Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ddd1030-dbd6-3531-8b64-6bbcf155d450.roa
File:                     5ddd1030-dbd6-3531-8b64-6bbcf155d450.roa (raw, json)
Hash identifier:          c8bj/2Gvxs0Tw7PnDLkiIn/FOJdrkxDT9Yj+0uj88Nc=
Subject key identifier:   16:4C:90:B8:7A:98:73:F4:95:EF:B0:D8:FA:CC:21:AD:88:A7:DD:AB
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AC32BCBADD95C44807F00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ddd1030-dbd6-3531-8b64-6bbcf155d450.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        67.54.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:c3:2b:cb:ad:d9:5c:44:80:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=02f08cad-57f3-40f1-b5d5-93f2a8ad0677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:3e:72:8f:7b:e9:88:ee:c1:57:20:88:0f:
                    c1:f4:06:c8:fa:ed:c8:7a:ed:b4:29:6a:64:95:6b:
                    57:f7:43:5b:e6:b1:69:91:18:06:9b:cc:bb:eb:74:
                    52:ff:eb:45:0d:d8:6c:60:45:1c:6a:08:7a:34:33:
                    ac:99:79:ba:12:fa:f8:e6:52:ac:1b:72:7a:58:c7:
                    74:14:f9:16:60:14:bd:1a:5b:91:5f:f0:b5:2b:3f:
                    d3:2e:13:13:2a:43:b5:3c:55:58:07:91:a3:1a:0d:
                    2f:11:39:72:be:1d:6f:11:7d:35:6f:30:e1:76:dc:
                    f4:b5:d0:a5:4c:82:94:0b:1d:93:02:5b:25:da:a1:
                    ee:f7:4d:e1:f3:31:9c:dd:f8:6a:b8:46:88:ce:e1:
                    3a:b2:61:38:bf:39:17:19:e9:e0:32:5b:df:1d:79:
                    c5:e0:e6:59:44:9f:4e:5b:8e:bc:ac:02:23:02:c1:
                    1b:40:0a:23:35:45:d9:13:25:98:01:eb:04:d2:0b:
                    b5:d0:99:eb:08:35:c3:b7:9a:70:72:1a:d3:75:81:
                    2a:c6:02:95:56:fc:bb:29:28:1c:ad:b0:39:1e:90:
                    5c:f2:6a:50:27:61:f2:4f:cb:d3:79:c2:d3:ed:44:
                    54:e1:95:44:2e:a6:29:91:d1:e3:71:d9:f9:9f:ff:
                    65:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4C:90:B8:7A:98:73:F4:95:EF:B0:D8:FA:CC:21:AD:88:A7:DD:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ddd1030-dbd6-3531-8b64-6bbcf155d450.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:02:8e:7d:d2:94:38:78:1d:25:53:54:35:7a:3f:e7:58:c6:
         7d:08:b6:30:e1:03:9d:bc:69:53:b2:99:8f:e2:94:d8:04:60:
         43:db:2f:98:32:0d:b8:75:79:7b:f1:8e:dc:41:2f:e3:a8:ce:
         12:05:4e:92:b6:63:d6:e2:9b:b2:83:43:e4:3b:fa:44:1d:32:
         dd:8e:9a:f4:01:21:cc:c7:9c:84:6a:d6:34:99:b6:f9:e8:73:
         24:00:2f:0d:e0:25:00:00:ab:9d:70:a4:d9:c1:cb:3b:55:8e:
         1a:2d:f6:f0:7b:11:4d:35:ff:67:fe:c5:f2:36:77:cb:83:3e:
         23:6e:f7:61:64:f8:68:34:ea:ff:a7:2c:d0:53:e5:90:b7:d1:
         65:a1:2f:40:3c:cb:ba:aa:bf:dc:4a:9a:c8:9c:43:39:84:be:
         11:f0:81:c0:cf:4f:fa:91:af:21:42:be:16:42:91:1e:18:a5:
         86:14:d6:12:b5:71:41:40:89:f4:59:98:cb:96:0e:05:83:31:
         f5:ac:c5:30:92:08:6e:f7:93:8d:c4:6e:d0:50:aa:0f:15:1b:
         4e:b0:0a:7d:04:93:f0:3e:85:78:56:f5:32:c4:89:d0:92:75:
         4c:00:8d:61:3d:50:12:93:76:2e:3f:9c:b6:bd:f5:2b:e6:a3:
         61:18:4b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:01:35 2024 by rpki-client on console-fra.rpki-client.org