Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dfafc76-a0e4-3760-af6d-44f2966b4425.roa
File:                     8dfafc76-a0e4-3760-af6d-44f2966b4425.roa (raw, json)
Hash identifier:          a9AiHDeKLxtPn4aYV0kHXRs+n/Kk6xoiIZYyruf259M=
Subject key identifier:   DE:85:54:D8:46:63:A4:D8:54:AB:6D:69:B3:92:C4:02:B8:3F:D3:27
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF3E2C9F4DF13BD4C9800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dfafc76-a0e4-3760-af6d-44f2966b4425.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        67.54.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f3:e2:c9:f4:df:13:bd:4c:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=0d8aecd8-da6a-4001-9b69-0a55c03805e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:92:0c:f7:76:bf:b6:6a:93:59:8b:01:2b:
                    44:3a:51:b3:0c:ec:d0:26:cb:10:89:d5:79:43:a0:
                    19:6e:17:17:02:e0:08:1f:a2:1d:90:b6:bf:18:1e:
                    8c:a9:26:8d:7a:d8:3e:9b:c4:46:92:ae:81:f9:60:
                    40:92:d9:a7:76:01:54:6d:5d:11:d7:3b:b9:d7:af:
                    e5:f4:28:8f:79:89:4e:3b:e1:8d:6f:a4:14:e9:52:
                    5a:89:3d:7f:b9:d0:6b:47:0f:5a:f6:80:28:5c:ea:
                    bb:52:5b:ce:94:f2:0a:c2:e6:14:2b:aa:d6:a9:cb:
                    13:07:3a:1c:a3:68:c2:ff:9e:45:a8:e9:e5:a6:f8:
                    9b:46:12:36:16:7d:24:28:76:96:55:77:9e:15:7d:
                    8c:35:3b:5c:ea:6e:dc:d6:b6:37:7d:e9:a5:d5:24:
                    31:f2:76:bf:a1:96:ed:62:44:ec:fe:c3:55:0e:1d:
                    ae:20:4c:6d:14:cc:4d:21:0d:c4:77:b1:a9:f2:62:
                    27:2f:58:5f:b8:ba:8b:c1:d8:6f:56:9f:53:ac:2b:
                    f9:41:bf:07:9e:99:8d:15:6a:1e:28:0b:40:de:10:
                    07:ad:e7:bd:78:fd:41:b8:6e:1c:e9:cb:da:6e:06:
                    1a:ef:f2:89:6f:49:30:77:cd:e7:5e:30:32:14:69:
                    51:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:85:54:D8:46:63:A4:D8:54:AB:6D:69:B3:92:C4:02:B8:3F:D3:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8dfafc76-a0e4-3760-af6d-44f2966b4425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:18:25:80:24:bd:17:89:14:a2:51:f2:d2:50:74:25:4d:ea:
         07:a6:24:db:e2:01:be:3d:23:1f:52:84:36:85:f6:c1:ad:f4:
         27:d6:01:9d:de:27:62:6b:85:da:6f:95:39:32:60:a0:3d:1c:
         4d:4c:2f:5a:d1:ee:5d:84:9e:d0:ee:57:16:5a:33:a8:1b:bc:
         4e:57:2d:5b:4d:78:50:27:9a:c3:01:72:f1:6b:43:04:2a:07:
         0f:8e:cc:a3:9d:35:b1:8e:3a:02:5e:3d:a3:98:bb:df:57:84:
         d1:bb:7f:cd:bb:89:69:2a:dc:58:05:c9:4d:a0:17:f9:e0:b1:
         34:20:f1:97:2c:96:48:98:17:0a:9b:89:3b:1c:38:b9:d0:91:
         72:d0:db:3d:9f:4d:f7:8f:54:52:76:bd:bd:90:9f:b4:3f:a7:
         d1:e2:16:27:af:ef:a3:8e:76:87:cf:fd:9e:67:3e:96:3b:58:
         dc:b0:11:8e:16:9e:73:3d:01:d1:3c:39:82:4b:17:32:27:86:
         42:26:23:49:49:eb:5d:f2:9b:2c:53:7a:37:aa:b2:74:8d:7a:
         6c:57:5e:3b:74:e6:c6:da:3a:06:a9:ea:25:5e:ec:c1:63:70:
         73:b2:42:66:84:6e:99:da:e5:85:66:d1:e9:0c:64:e4:8c:79:
         93:6f:37:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:14:08 2024 by rpki-client on console-ams.rpki-client.org