-9d118b052dfb.roa (raw, json)
Hash identifier:          KL8HPwSEZacqIQUiSq3Y82DJLtXJ3WsulZOx4mgV+1Q=
Subject key identifier:   98:88:44:87:1B:D4:73:4C:60:7F:42:5C:82:C7:8C:2A:EA:F0:9A:EE
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849EBEA57C283AEFEB27D6908C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0eb77576-5384-37ee-b295-9d118b052dfb.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     40306
IP address blocks:        67.54.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:57:c2:83:ae:fe:b2:7d:69:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=817d1548-e41f-4d33-96b9-564a894c7b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:20:bd:76:df:ce:bc:0a:18:a9:f6:c0:5f:
                    bf:62:d1:27:96:3a:73:cf:a9:f4:16:2d:db:2a:6c:
                    ca:eb:4f:62:9c:3a:79:d5:60:b8:3c:4b:44:1e:9e:
                    fd:d9:f3:19:fc:ba:b6:85:e1:b1:c8:d4:c4:6c:1d:
                    50:2e:e5:f8:13:dd:9a:3c:57:f7:fe:18:5d:33:cd:
                    51:1e:2a:a4:26:3b:95:77:e7:c0:17:ba:ee:c2:7b:
                    d1:e2:7d:28:96:82:ec:29:ea:8a:fd:b7:b2:a6:7b:
                    bc:f4:91:c0:a9:0b:4f:cc:9a:5f:69:60:73:b0:7f:
                    a6:2d:b3:e0:6a:99:3a:55:86:60:2c:8c:93:8b:7b:
                    54:a9:31:c9:2d:0b:57:90:b6:ed:9b:ab:01:78:60:
                    97:5b:cc:01:86:c2:db:93:52:c9:57:8d:47:3b:2b:
                    d5:40:f2:fc:eb:73:f8:6d:92:30:fa:3b:41:6f:6f:
                    c1:62:a0:3b:ea:2a:67:90:05:2e:ae:3b:66:29:c5:
                    d8:1e:93:d3:25:06:26:7d:82:b6:89:28:5d:d9:cc:
                    25:ee:d5:21:7c:ea:21:ae:8e:9e:4f:b7:29:a8:b6:
                    36:95:0b:28:2d:f3:0e:fe:01:47:7f:7f:0a:03:a8:
                    31:18:0f:20:d9:67:a1:b8:38:a8:42:5b:df:98:a0:
                    31:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:88:44:87:1B:D4:73:4C:60:7F:42:5C:82:C7:8C:2A:EA:F0:9A:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0eb77576-5384-37ee-b295-9d118b052dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:9d:b8:c8:3e:c2:0f:25:3d:86:5b:73:01:dc:a1:4b:53:3b:
         84:d0:3e:b0:b6:72:63:65:77:e9:60:6e:9b:e1:90:5b:e5:a6:
         ab:97:b2:95:a9:75:1a:10:8b:e9:ba:f9:bf:c8:5c:5f:f2:03:
         7c:35:95:e1:f1:fe:b8:ae:df:0c:5e:f2:08:2b:72:83:a4:58:
         b8:e5:ab:07:74:e1:dc:af:14:2c:88:43:fe:37:4b:e3:d5:80:
         fb:e9:70:ec:80:4c:ff:a0:65:45:a7:2d:65:94:6b:d7:9f:a5:
         b7:7f:b4:80:79:82:16:2f:1b:05:07:f7:34:39:5b:ce:07:b6:
         8a:5a:72:ed:1a:35:53:03:87:8b:d0:b7:f9:98:a3:3f:20:b8:
         8c:14:ec:d7:05:11:f7:4e:d9:41:ea:26:a4:b0:6a:29:d6:26:
         8a:40:b6:9b:47:2f:b7:a9:44:bd:48:37:4e:84:78:9b:5f:59:
         99:40:6e:68:0e:d3:cd:ec:96:23:7b:0c:16:ef:87:c2:12:35:
         5d:37:7e:98:b5:f7:0f:2d:51:6a:1c:2d:3f:2a:37:43:e9:be:
         09:0f:d3:50:d8:86:4a:32:d0:50:a1:0a:5b:26:e4:14:ab:34:
         a1:60:dd:94:b9:0c:24:59:85:9d:43:4f:66:a2:3d:43:e5:f9:
         16:5b:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:46:01 2025 by rpki-client