Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e3e2220-94d3-36e6-bc09-ef29f3d27e7c.roa
File:                     1e3e2220-94d3-36e6-bc09-ef29f3d27e7c.roa (raw, json)
Hash identifier:          N6kjlWNGML05QW8HJ1XPmE1DAPIgxmFOwZcyyw3iAFg=
Subject key identifier:   6B:99:3D:B6:15:23:FE:FC:38:58:83:1D:D3:CB:C5:8A:18:EF:4A:4B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5819443E74C8D0D37C18E00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e3e2220-94d3-36e6-bc09-ef29f3d27e7c.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        67.54.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:94:43:e7:4c:8d:0d:37:c1:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=4dc73a39-facb-4d84-ba76-60209f5d3d0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b7:1d:ff:8c:d9:f0:4a:3e:4e:d8:5e:e4:ff:
                    35:1c:e0:24:2f:a4:cb:c2:4e:c7:a3:85:39:be:e1:
                    f8:bf:87:4e:94:08:67:4b:c3:0e:c6:e7:37:99:4d:
                    b4:81:21:88:09:38:4a:94:c1:35:99:7d:0a:3b:77:
                    03:c7:ac:1f:51:62:0e:73:1c:95:7d:81:e2:31:4f:
                    6a:84:7d:dc:ff:20:31:be:e3:ab:f5:d8:7a:b8:65:
                    27:7c:a7:95:7d:a5:57:e3:8a:83:54:7a:a7:df:f8:
                    8c:6d:71:d0:97:c6:2b:29:6b:9d:e6:2c:08:dd:47:
                    d5:18:42:e6:00:5e:52:ca:f7:e9:06:b9:6b:d6:f0:
                    69:17:fc:f5:82:65:ee:d9:dc:e1:26:0c:ef:26:54:
                    2c:8c:47:f5:9b:ad:f4:66:51:71:b8:82:20:08:b2:
                    5c:6a:53:4f:02:65:67:57:8e:18:95:8b:c9:2e:73:
                    c1:ec:a6:b7:47:3d:e9:68:75:0d:24:80:06:c4:9c:
                    ac:fd:49:1b:c5:8e:f6:43:f7:aa:1a:a2:2b:b6:3f:
                    fa:b8:c4:2e:67:68:07:47:06:64:77:5d:c3:b4:ab:
                    fe:b2:37:19:42:1c:7b:37:e1:73:71:83:48:7a:c6:
                    ee:23:1b:0f:ee:31:52:bc:49:d6:ba:fe:e4:8e:26:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:99:3D:B6:15:23:FE:FC:38:58:83:1D:D3:CB:C5:8A:18:EF:4A:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e3e2220-94d3-36e6-bc09-ef29f3d27e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:22:37:25:4a:9a:33:35:f0:20:3a:29:be:6d:2f:1f:cb:
         37:89:6e:b2:6d:7c:6e:b5:0a:de:bd:c3:d1:21:ff:76:f8:4c:
         02:c3:26:e5:7e:6e:62:0d:81:26:4d:a9:87:a5:cd:ea:e6:0c:
         20:95:3e:c1:a8:cf:85:ac:c4:60:b8:c2:a6:86:f7:c1:d4:e4:
         88:ce:61:fa:7f:b3:33:1f:07:b2:06:2e:12:71:4a:a3:48:3a:
         ab:58:7c:04:f8:2b:92:da:50:09:e0:f0:00:62:18:c8:d5:60:
         1d:91:9d:30:95:6b:32:1e:a0:cc:08:66:74:c5:9b:24:4c:08:
         18:a5:25:b2:32:d4:7f:56:f2:e8:3b:e7:59:35:49:b7:7c:8e:
         71:22:08:1e:79:01:46:71:6d:22:29:b2:1b:32:18:07:47:e1:
         a2:f9:96:b2:45:38:55:0c:22:68:3f:ba:74:58:d3:3d:bd:08:
         0d:ed:e4:16:95:6e:26:4a:23:05:6d:6a:78:f8:34:a7:30:4a:
         4d:e8:98:91:0d:64:b3:cf:4d:ca:aa:18:43:26:05:09:cb:51:
         2d:6d:d7:77:ba:b3:fa:77:80:a2:00:9c:1e:94:94:3e:92:63:
         38:0c:10:2a:aa:8c:b2:ea:27:f6:26:37:31:1d:74:18:50:33:
         bc:19:e8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:55:48 2025 by rpki-client