Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6c04fb4-6954-37f7-bac0-f3da323e0f91.roa
File:                     a6c04fb4-6954-37f7-bac0-f3da323e0f91.roa (raw, json)
Hash identifier:          RCdMB2bzKiyQ5Vh+AMVz1mGeqlQqIVkLk76bmgRmJWg=
Subject key identifier:   9B:DC:DC:65:5D:B4:20:B0:40:46:1C:0D:FF:68:32:53:1F:DE:FD:59
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58100F27910D1E6C8BCD800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6c04fb4-6954-37f7-bac0-f3da323e0f91.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        67.54.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:00:f2:79:10:d1:e6:c8:bc:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=31f6178a-fc37-46f8-8795-6a3e9d10f555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6a:c1:ab:ed:18:e6:68:f2:91:00:aa:47:00:
                    ae:d7:57:3b:a6:21:43:a1:76:e9:ce:aa:36:0f:3b:
                    90:63:84:f6:a4:a8:0e:90:47:7d:65:98:6e:03:b6:
                    93:1d:df:d7:6d:67:38:cf:cb:31:06:43:a1:de:96:
                    4d:c9:7a:54:d6:db:6c:da:00:35:01:e8:ae:7e:7c:
                    de:db:1b:72:76:a9:19:b4:62:ac:c7:4d:59:03:12:
                    df:81:11:66:b9:80:bf:17:ed:20:85:78:cb:bd:ef:
                    2c:be:9c:58:c6:fa:cb:e6:4d:44:06:87:e5:71:e6:
                    e6:07:f7:a1:5d:55:14:2e:73:c2:c9:52:52:4a:4c:
                    9e:64:aa:8a:33:58:a0:6a:cb:8d:bb:a0:d2:4e:dc:
                    a8:e5:ec:ca:30:64:b8:2e:dc:52:7c:90:e5:c6:9c:
                    ca:04:31:d2:15:03:58:72:7e:6e:0f:18:95:1e:d0:
                    b5:29:9d:f6:1c:9d:c5:9a:c2:60:69:77:ec:eb:71:
                    37:cc:76:01:e4:0f:6f:c1:68:6e:82:cf:c3:51:39:
                    41:9b:27:a0:85:ef:13:40:bd:b8:b8:ff:6a:6f:79:
                    9b:b1:b4:97:b1:b7:f2:b4:b0:03:20:0a:82:c2:01:
                    75:90:dd:55:1d:82:f2:75:52:3b:e9:9e:34:e0:b5:
                    1b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DC:DC:65:5D:B4:20:B0:40:46:1C:0D:FF:68:32:53:1F:DE:FD:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6c04fb4-6954-37f7-bac0-f3da323e0f91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:93:28:0e:c3:ba:f7:fe:15:27:df:16:eb:0d:61:35:08:1a:
         07:b8:5c:17:94:4f:ce:69:12:1c:5c:89:21:4d:96:d6:58:9d:
         70:d1:a9:c6:84:5f:0f:d2:4a:6a:82:aa:4c:bc:ef:72:87:85:
         ce:5a:ea:03:60:47:31:22:2d:62:93:c0:7b:e2:af:1b:51:02:
         4d:c7:38:58:82:47:dc:4c:64:0d:b6:c8:06:fe:e2:fa:78:2f:
         18:a9:e8:dd:10:56:5a:a8:77:52:5b:21:b5:ce:2a:dc:f0:e7:
         0d:27:86:19:2c:78:7a:e0:f9:43:96:b1:ca:1d:c4:f6:92:f0:
         20:c9:5e:33:5c:7e:9d:b7:2d:9f:17:bc:82:de:3a:ed:37:5c:
         ce:71:4e:dc:fc:dd:f7:70:8d:51:09:13:da:c4:3b:f7:3a:62:
         96:78:24:78:6b:33:0b:54:e3:fa:8e:f1:03:35:47:3b:7b:67:
         14:c3:67:04:cc:04:d2:1c:c9:2e:65:dc:32:f1:42:af:72:fe:
         18:e5:b7:4e:8e:de:9d:4c:fd:89:da:d7:8a:8b:b4:64:97:fa:
         6b:54:6b:c0:9b:7e:c9:fe:1c:54:1d:f7:5f:a0:78:1a:6f:09:
         82:3a:d5:7b:2d:37:54:d2:e7:19:81:1a:a4:1d:85:27:4a:c9:
         7f:88:fe:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQDyeRDR5si82AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MzFmNjE3OGEtZmMzNy00NmY4LTg3OTUtNmEzZTlkMTBmNTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGrBq+0Y5mjykQCqRwCu11c7piFDoXbpzqo2
DzuQY4T2pKgOkEd9ZZhuA7aTHd/XbWc4z8sxBkOh3pZNyXpU1tts2gA1Aeiufnze
2xtydqkZtGKsx01ZAxLfgRFmuYC/F+0ghXjLve8svpxYxvrL5k1EBoflcebmB/eh
XVUULnPCyVJSSkyeZKqKM1igasuNu6DSTtyo5ezKMGS4LtxSfJDlxpzKBDHSFQNY
cn5uDxiVHtC1KZ32HJ3FmsJgaXfs63E3zHYB5A9vwWhugs/DUTlBmyeghe8TQL24
uP9qb3mbsbSXsbfytLADIAqCwgF1kN1VHYLydVI76Z404LUbIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJvc3GVdtCCwQEYcDf9oMlMf3v1ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZjMDRmYjQtNjk1NC0z
N2Y3LWJhYzAtZjNkYTMyM2UwZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzbiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM+TKA7Duvf+FSffFusNYTUIGge4XBeUT85pEhxciSFNltZYnXDRqcaE
Xw/SSmqCqky873KHhc5a6gNgRzEiLWKTwHvirxtRAk3HOFiCR9xMZA22yAb+4vp4
Lxip6N0QVlqod1JbIbXOKtzw5w0nhhkseHrg+UOWscodxPaS8CDJXjNcfp23LZ8X
vILeOu03XM5xTtz83fdwjVEJE9rEO/c6YpZ4JHhrMwtU4/qO8QM1Rzt7ZxTDZwTM
BNIcyS5l3DLxQq9y/hjlt06O3p1M/Yna14qLtGSX+mtUa8Cbfsn+HFQd91+geBpv
CYI61XstN1TS5xmBGqQdhSdKyX+I/hM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:53 2025 by rpki-client