Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9822e53b-13b4-3406-8189-3fb062a4837a.roa
File:                     9822e53b-13b4-3406-8189-3fb062a4837a.roa (raw, json)
Hash identifier:          xV4BeUVzYmHaWxKhww/C5XNQHyrK7rDVzu+dZH+ehyU=
Subject key identifier:   2B:EE:3A:7C:7F:C8:05:3E:A2:27:DC:D9:7A:ED:87:46:27:E6:8A:59
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D7673650CEAEFD00628E0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9822e53b-13b4-3406-8189-3fb062a4837a.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        67.54.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:76:73:65:0c:ea:ef:d0:06:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=a22d0026-106e-4b71-8d1d-e07aa89ea503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:dd:0e:f1:36:81:80:4a:c0:a3:fb:e7:f5:e0:
                    a6:5f:61:7e:1a:33:e0:2e:1b:c1:40:1b:14:1b:e5:
                    be:f2:bd:3d:5d:23:4b:8e:0b:26:0c:27:27:9d:9a:
                    78:15:4c:e7:60:4f:cf:d4:8f:e7:63:a6:b4:74:e2:
                    45:3c:22:95:e4:f3:a6:7d:82:b2:ab:d1:7d:b4:94:
                    0d:b0:26:a8:d4:fb:38:e5:fc:52:ee:3f:3b:d9:f9:
                    16:ea:d7:05:7b:6d:25:a8:f1:77:85:ad:95:aa:3a:
                    c2:26:b0:30:7c:bf:53:b3:dd:5c:5a:d7:b0:6c:3f:
                    fb:99:72:eb:a1:5c:26:df:14:0c:58:f2:e0:7f:98:
                    da:dc:02:90:0f:99:49:c9:e5:6b:11:b3:d2:64:ea:
                    55:59:87:82:2d:66:5a:b3:a5:3d:02:d3:5b:1b:e1:
                    31:4b:43:43:57:81:d0:de:de:e7:67:61:f4:af:29:
                    0a:85:ea:de:b5:59:31:ec:a0:58:5e:d7:55:b5:93:
                    ed:e7:ec:1c:ba:79:33:66:6e:30:1f:6e:13:4e:da:
                    c3:ae:ea:79:76:5a:ee:4d:50:fc:31:50:bc:e5:70:
                    de:73:12:71:07:05:82:27:6a:52:87:d3:85:88:b1:
                    04:6c:0b:42:e0:39:76:f1:90:9a:1f:75:a7:9d:14:
                    ce:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EE:3A:7C:7F:C8:05:3E:A2:27:DC:D9:7A:ED:87:46:27:E6:8A:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9822e53b-13b4-3406-8189-3fb062a4837a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:a7:54:21:4e:5e:29:84:4d:59:71:17:4c:c7:2b:26:82:30:
         03:dc:a1:86:3c:0b:c1:48:ec:42:50:7e:60:50:0d:4c:75:23:
         e6:42:c9:33:ad:5c:8a:29:46:a7:ce:a7:a8:44:90:be:c0:3f:
         41:b9:98:9c:33:b0:98:c5:71:41:d8:02:e9:2b:7e:d4:ee:0e:
         19:c2:68:d4:73:04:b4:92:77:fc:d6:f6:47:a5:5a:8a:04:47:
         8a:b9:3c:94:80:4d:2d:ff:be:85:a4:ec:a1:22:3a:dc:af:7c:
         c5:27:50:1f:7d:f3:3f:72:7a:8b:c2:c3:54:af:b4:6a:9c:32:
         62:b1:0d:28:73:2e:80:49:4a:8c:67:4d:19:6c:bc:d2:d6:b6:
         ee:dd:08:73:06:db:d5:03:7e:c1:96:d2:24:1d:e8:eb:55:c4:
         88:30:da:80:c9:a2:00:a3:7f:0c:94:f1:d2:03:77:f2:60:d4:
         a4:ea:3b:40:ec:e8:ff:6a:7d:a4:6f:a7:d4:96:36:51:a6:ba:
         f8:a9:2b:03:ed:bc:48:4d:06:63:4a:20:59:0e:9f:44:dc:1f:
         3a:39:e0:c2:a4:ec:00:a7:24:0a:ae:ef:c1:dd:3c:97:78:98:
         e8:7e:b3:18:7e:9b:67:c9:8a:9e:ac:30:f5:0e:6d:de:84:09:
         57:35:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:28 2024 by rpki-client on console-ams.rpki-client.org