Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/322d3c5d-e6d8-3a89-bf83-968d41bf78cc.roa
File:                     322d3c5d-e6d8-3a89-bf83-968d41bf78cc.roa (raw, json)
Hash identifier:          j2C+6M6CTre0R3hHub5Wzk08u2hgQSzMVo7EehJg4oM=
Subject key identifier:   8F:DF:70:B2:0D:24:B6:D2:CE:22:71:A3:73:A1:F3:C3:56:E9:C9:E0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581007538617E2DD70943C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/322d3c5d-e6d8-3a89-bf83-968d41bf78cc.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        67.54.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:00:75:38:61:7e:2d:d7:09:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=fa5917d3-57ed-400f-af1f-a39f7eec7bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:72:48:48:15:40:e2:04:02:00:df:4c:e2:f9:
                    db:4e:ac:42:ba:9b:d1:2e:c2:85:56:32:56:a8:74:
                    4e:d1:50:b7:37:30:6e:85:9e:ea:43:43:04:37:26:
                    43:bf:eb:01:cf:48:32:34:a2:13:01:80:7b:92:a5:
                    c9:5a:d6:ba:2b:b2:80:52:f0:fa:5e:4e:5a:1e:e4:
                    4b:49:4c:57:9f:96:f7:45:4f:f7:8b:ae:da:5f:1a:
                    27:5c:f7:47:c2:74:33:24:d5:8a:09:b8:04:bb:f8:
                    14:58:80:86:e4:33:b9:6d:8a:f8:b3:1e:02:a9:b5:
                    bf:ee:bb:f3:6b:60:b3:1f:1f:62:ce:b5:f1:94:81:
                    f6:51:7c:b0:fd:aa:d8:5c:86:63:37:dd:bc:d4:4e:
                    56:5e:3a:3a:9f:d5:2e:5a:2a:6c:6a:be:84:5a:cd:
                    34:d0:14:ce:ac:b9:6f:91:b7:c4:1a:87:c0:d8:ec:
                    48:4b:9f:f0:5d:6b:13:f8:fe:eb:bf:9d:89:e1:6a:
                    d8:a1:83:5b:7a:84:5a:d7:ef:fa:7b:57:ea:e7:35:
                    78:c2:15:f9:81:48:fd:34:2f:45:53:75:56:ed:6f:
                    3e:b4:06:4c:21:ef:d0:8e:ab:9c:19:4c:39:b9:7e:
                    c0:c8:d5:0c:51:3e:42:0a:71:0a:d7:58:fa:77:0b:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DF:70:B2:0D:24:B6:D2:CE:22:71:A3:73:A1:F3:C3:56:E9:C9:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/322d3c5d-e6d8-3a89-bf83-968d41bf78cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:a8:ae:72:51:fa:ff:3d:d5:da:1a:43:d7:a2:0c:14:75:ee:
         38:cf:41:d1:77:90:db:87:b3:52:55:dc:bc:61:94:46:32:ae:
         42:96:2d:18:65:d4:07:9d:c0:d3:e4:a8:96:de:56:c4:e5:63:
         84:d4:b8:ac:13:6b:0b:e6:cf:b5:8b:66:91:b7:81:76:19:0d:
         29:cc:4e:a2:0f:b4:e3:b3:69:c8:30:79:52:ec:56:50:01:5c:
         d7:3c:6e:a8:c2:02:8e:b3:af:ea:11:e3:d1:14:99:18:f2:25:
         b7:77:d6:5e:b3:8f:b6:8b:6b:4e:0d:53:b9:23:4f:2f:57:b5:
         e2:ef:6d:47:26:0a:6b:c4:5d:f2:11:63:73:bd:44:31:6a:bd:
         4e:11:23:e8:ac:35:03:3c:36:aa:3f:50:22:08:f6:b5:6d:f0:
         35:86:ac:c1:3d:91:f3:f2:1d:94:73:33:f4:e3:60:26:9e:08:
         c2:2f:a5:0c:0f:ce:ef:a9:4a:6f:5c:33:a3:42:44:02:ca:d8:
         7c:4b:f9:b2:65:e5:03:c1:3b:78:52:4b:ee:4e:c6:de:05:c5:
         81:a7:6d:80:46:85:1e:53:6a:c8:ac:1a:1e:8e:f5:3c:31:0e:
         95:a3:5c:d3:78:25:ea:40:95:f3:da:05:fa:e6:e7:53:9a:be:
         ad:b6:7d:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQB1OGF+LdcJQ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmE1OTE3ZDMtNTdlZC00MDBmLWFmMWYtYTM5ZjdlZWM3YmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXJISBVA4gQCAN9M4vnbTqxCupvRLsKFVjJW
qHRO0VC3NzBuhZ7qQ0MENyZDv+sBz0gyNKITAYB7kqXJWta6K7KAUvD6Xk5aHuRL
SUxXn5b3RU/3i67aXxonXPdHwnQzJNWKCbgEu/gUWICG5DO5bYr4sx4CqbW/7rvz
a2CzHx9izrXxlIH2UXyw/arYXIZjN9281E5WXjo6n9UuWipsar6EWs000BTOrLlv
kbfEGofA2OxIS5/wXWsT+P7rv52J4WrYoYNbeoRa1+/6e1fq5zV4whX5gUj9NC9F
U3VW7W8+tAZMIe/QjqucGUw5uX7AyNUMUT5CCnEK11j6dwuY4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/fcLINJLbSziJxo3Oh88NW6cngMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzIyZDNjNWQtZTZkOC0z
YTg5LWJmODMtOTY4ZDQxYmY3OGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM+ornJR+v891doaQ9eiDBR17jjPQdF3kNuHs1JV3LxhlEYyrkKWLRhl
1AedwNPkqJbeVsTlY4TUuKwTawvmz7WLZpG3gXYZDSnMTqIPtOOzacgweVLsVlAB
XNc8bqjCAo6zr+oR49EUmRjyJbd31l6zj7aLa04NU7kjTy9XteLvbUcmCmvEXfIR
Y3O9RDFqvU4RI+isNQM8Nqo/UCII9rVt8DWGrME9kfPyHZRzM/TjYCaeCMIvpQwP
zu+pSm9cM6NCRALK2HxL+bJl5QPBO3hSS+5Oxt4FxYGnbYBGhR5TasisGh6O9Twx
DpWjXNN4JepAlfPaBfrm51Oavq22fYQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:59 2025 by rpki-client