Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6477d61b-0201-3736-9656-a4dbe46fd5f7.roa
File:                     6477d61b-0201-3736-9656-a4dbe46fd5f7.roa (raw, json)
Hash identifier:          aJtBr157NcdkcYRd4k/MNNeQnfM+8SazdTu8BXD5Als=
Subject key identifier:   D3:CC:7E:73:D6:A2:25:F1:D5:30:1C:81:E0:08:14:A8:B7:0A:30:B9
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D75A710A0F8AFAD55F580
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6477d61b-0201-3736-9656-a4dbe46fd5f7.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        67.54.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:75:a7:10:a0:f8:af:ad:55:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=cdb51c9d-4065-462b-81b4-04795ca704c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6c:08:fe:31:99:5b:a1:ea:ba:8f:4c:06:a6:
                    e1:ea:cb:53:f6:01:6e:a8:32:6b:72:a1:cb:b3:1f:
                    1b:a5:6a:f9:7a:2f:0e:47:1b:76:b6:c1:b2:d6:00:
                    6b:b9:69:27:ef:44:52:d5:5c:ad:03:2f:57:50:91:
                    f7:86:c3:18:85:4e:08:56:b5:24:9f:3d:c2:c7:69:
                    eb:c1:a9:e3:df:c6:22:e6:34:48:9b:62:dc:ed:a3:
                    85:a3:0f:d7:26:3c:fd:28:d3:a6:83:be:df:4f:31:
                    25:7d:e2:99:9e:bf:6b:44:7f:d7:bc:0f:00:fa:ed:
                    30:37:98:5c:08:ff:aa:d8:f2:55:81:b5:26:cf:9d:
                    2a:70:3a:fc:6c:7a:19:ee:74:6d:e9:5a:48:2d:9f:
                    90:89:f9:ba:6c:7c:e5:4c:b0:3f:9e:d6:f1:f7:66:
                    87:12:b3:17:de:9a:d6:4a:f2:52:ac:e3:b2:b3:d2:
                    19:74:a8:72:86:1a:6a:dc:4b:e9:35:8d:63:1b:a5:
                    a6:4b:28:ba:11:c8:72:92:cf:58:ea:9e:18:17:dc:
                    5c:a7:84:53:db:64:e9:2c:49:44:2d:e0:ab:91:c5:
                    cc:90:dd:60:51:a4:d7:14:f3:fe:14:fc:64:b9:71:
                    2a:6e:6f:9c:15:10:5f:9c:b0:5e:b3:6d:0e:e7:ec:
                    53:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CC:7E:73:D6:A2:25:F1:D5:30:1C:81:E0:08:14:A8:B7:0A:30:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6477d61b-0201-3736-9656-a4dbe46fd5f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:a6:29:ef:e1:ec:a8:b9:4c:8d:2c:45:c5:14:c2:59:51:13:
         3a:55:94:9e:09:43:a3:a0:e0:8d:39:1c:20:55:26:e0:51:d0:
         72:99:d7:90:a7:77:32:96:8d:6a:47:12:e2:83:d6:e8:f2:90:
         f7:6f:2b:9e:38:24:7b:34:41:2c:73:aa:9c:aa:d1:ee:cb:9a:
         a3:28:f2:92:3c:79:8e:0f:92:66:e4:1b:c3:00:b5:88:c0:7a:
         25:fe:df:54:ae:c6:0d:c6:4f:65:f2:59:b7:11:9a:82:be:1d:
         4e:2a:e2:cb:fe:2a:4a:c1:7e:b5:e2:b0:ba:51:43:a4:72:dc:
         56:c9:82:cf:49:4a:36:ab:28:f9:63:77:30:aa:88:88:01:1d:
         e1:79:d7:12:ad:fa:a6:4f:20:5a:b2:43:de:53:29:7e:71:6a:
         ad:6d:eb:e8:3f:aa:7f:b4:92:37:52:70:0f:03:9c:3c:d0:b2:
         67:40:d6:a8:1d:32:0f:c1:7c:f8:8b:09:10:c8:49:2b:0f:bc:
         d1:18:7a:ad:57:e7:58:ea:e8:82:be:eb:ad:57:c5:05:a9:18:
         2b:73:38:50:7b:80:aa:ff:a6:ad:b9:0b:ab:a4:91:10:26:f0:
         a7:a8:cf:2e:d3:83:b0:64:fc:20:83:c9:9a:42:e1:5f:17:21:
         be:63:fb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org