Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/663dc28d-fd53-3953-81aa-9dd7870a2bd8.roa
File:                     663dc28d-fd53-3953-81aa-9dd7870a2bd8.roa (raw, json)
Hash identifier:          l0TDE/EYRffO3g9S0oOQzQz97wBs97DuTtWyBHTOI2c=
Subject key identifier:   08:44:CB:B4:D8:70:5F:C9:95:08:3E:62:B4:5F:F7:EE:5B:66:0A:96
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF526EC10B5D92235B350
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/663dc28d-fd53-3953-81aa-9dd7870a2bd8.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        67.54.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f5:26:ec:10:b5:d9:22:35:b3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=1790bdcd-8c35-4f4f-8f5b-5f994614a876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ac:f3:f1:ec:bb:27:3a:7a:f3:b0:a7:84:ac:
                    d4:db:0f:f8:e9:19:79:d2:5c:0c:53:ec:77:5b:5a:
                    32:6c:5b:aa:95:00:b3:d9:41:80:3e:85:9d:70:24:
                    47:26:a2:8d:85:3c:92:2a:54:57:6d:b4:07:1a:0c:
                    9e:fd:20:9f:ad:c4:49:c1:68:14:70:2b:23:ac:fa:
                    87:b6:61:77:ae:a5:e3:1a:35:50:e8:a7:f1:f0:35:
                    be:a2:a7:41:89:30:b9:81:5d:e1:64:51:fb:a0:0e:
                    9e:c9:c3:1d:79:90:70:6d:bb:c7:4b:49:f0:a8:80:
                    41:09:1c:86:79:30:bb:ab:91:28:01:27:d2:67:ad:
                    e4:db:bd:f4:06:3a:d4:16:1e:1c:a1:4d:81:45:e9:
                    1b:82:49:5f:eb:99:1f:ad:ea:dd:ec:6f:99:b5:ff:
                    76:cf:72:91:b0:21:0d:84:c5:cd:b3:d9:93:33:44:
                    c0:52:ba:59:4c:89:06:26:24:3c:c0:8f:3c:c7:1c:
                    8c:4b:7a:8f:76:08:70:59:13:6d:48:30:89:d1:d2:
                    58:2a:4f:46:b1:25:2e:ca:1b:6f:95:9c:36:6d:17:
                    8d:57:28:61:a2:33:35:79:7f:cc:19:88:96:05:70:
                    b4:10:b8:95:b0:33:6e:fa:a8:c8:25:db:35:55:9b:
                    35:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:44:CB:B4:D8:70:5F:C9:95:08:3E:62:B4:5F:F7:EE:5B:66:0A:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/663dc28d-fd53-3953-81aa-9dd7870a2bd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:05:20:05:8d:ed:cc:54:e6:14:90:22:51:03:b8:f0:c3:55:
         8c:44:31:ef:4d:db:e9:10:83:dd:4a:3f:4d:05:b9:57:41:e1:
         4f:d2:55:7e:cd:14:52:21:f0:95:16:13:2d:23:cc:c8:ce:f4:
         d1:a2:09:0c:0c:05:0d:72:1a:19:31:b3:6d:e2:c6:5e:a0:e2:
         c0:28:56:23:55:e9:c5:1b:f0:50:d8:67:22:8b:b6:c2:cb:59:
         43:07:4f:82:11:56:be:0a:c5:a2:cd:e6:45:6f:f6:7f:f8:8c:
         cc:f6:66:1a:fd:b4:5a:7c:c8:f8:83:45:f2:0a:48:60:f8:fc:
         b8:91:fe:c4:3a:32:c9:03:0f:fb:00:6d:f7:ea:7f:34:68:0e:
         05:fc:4d:0f:f2:47:26:80:2e:35:20:01:a3:3a:a5:0b:fa:33:
         0e:bc:1d:9c:67:30:98:af:09:b3:15:98:75:c7:8b:8b:5b:fc:
         56:ca:b8:c9:7e:a3:db:37:32:93:32:91:ff:00:3a:67:4f:c9:
         cf:91:bb:b9:ee:01:bd:7f:2f:fd:cb:a2:46:6c:07:a7:aa:c5:
         8f:a7:b8:fa:51:08:cb:4f:eb:f3:e3:d9:79:88:d1:e9:dd:45:
         a6:ab:b4:15:2a:2c:f2:98:8f:04:60:bc:ac:0e:2f:ac:0c:3b:
         03:44:5d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org