Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3ee605-132f-3191-9d2a-d90cc9badb1c.roa
File:                     3a3ee605-132f-3191-9d2a-d90cc9badb1c.roa (raw, json)
Hash identifier:          tjs03ctOV2TeeMG/Ee5tOcEXLXmo8otuvue+aQ3ACqY=
Subject key identifier:   DC:91:72:5D:CC:71:07:8E:76:0B:1C:50:37:4B:53:3E:19:13:20:7A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5819524DF62DCB316871780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3ee605-132f-3191-9d2a-d90cc9badb1c.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        67.54.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:95:24:df:62:dc:b3:16:87:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=ebaad4b4-c134-4500-916c-907289c2d29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cf:d6:44:67:bc:c1:c3:81:3d:bb:3a:28:54:
                    fa:9e:de:d9:1d:fc:bd:5c:32:ea:61:23:62:4e:92:
                    ea:ce:e4:a7:23:4e:ed:89:ef:44:88:b0:ae:4f:84:
                    3b:c5:15:30:39:86:ca:e3:a6:9a:e9:a1:22:5b:fb:
                    57:9a:a3:72:da:cb:f3:9d:85:d3:cc:de:66:04:ab:
                    d4:14:59:de:13:0b:c9:0e:a1:52:f5:03:bb:1e:94:
                    24:6c:71:76:6d:13:09:f7:42:36:42:28:f3:32:04:
                    5b:f7:dc:bb:39:f3:de:7b:12:20:53:8a:ab:56:01:
                    99:63:24:a4:a4:3f:8f:75:e2:7e:38:d0:4a:f8:04:
                    d3:43:ba:9a:b4:88:7a:08:d1:c1:c5:24:b7:e2:ae:
                    f2:bd:4d:4c:8e:66:b4:d7:83:e5:67:6c:d9:6a:c1:
                    aa:93:40:b7:29:8f:ab:3f:bb:07:40:42:b8:dd:c0:
                    32:48:95:d4:05:64:fa:cf:c4:fb:1c:98:ad:51:2f:
                    dc:6f:de:d1:8f:10:a4:43:bd:0a:2e:0b:80:52:a0:
                    16:8e:2d:71:84:b0:69:6c:6a:b9:57:f3:eb:09:78:
                    bf:51:f2:05:3e:9e:cc:a9:3b:7d:79:94:5b:e5:65:
                    9c:97:d2:43:00:26:a3:3a:60:3f:20:31:ef:e2:5a:
                    21:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:72:5D:CC:71:07:8E:76:0B:1C:50:37:4B:53:3E:19:13:20:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3ee605-132f-3191-9d2a-d90cc9badb1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:41:53:df:62:a9:6e:ff:ae:71:4d:d6:c8:d1:91:10:f3:80:
         33:7c:b7:61:69:4a:43:08:39:f7:8f:5e:f9:62:f9:ca:2e:73:
         d1:22:1f:1d:c3:0a:e9:a2:26:3b:6b:a9:89:6e:2a:b2:48:fd:
         2b:01:08:80:7a:a3:7d:32:66:02:7d:94:7a:25:09:29:27:48:
         c3:7d:43:ef:23:4c:8b:be:67:7a:8d:5b:e0:e1:eb:bb:54:17:
         b0:23:9a:60:4d:fe:39:c3:cb:94:d1:f1:b4:e1:74:0b:3f:5f:
         eb:88:d5:a0:19:e4:22:20:03:26:2e:37:a2:fd:79:84:63:72:
         03:9f:b9:80:17:fe:c0:be:40:c8:d8:ae:af:52:99:05:a5:ad:
         e3:ed:eb:a9:34:8f:5a:fd:ba:29:f8:a9:5a:7f:71:a0:12:bf:
         30:65:58:90:8a:9b:b0:d1:93:65:38:4b:14:7a:86:fd:fa:0d:
         b1:21:b9:5e:97:6d:84:f8:b8:a0:79:cb:8d:84:e3:4c:8a:67:
         97:49:9c:ab:5e:0b:33:20:1d:1c:bc:a1:2b:ba:c2:f7:ea:df:
         de:cd:e7:6f:e5:c0:76:aa:77:20:25:3f:90:a6:c0:b2:11:5f:
         25:2f:aa:58:47:92:6d:c8:06:d5:25:ee:0e:48:11:c6:88:6b:
         e9:f7:1a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:52 2025 by rpki-client