Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c06a2400-d83a-32d9-9915-4132484457fd.roa
File:                     c06a2400-d83a-32d9-9915-4132484457fd.roa (raw, json)
Hash identifier:          xXkm2xEXB0lczG5VDU2XYhuob3i6SzxHRyg7zN3bzH8=
Subject key identifier:   20:68:F7:2A:B6:C0:EB:F2:AC:4F:DC:AB:BC:FE:0C:AA:89:0A:35:9C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DF38C08D2868FF7777C80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c06a2400-d83a-32d9-9915-4132484457fd.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        67.54.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:f3:8c:08:d2:86:8f:f7:77:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=a4368af8-3ccd-49fc-a0e7-fcba5739f929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a9:96:ad:ed:41:61:d4:d1:ea:be:c6:c6:0b:
                    82:bd:58:7d:78:65:90:a2:9e:50:05:cf:19:94:9a:
                    07:7c:b1:b0:d9:fc:c7:54:6b:c6:1e:2e:5b:58:86:
                    7a:13:a1:5d:5b:cd:c2:d5:26:6d:16:cf:a7:98:17:
                    8c:f0:7c:db:e8:44:bc:5f:c7:84:d7:03:59:52:b6:
                    e7:ac:66:b8:07:94:8f:92:76:25:2e:f7:27:3f:30:
                    52:45:80:a2:bf:29:fa:d4:13:70:75:39:1f:39:cb:
                    a6:a4:0f:9a:d9:51:6b:45:f1:da:ec:91:46:bc:79:
                    b4:18:7e:3f:ca:49:0e:4e:bc:44:c5:31:19:fc:db:
                    b6:2d:a8:8c:c5:51:a5:7a:f1:23:f1:81:fe:b2:39:
                    d9:cd:0b:04:83:d9:16:34:83:e1:79:07:4f:ce:b3:
                    9b:79:a5:0f:f7:c3:2c:e5:d1:df:09:dd:ac:ac:e2:
                    32:0e:d4:11:fa:e3:6c:7a:00:78:b4:d8:dc:dc:1f:
                    4c:73:8d:5e:5f:9a:e0:31:87:90:94:0e:af:4e:f8:
                    4a:97:aa:f0:09:75:70:c6:61:2c:15:65:de:d6:1b:
                    38:aa:51:8d:e4:75:c5:ab:0e:50:be:3b:69:5a:14:
                    b2:b5:c5:2b:eb:35:a5:de:1b:3e:fc:e3:37:2e:ac:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:68:F7:2A:B6:C0:EB:F2:AC:4F:DC:AB:BC:FE:0C:AA:89:0A:35:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c06a2400-d83a-32d9-9915-4132484457fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:c2:c0:98:1a:23:71:7e:eb:5d:92:94:10:35:e4:b2:ec:0b:
         4a:4d:26:31:cd:4b:77:67:b5:07:29:72:07:f5:8b:de:bb:68:
         41:69:0c:b0:39:13:c7:36:9a:53:c7:ba:52:50:e3:91:5c:f5:
         88:a6:cc:8b:71:e9:0a:a4:7a:dc:d8:04:f4:b3:08:f9:41:2c:
         9d:d5:d3:db:01:f7:b1:08:a7:10:65:b0:66:aa:2e:2b:e1:09:
         ee:e2:67:35:f9:2d:78:05:07:3d:45:ed:79:aa:98:2c:8a:1e:
         93:84:8a:41:10:ff:84:e5:43:2f:d2:b8:9e:1e:32:fe:98:27:
         8d:59:b6:7a:51:58:f7:3a:b9:29:24:2b:8d:96:78:c1:bd:c9:
         c4:0c:89:d9:5d:8b:01:d9:58:00:18:a2:24:8c:f3:9d:d8:a2:
         72:b4:5b:c6:83:21:e1:f5:97:e1:7f:1e:ad:8c:48:b0:26:b8:
         05:62:3c:8a:ac:c6:13:31:5e:c8:cb:4f:9c:fc:73:68:20:ba:
         c5:d9:f9:7e:c9:39:a8:13:d8:42:2d:f3:97:15:a0:f3:f2:22:
         bd:50:3a:08:0d:c1:cd:b1:d1:6a:dd:22:46:dd:56:5c:fa:cb:
         42:2d:6c:4d:43:bc:ff:d2:ad:5b:5d:b5:a1:03:17:5c:d4:7d:
         91:bf:42:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:51:25 2024 by rpki-client on console-ams.rpki-client.org