Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691525f4-440e-36c9-aa06-bce7ead90a3c.roa
File:                     691525f4-440e-36c9-aa06-bce7ead90a3c.roa (raw, json)
Hash identifier:          9amJw7zQM57g15s+bdb15lCUAoAUQ2Sm3GQ91McNkKA=
Subject key identifier:   58:E8:7D:D0:0B:0D:EB:53:91:77:EE:44:F5:39:78:25:DB:D0:CD:2E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF4914D9355004FAEF830
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691525f4-440e-36c9-aa06-bce7ead90a3c.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        67.54.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f4:91:4d:93:55:00:4f:ae:f8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=5cf9b32d-a08d-4f5f-a39c-a5c4a0e68de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:75:8d:5a:30:dc:32:f9:84:38:e4:3f:ef:d8:
                    23:31:e0:7a:ee:75:d5:f4:70:d2:f6:76:83:ff:6c:
                    95:1e:7b:a8:59:86:48:01:7b:93:92:ca:0d:af:17:
                    85:e5:98:63:69:66:43:e2:28:dc:20:81:5c:e5:a7:
                    6d:25:3c:32:4b:bf:e5:15:5e:0d:91:09:f3:90:3c:
                    2a:3d:6f:4f:76:86:82:a5:b5:55:82:6a:ed:e4:5a:
                    76:6a:54:02:61:38:11:9a:89:6a:8b:36:c9:99:29:
                    53:d9:4e:c5:1d:20:d6:49:2d:57:ae:6a:7e:72:aa:
                    a2:07:d3:42:a0:8f:78:97:ca:7b:63:a6:b6:f6:51:
                    62:41:8d:c5:75:0e:8c:f8:f5:1e:af:45:8e:8f:1d:
                    fb:bb:f4:a9:57:b9:b3:3a:3f:7d:e3:68:a7:6f:b1:
                    33:e5:46:7e:be:e1:f1:ad:b0:44:59:c6:bd:d1:45:
                    0e:3f:5b:1b:8b:03:69:aa:e2:b9:01:5f:74:4c:23:
                    17:76:64:c2:dc:8c:3e:1e:54:a9:a0:2e:98:66:96:
                    c0:6e:c5:09:15:09:71:dc:56:a1:24:31:c1:0e:3f:
                    b6:a5:e2:95:d8:60:94:8a:ae:eb:c4:d1:00:b9:7e:
                    85:1e:a9:08:ac:2d:99:08:17:fd:cf:0f:11:77:c5:
                    f0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E8:7D:D0:0B:0D:EB:53:91:77:EE:44:F5:39:78:25:DB:D0:CD:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691525f4-440e-36c9-aa06-bce7ead90a3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:e0:e9:4d:b0:df:4d:59:04:25:b6:81:82:6d:12:6d:ae:30:
         16:a5:b4:01:dc:b3:00:41:8d:e6:7b:d2:01:dc:76:a3:fe:dd:
         c0:16:26:71:25:d7:37:aa:79:fd:27:c0:b7:72:e2:22:73:fb:
         24:77:c3:23:f0:cf:8b:e5:87:b9:ec:32:da:f4:e2:df:ef:a4:
         ea:73:00:c2:e2:67:ea:36:35:1a:41:19:50:92:88:87:b7:5b:
         ef:c1:ac:12:7b:c2:82:31:7e:b0:0d:11:c6:39:da:15:2d:dd:
         9c:7a:3f:00:4b:4d:ad:b7:68:d7:3a:2d:0a:cf:3a:22:c0:e7:
         17:d8:b3:2d:e8:0d:f4:0c:7b:fe:28:d8:f3:72:ae:81:2c:ab:
         fc:6c:9d:cb:32:f0:88:9b:c1:50:d0:13:c2:81:97:4f:45:3d:
         81:07:c7:c4:25:8d:86:57:6c:fd:89:6b:8b:84:00:d5:62:51:
         0a:bd:d1:e3:52:18:a5:8b:c6:d3:ee:92:09:fd:aa:8d:27:1c:
         32:ba:5b:fb:6b:f8:c9:96:f4:f3:63:bb:b7:37:fa:f6:bc:1e:
         80:29:a7:91:01:7e:28:c4:78:ae:27:bc:7f:9f:aa:6f:52:bc:
         dd:8a:de:38:5f:99:f4:6d:f1:98:42:5e:26:b9:47:a7:8d:8b:
         a2:b3:1d:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPfSRTZNVAE+u+DAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
NWNmOWIzMmQtYTA4ZC00ZjVmLWEzOWMtYTVjNGEwZTY4ZGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnWNWjDcMvmEOOQ/79gjMeB67nXV9HDS9naD
/2yVHnuoWYZIAXuTksoNrxeF5ZhjaWZD4ijcIIFc5adtJTwyS7/lFV4NkQnzkDwq
PW9PdoaCpbVVgmrt5Fp2alQCYTgRmolqizbJmSlT2U7FHSDWSS1Xrmp+cqqiB9NC
oI94l8p7Y6a29lFiQY3FdQ6M+PUer0WOjx37u/SpV7mzOj9942inb7Ez5UZ+vuHx
rbBEWca90UUOP1sbiwNpquK5AV90TCMXdmTC3Iw+HlSpoC6YZpbAbsUJFQlx3Fah
JDHBDj+2peKV2GCUiq7rxNEAuX6FHqkIrC2ZCBf9zw8Rd8XwmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFjofdALDetTkXfuRPU5eCXb0M0uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjkxNTI1ZjQtNDQwZS0z
NmM5LWFhMDYtYmNlN2VhZDkwYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANLg6U2w301ZBCW2gYJtEm2uMBaltAHcswBBjeZ70gHcdqP+3cAWJnEl
1zeqef0nwLdy4iJz+yR3wyPwz4vlh7nsMtr04t/vpOpzAMLiZ+o2NRpBGVCSiIe3
W+/BrBJ7woIxfrANEcY52hUt3Zx6PwBLTa23aNc6LQrPOiLA5xfYsy3oDfQMe/4o
2PNyroEsq/xsncsy8IibwVDQE8KBl09FPYEHx8QljYZXbP2Ja4uEANViUQq90eNS
GKWLxtPukgn9qo0nHDK6W/tr+MmW9PNju7c3+va8HoApp5EBfijEeK4nvH+fqm9S
vN2K3jhfmfRt8ZhCXia5R6eNi6KzHbc=
-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:38 2024 by rpki-client on console-ams.rpki-client.org