Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a314008a-1b76-3c43-a0ee-dca834765f17.roa
File:                     a314008a-1b76-3c43-a0ee-dca834765f17.roa (raw, json)
Hash identifier:          awvh1MS6xToHJKesrSF6vTMh4usKAqeBsX7Ug/dDD+Y=
Subject key identifier:   4B:C0:71:E1:3E:83:5E:5C:B9:C8:FE:32:8D:75:68:98:DB:A8:BA:5F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58100A1B52AD1211E3AA780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a314008a-1b76-3c43-a0ee-dca834765f17.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        67.54.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:00:a1:b5:2a:d1:21:1e:3a:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=f54ed60e-c395-4f3e-80ca-321ba0a5d316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f0:e0:c3:68:1d:b3:cc:64:91:c3:59:48:4f:
                    24:9b:f2:27:aa:4f:ab:19:52:33:19:e3:c7:9b:71:
                    e7:53:bf:c5:48:30:f2:f6:59:0f:d6:ed:98:58:40:
                    1c:05:93:7c:2d:c7:8f:d6:61:84:95:7b:2a:35:5b:
                    0f:ea:c0:cb:ad:2d:85:1a:a8:c9:cf:bb:10:60:5f:
                    dd:ff:95:40:92:7e:13:83:cd:f8:05:1b:aa:0d:7c:
                    23:d5:da:00:67:69:f7:8d:a3:24:e8:f4:6d:d1:06:
                    c3:f9:97:8f:d0:81:0b:22:8c:7c:89:2e:ae:8b:01:
                    1d:23:f6:b2:c2:3b:f7:4e:b4:0b:fd:bc:bd:b1:47:
                    1c:e9:1f:f9:d3:d6:ba:bb:7b:ff:82:04:27:79:62:
                    f1:0c:d7:2b:d7:d8:c1:b8:99:10:fb:56:95:c4:ee:
                    b5:51:81:d2:a7:6f:1f:48:75:db:d6:8b:93:f1:b7:
                    be:d2:bf:34:c9:89:fb:b5:07:8a:a1:e1:f8:fd:a0:
                    09:d5:8d:22:d3:85:af:5e:3a:08:ee:76:6d:f0:3b:
                    5f:cd:6b:b5:7f:db:73:89:38:d4:9d:c4:d0:28:49:
                    cc:0d:8f:10:66:42:06:1b:01:6e:f9:b1:22:04:67:
                    89:36:b6:62:f0:6a:51:28:4d:42:14:7a:68:a7:68:
                    97:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C0:71:E1:3E:83:5E:5C:B9:C8:FE:32:8D:75:68:98:DB:A8:BA:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a314008a-1b76-3c43-a0ee-dca834765f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:19:1a:f1:f0:9f:75:27:cd:49:a4:09:5f:13:86:2e:fb:89:
         31:be:77:1e:7b:3a:2c:e4:00:a7:c0:02:7b:7c:c8:0b:c8:a0:
         fc:ef:ad:08:fd:e7:6c:37:73:ec:20:f8:0e:d0:ec:88:2f:26:
         d5:35:8a:f3:a7:d2:75:81:3a:99:26:fd:ea:01:1b:52:7c:4c:
         c6:6e:41:15:f0:f1:7a:d6:b9:74:9e:94:55:c4:e0:c8:bb:b6:
         3f:bf:00:f1:44:88:9b:d1:87:37:8e:bc:7d:f5:77:c3:6c:90:
         ce:d1:92:dc:29:a1:90:39:d4:a1:c5:7f:b2:5b:c3:81:a7:d4:
         be:63:d1:46:9c:55:86:eb:01:13:5c:4d:27:eb:5a:70:bb:ce:
         bb:97:4e:45:43:f9:f3:0e:0d:85:ea:91:6c:6c:7e:fc:02:7e:
         ce:a7:ca:ca:d1:3b:c0:75:08:39:37:e1:b8:a2:a1:84:47:5c:
         94:17:7f:b0:14:fe:2e:8a:d0:af:ef:2d:dd:0f:75:4a:bf:bc:
         be:97:c5:3e:8e:a9:76:87:ae:e4:14:88:60:0a:36:f7:86:10:
         27:d8:8e:e7:6b:0c:1e:06:1e:61:a8:08:e9:07:00:be:1e:e3:
         f0:8e:44:01:a3:c2:92:65:6a:23:c7:d9:cc:d1:3b:57:7a:a2:
         40:05:ab:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQChtSrRIR46p4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZjU0ZWQ2MGUtYzM5NS00ZjNlLTgwY2EtMzIxYmEwYTVkMzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPDgw2gds8xkkcNZSE8km/Inqk+rGVIzGePH
m3HnU7/FSDDy9lkP1u2YWEAcBZN8LceP1mGElXsqNVsP6sDLrS2FGqjJz7sQYF/d
/5VAkn4Tg834BRuqDXwj1doAZ2n3jaMk6PRt0QbD+ZeP0IELIox8iS6uiwEdI/ay
wjv3TrQL/by9sUcc6R/509a6u3v/ggQneWLxDNcr19jBuJkQ+1aVxO61UYHSp28f
SHXb1ouT8be+0r80yYn7tQeKoeH4/aAJ1Y0i04WvXjoI7nZt8DtfzWu1f9tziTjU
ncTQKEnMDY8QZkIGGwFu+bEiBGeJNrZi8GpRKE1CFHpop2iXRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEvAceE+g15cucj+Mo11aJjbqLpfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTMxNDAwOGEtMWI3Ni0z
YzQzLWEwZWUtZGNhODM0NzY1ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0ZGvHwn3UnzUmkCV8Thi77iTG+dx57OizkAKfAAnt8yAvIoPzvrQj9
52w3c+wg+A7Q7IgvJtU1ivOn0nWBOpkm/eoBG1J8TMZuQRXw8XrWuXSelFXE4Mi7
tj+/APFEiJvRhzeOvH31d8NskM7RktwpoZA51KHFf7Jbw4Gn1L5j0UacVYbrARNc
TSfrWnC7zruXTkVD+fMODYXqkWxsfvwCfs6nysrRO8B1CDk34biioYRHXJQXf7AU
/i6K0K/vLd0PdUq/vL6XxT6OqXaHruQUiGAKNveGECfYjudrDB4GHmGoCOkHAL4e
4/CORAGjwpJlaiPH2czRO1d6okAFqy0=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:01:09 2025 by rpki-client