Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc9c982f-def7-37f8-af8f-0f828e0b62e5.roa
File:                     bc9c982f-def7-37f8-af8f-0f828e0b62e5.roa (raw, json)
Hash identifier:          5u6vOSzG8RwoFYWHNKIVcrDQOKvpbjneTmW0Xpkn5mI=
Subject key identifier:   54:68:1B:F5:52:FB:F9:DD:3C:5D:45:9B:0F:FF:FE:73:EC:C3:3C:99
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D76292741820A1B923080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc9c982f-def7-37f8-af8f-0f828e0b62e5.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        67.54.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:76:29:27:41:82:0a:1b:92:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=4ae869ca-02aa-4915-a224-184106a2d217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:1e:dc:49:95:ab:2f:f3:5f:2a:2e:7d:eb:
                    80:a1:9f:8f:e1:62:d3:54:8f:cd:f5:c3:36:6e:30:
                    a2:64:19:b3:d0:db:ad:af:46:da:31:90:5d:12:da:
                    06:81:51:a4:08:f6:d9:fe:42:ee:47:82:2e:4a:7e:
                    5c:2a:a5:1d:e1:01:9e:8b:d4:d7:b1:b2:08:b3:94:
                    94:ab:b5:27:9b:47:0b:a4:8c:49:d2:e2:a3:97:26:
                    fd:76:9c:fa:51:e1:53:d4:a7:79:6b:b6:b6:6a:d9:
                    8a:70:1a:73:53:8a:fa:e1:54:59:4e:c6:bf:69:f4:
                    73:4b:f8:71:e9:8d:28:18:39:e0:44:17:ae:15:88:
                    fe:35:e6:7f:0c:12:cf:f7:d0:bc:95:2c:b0:44:51:
                    bb:43:a1:ec:17:de:c3:9a:f8:a2:e3:74:e2:ab:a4:
                    d6:96:20:df:f1:a8:2c:3f:ec:a1:80:d5:c4:3d:d7:
                    71:70:78:5b:da:99:bf:e3:dc:22:38:27:ed:5d:dc:
                    a2:cb:1d:8d:06:f7:0a:55:4e:6e:4d:53:4f:e1:fb:
                    a4:84:50:93:47:f3:0a:6d:13:2d:51:4a:4f:e9:22:
                    78:95:2f:a4:ca:72:e2:bd:5a:db:13:8b:da:dc:71:
                    e3:57:05:f6:08:f5:3f:cc:57:65:b2:0b:b6:2e:ca:
                    73:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:68:1B:F5:52:FB:F9:DD:3C:5D:45:9B:0F:FF:FE:73:EC:C3:3C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bc9c982f-def7-37f8-af8f-0f828e0b62e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d2:a4:84:02:0d:d0:10:aa:63:be:5b:fb:e6:aa:8f:c8:f6:
         e9:24:40:33:ae:25:a2:f0:1b:20:13:a8:65:bc:e0:89:8d:96:
         71:5f:54:46:02:89:17:ce:6d:02:81:81:dd:26:4d:a6:4b:2a:
         8c:08:44:2e:70:ca:a6:65:37:ad:76:34:21:05:ee:3e:6b:dd:
         a2:5f:08:85:49:bf:fb:1a:a8:06:07:a0:77:61:38:00:63:f1:
         f1:c9:c6:3b:d7:55:d1:2e:6a:cf:a3:06:be:e9:99:18:78:08:
         c7:9a:91:b4:3d:a8:74:48:2b:1b:6d:2a:12:1a:29:93:cc:36:
         30:e1:32:95:60:33:3d:85:0f:4e:90:4d:71:10:0b:0c:c6:c0:
         54:28:8e:9b:96:73:f9:4c:56:8c:6d:b9:69:38:f2:ae:28:54:
         71:5a:af:72:39:66:4a:85:94:9f:8a:a1:7e:59:ac:e4:44:95:
         19:da:51:1a:2a:d0:1d:c8:72:68:44:38:b6:30:78:8d:d8:c4:
         7c:99:2e:f6:d8:b3:2f:69:11:62:d8:51:00:ef:fe:f8:02:d8:
         ac:1f:9a:fb:8c:6b:e3:83:a0:c1:e7:bd:ed:56:1f:04:e9:a9:
         76:af:0e:ae:b2:0d:eb:4d:2b:e7:f2:43:b9:69:71:b1:df:fe:
         ba:3b:f2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:38 2024 by rpki-client on console-ams.rpki-client.org