Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7dde977-c4ed-3de3-b5d5-70186294b2db.roa
File:                     a7dde977-c4ed-3de3-b5d5-70186294b2db.roa (raw, json)
Hash identifier:          MlOxVvdKv0jRKAbha4vMS45As/COxzs8kLV+roE/p5w=
Subject key identifier:   84:03:E7:49:85:58:2B:E2:0B:00:2B:99:EA:56:84:F4:C0:B7:F5:80
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C580FF72A4BB629ECB3C6440
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7dde977-c4ed-3de3-b5d5-70186294b2db.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        67.54.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:ff:72:a4:bb:62:9e:cb:3c:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=0f0b686c-b872-42c1-9f0f-bc7ab290d203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7d:00:c3:b6:e0:d2:73:72:b0:0c:9e:ab:3f:
                    61:99:60:06:62:2d:87:71:c2:ea:d2:14:05:b4:f8:
                    44:f9:d8:ef:40:61:d2:88:00:01:24:42:32:e9:84:
                    e0:23:d7:d2:8e:e2:7a:55:0f:05:6e:f2:49:ce:f6:
                    29:a4:37:4c:ef:46:a0:b7:e6:0f:bb:ec:75:a0:51:
                    a0:a6:29:ad:4d:8e:26:c8:21:77:99:4f:4f:01:2b:
                    26:e8:8d:9a:ed:20:5f:98:b1:e9:53:9a:05:70:8f:
                    cc:16:67:ed:00:1c:65:1d:87:e9:21:b1:93:a0:22:
                    3f:5f:fa:14:c1:2e:17:31:82:9c:df:11:64:d8:8a:
                    85:2b:4d:73:f4:58:fd:f6:ff:e7:fa:10:eb:8f:d6:
                    c2:e5:9a:26:46:6f:32:ab:b0:e7:02:3c:f0:89:dc:
                    30:cb:84:77:1b:7b:5e:1c:5a:64:6f:91:bd:d9:ff:
                    1c:69:d2:af:f2:70:e0:18:08:02:e2:bb:38:8f:3f:
                    d3:88:3a:91:5b:ed:00:91:01:bd:2c:f4:82:95:03:
                    5f:18:f1:70:b9:5b:51:ed:ee:0e:65:67:84:0b:40:
                    99:c4:fa:bf:83:3d:9a:15:32:e8:9a:33:2f:f1:8b:
                    66:98:2d:b9:68:95:9d:21:b8:9a:d9:aa:8c:4a:c3:
                    31:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:03:E7:49:85:58:2B:E2:0B:00:2B:99:EA:56:84:F4:C0:B7:F5:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a7dde977-c4ed-3de3-b5d5-70186294b2db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:8f:9b:3e:39:ad:41:32:19:50:33:f0:18:28:5f:ec:f0:49:
         6f:28:8c:d5:84:c1:92:af:11:e2:82:8a:f9:55:b6:f7:9a:e1:
         c3:3c:72:c7:18:3f:f1:8d:1f:24:77:17:cd:e1:3c:0e:13:2d:
         59:c4:f0:10:89:88:37:83:ec:26:c1:53:8d:75:42:c6:33:5c:
         40:5b:57:fd:99:45:f8:85:b9:69:1e:02:b4:38:e3:a7:f8:bb:
         69:1a:01:d8:11:ce:44:b3:29:c7:f4:b4:5d:90:0a:74:46:95:
         63:dd:7d:db:ac:01:ae:ec:4b:82:e1:96:4d:d2:bf:b4:0e:9f:
         22:89:e6:df:4e:de:97:ac:54:7b:28:07:bb:e5:27:d1:f6:68:
         af:8a:18:77:bb:40:ca:c2:a7:6b:62:ad:86:5e:7f:72:bb:e1:
         42:32:b4:9c:cc:cb:22:ac:7b:9d:d7:4a:00:89:4c:a3:6b:21:
         d9:aa:42:5e:aa:51:78:9c:fa:ca:2d:81:65:ae:52:d3:a5:e7:
         8b:5f:d5:53:6f:46:61:34:b3:19:c8:dd:62:66:22:d8:ef:3d:
         b1:a4:b1:ad:45:4e:d5:02:3e:94:38:10:d5:7d:a0:2e:07:df:
         df:12:9b:93:e9:c8:16:68:b3:b3:7c:20:f1:1a:c1:d7:d9:03:
         9d:42:90:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:03 2025 by rpki-client