Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ddd1030-dbd6-3531-8b64-6bbcf155d450.roa
File:                     5ddd1030-dbd6-3531-8b64-6bbcf155d450.roa (raw, json)
Hash identifier:          /0+Zg4agx5w0wQi00QkD++SwVcco8AuLihnJABPqkuA=
Subject key identifier:   4C:86:5D:58:1B:72:A9:B2:E7:C7:89:B3:D6:D3:D7:75:01:C3:71:D3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58194E8AF0BC83DFE45FA00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ddd1030-dbd6-3531-8b64-6bbcf155d450.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        67.54.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:94:e8:af:0b:c8:3d:fe:45:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=d06d6f14-ef77-40ea-b72d-5302f7ddd01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3b:af:66:15:88:0d:48:c8:03:ae:13:c1:fe:
                    15:1c:33:43:0d:f6:0e:ed:9f:f8:b2:ef:a7:a7:81:
                    25:ce:3c:c1:07:a9:a6:9d:5d:33:77:c7:ac:c0:49:
                    50:30:c8:bf:52:65:09:ad:3d:3a:cb:aa:9a:28:dc:
                    0a:c5:c9:3e:5f:88:26:fc:6c:f2:f3:bf:5d:c3:5f:
                    25:58:29:ee:3b:ce:79:a3:9c:e5:23:7e:52:ca:0f:
                    04:57:7e:e8:71:22:40:7f:2b:79:51:a9:25:26:60:
                    13:b3:a5:b8:19:ef:ac:a7:0b:96:d1:a3:3f:00:f5:
                    f6:30:b3:ee:9a:75:3a:50:cb:f7:dd:07:28:ab:92:
                    a2:d2:69:02:4a:7a:79:db:de:23:ca:7b:07:e3:68:
                    f5:b5:34:29:6c:87:9b:1d:76:50:81:f3:0b:a5:34:
                    7b:95:14:7a:07:d4:8b:8a:84:99:a6:f6:68:85:59:
                    46:1b:26:48:e5:cd:c6:ac:ce:71:0d:f3:1f:cb:4d:
                    1d:f4:17:2d:ef:92:11:c9:66:1b:80:91:8b:bb:b8:
                    87:39:fb:be:f9:61:4f:75:4f:8e:b8:27:0f:34:01:
                    66:82:4a:1e:df:33:5b:15:b6:98:01:a8:62:79:7e:
                    c2:17:ad:5f:79:3d:ac:e2:20:3c:09:00:36:37:15:
                    16:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:86:5D:58:1B:72:A9:B2:E7:C7:89:B3:D6:D3:D7:75:01:C3:71:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ddd1030-dbd6-3531-8b64-6bbcf155d450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:37:ce:96:90:7e:30:d5:ba:62:bb:99:d4:d9:79:d4:8b:7d:
         aa:29:2d:50:49:8f:f8:9e:89:86:a7:12:23:58:51:d6:b0:56:
         00:fd:6c:7a:b0:28:6e:a3:86:2a:72:a0:8e:3f:a9:9f:be:1f:
         3e:4d:86:88:2a:47:96:86:0a:fe:a8:75:c0:a5:87:9f:3b:28:
         3d:cb:e6:e1:fe:a6:ea:1e:d9:87:bd:00:92:f7:2f:9d:88:bd:
         af:29:0a:4e:da:5c:e2:cb:4f:aa:fd:00:87:12:0b:fc:77:ff:
         a3:ca:d7:d3:30:7c:8d:97:96:89:28:7f:50:5a:0a:38:f4:10:
         0f:30:64:f1:f4:c7:cf:d2:e5:84:0f:b7:62:f3:12:5f:ab:7e:
         c2:71:65:88:eb:6c:ee:0b:a2:31:06:43:3f:f5:f9:38:4e:7e:
         eb:2e:f9:43:cb:11:c9:64:62:29:88:aa:f3:e4:01:50:2f:48:
         30:a7:84:47:a8:b2:d8:e0:53:d9:dd:93:cb:c5:ae:da:30:b9:
         0c:73:ef:a7:93:c2:f9:c0:ba:a4:6e:5b:36:20:e4:6f:73:42:
         bd:73:07:97:05:5e:d7:cb:58:8d:d3:97:32:bb:ce:a3:7b:69:
         3a:3c:f2:3a:5a:88:2b:90:43:90:13:af:44:da:98:70:bf:f0:
         76:80:79:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:40 2025 by rpki-client