Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f08b78a-435b-3870-ab62-3ef6fa44a5e2.roa
File:                     1f08b78a-435b-3870-ab62-3ef6fa44a5e2.roa (raw, json)
Hash identifier:          dctFx5lMnEx/li/Shb7CNt5srLXSV41KsZpktEliGNM=
Subject key identifier:   A4:14:EB:EA:C4:94:C8:76:01:D9:48:AC:57:83:1F:3A:CA:46:47:A1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF4138985E28A1A864940
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f08b78a-435b-3870-ab62-3ef6fa44a5e2.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        67.54.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f4:13:89:85:e2:8a:1a:86:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=d8b2da7f-4a6c-4d81-8756-f1143d6a22ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:73:56:94:ea:e8:60:0d:c4:48:6d:b9:71:
                    d9:8f:31:9f:78:fa:f2:c3:8a:cf:91:93:4d:88:27:
                    32:75:20:f1:7d:92:e4:ba:b8:b3:ae:66:aa:fb:4b:
                    24:ea:d2:c6:01:a2:33:92:01:a8:1c:8d:38:01:67:
                    76:18:d8:5a:d8:e7:9a:2f:c6:db:60:d4:d4:d1:44:
                    3c:0c:ee:b4:f2:99:bc:ca:c8:99:5e:b0:fb:97:53:
                    ef:49:25:53:77:72:31:cc:dd:47:12:f2:95:b8:0c:
                    18:13:35:37:6a:b7:3c:d3:0e:ab:ca:ac:29:a7:a4:
                    e2:e2:ac:50:f5:9b:11:c8:70:2c:2f:dd:2d:e7:18:
                    bb:47:c3:b9:9b:8e:90:3b:ed:69:38:42:b7:1e:fd:
                    c3:8a:cc:d0:80:b8:f1:9d:0a:e5:21:5a:f2:cd:3d:
                    e9:99:04:1d:c6:99:84:3c:5e:4c:d2:e9:f9:61:ef:
                    2d:b0:a2:54:70:8f:1e:28:9a:b0:c4:3f:6b:e5:15:
                    3a:74:38:f5:f4:02:8a:07:23:c8:b1:72:a3:aa:79:
                    05:f8:bc:5f:63:78:4a:b5:52:8b:de:36:0f:78:1a:
                    9e:1d:82:3e:1a:2d:fd:80:e7:20:a2:e3:8d:c8:5b:
                    ee:9b:63:2a:fa:d7:dd:aa:69:75:0c:6b:6d:f7:b5:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:14:EB:EA:C4:94:C8:76:01:D9:48:AC:57:83:1F:3A:CA:46:47:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1f08b78a-435b-3870-ab62-3ef6fa44a5e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:11:21:fd:ef:7f:be:bd:d8:cc:89:8f:ee:25:e4:f1:33:ac:
         54:89:ef:16:e3:b2:c1:62:84:1b:fa:c2:41:6e:10:0f:97:06:
         53:85:0d:8b:a4:0c:a4:bc:78:80:a4:3d:eb:11:97:05:7d:23:
         df:dc:2e:69:af:80:23:d2:31:4f:d5:51:97:58:45:f5:9e:2a:
         97:26:14:98:f1:b2:11:14:c6:a0:40:86:86:7a:d4:88:d1:81:
         cf:13:35:95:39:fc:4a:22:1e:5b:cd:a6:a6:4e:b7:c3:06:c8:
         73:25:bc:02:b9:bd:43:62:1d:80:7d:bc:f3:ef:38:31:52:d9:
         d3:2d:5d:70:73:82:94:11:bd:f4:aa:d5:fb:7d:97:71:1b:7d:
         04:42:b9:f7:78:81:8a:b4:86:b4:c5:07:13:38:3f:83:d0:2f:
         db:bd:ec:c4:62:98:28:92:54:e6:69:ab:60:58:55:73:77:73:
         1d:63:f9:e9:10:33:8e:4f:30:8d:71:6a:9f:c3:91:d7:e0:0a:
         32:c0:ba:6c:1c:9f:2d:35:74:74:2f:46:51:05:79:e8:0f:0f:
         7b:86:c8:d9:30:f2:07:65:ef:5b:cb:af:6e:a6:34:93:14:e8:
         1d:7f:b4:af:10:b8:43:c3:33:7a:81:31:8a:50:3d:4b:f2:fe:
         26:9c:18:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 00:40:39 2024 by rpki-client on console-fra.rpki-client.org