Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2890d7eb-8eca-325c-932f-7595f681354a.roa
File:                     2890d7eb-8eca-325c-932f-7595f681354a.roa (raw, json)
Hash identifier:          ChxeAVhlrQRP2OaAOH/PsTdo7bV5H7AlrJNVbV4QCWc=
Subject key identifier:   B6:E3:41:EC:6A:9E:32:4B:94:E5:92:A3:28:4C:77:A3:89:09:18:B1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AC248128A7957872657B0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2890d7eb-8eca-325c-932f-7595f681354a.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        67.54.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:c2:48:12:8a:79:57:87:26:57:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=6cf78253-23af-4b3c-a611-78006303f109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:73:b3:86:91:06:f0:c5:60:60:23:32:b9:96:
                    c2:69:53:2d:ad:05:47:b2:fa:6b:ae:8c:32:9f:8e:
                    dc:9b:69:0f:c3:7b:cb:8a:88:00:f6:5e:5b:a3:c0:
                    bb:01:dc:83:82:6f:d3:3f:0d:90:c9:6c:97:0e:bf:
                    35:9f:98:cb:f2:d8:22:74:b6:9d:39:ab:4d:b7:27:
                    4a:15:d5:ae:c6:8d:a6:2f:7c:ad:ed:76:87:62:c2:
                    89:47:c2:aa:0e:57:bb:62:cb:a5:92:ec:1d:b3:f6:
                    09:4c:c8:e9:fe:49:93:36:c1:7a:13:35:59:4c:e8:
                    16:23:c0:33:9d:e7:e1:34:05:b6:87:ec:ca:20:51:
                    fb:19:ad:84:c3:e0:3d:7b:aa:a4:77:9b:1d:52:fa:
                    9b:d5:aa:92:38:9b:df:4f:79:53:e5:d9:12:33:a1:
                    c1:9a:8a:2a:bd:06:42:54:da:4b:d4:3a:c7:2c:a7:
                    02:da:50:68:a5:57:8e:91:fc:5e:21:5e:ec:09:ba:
                    65:1a:78:d1:7b:0a:16:6a:67:d5:33:7d:db:84:b5:
                    34:5d:7f:db:79:f9:c5:11:cc:61:b2:44:1f:d8:8b:
                    ee:36:0f:31:cd:1d:9a:49:38:45:33:94:27:11:99:
                    df:db:63:50:8b:73:80:94:c5:ce:7d:86:fd:24:ae:
                    42:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E3:41:EC:6A:9E:32:4B:94:E5:92:A3:28:4C:77:A3:89:09:18:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2890d7eb-8eca-325c-932f-7595f681354a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:da:96:64:e7:06:05:88:51:9f:c5:97:7b:4d:d4:6a:3f:77:
         4b:83:cf:dc:bb:36:50:42:05:9a:83:d0:5c:e3:d1:be:97:47:
         08:d3:94:c6:1b:f0:25:46:9e:95:f1:f9:09:f7:7c:cf:f3:82:
         00:cd:58:ec:5b:da:ba:f5:2a:3f:15:02:a8:ea:8f:7a:15:8a:
         94:e7:70:ad:31:e2:4c:58:e8:cf:a6:b7:d5:63:69:7b:8b:c5:
         fc:43:54:ee:a3:48:b2:1c:46:18:a5:ca:69:8d:6a:9f:20:cb:
         9e:ac:cd:64:10:30:f4:52:22:54:30:c5:b4:39:63:fe:30:1e:
         06:27:50:1f:69:2c:4c:19:7a:11:2e:ef:6a:31:97:dc:c9:af:
         d1:bc:d2:48:4a:8d:d2:0a:5c:18:f0:b8:5f:ad:95:d6:54:3b:
         a9:2e:e8:d7:ba:91:f0:eb:e1:7d:e3:64:f8:ac:27:b7:a9:90:
         95:e0:f5:6e:a2:c8:b0:d6:25:ed:c0:75:ce:09:a8:4e:ad:2e:
         69:49:c5:4b:d1:fa:2f:a4:02:55:f6:e8:88:8d:6f:e7:ba:73:
         83:23:7c:93:95:67:ab:ed:19:ce:57:be:23:dd:a6:e5:1b:e3:
         1a:ec:32:71:11:e6:3e:c3:7e:3f:45:1f:52:61:a1:d1:93:91:
         e5:db:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:35:21 2024 by rpki-client on console-ams.rpki-client.org