Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c76f5d3f-a0ec-3393-8686-b53d79e01cbc.roa
File:                     c76f5d3f-a0ec-3393-8686-b53d79e01cbc.roa (raw, json)
Hash identifier:          vEgscSbD7SXqApBC1y8XqrQW3WBsiJxvzXedEwzYsZM=
Subject key identifier:   28:DA:DC:AF:7D:58:46:10:C5:FF:35:B6:34:FE:E4:75:89:74:B7:92
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D77A49FE6FC2BB668CC00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c76f5d3f-a0ec-3393-8686-b53d79e01cbc.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        67.54.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:77:a4:9f:e6:fc:2b:b6:68:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=768a8c04-34ea-404e-9591-e033968daf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bd:9e:3b:8b:a6:f9:ff:fa:1b:2f:46:dd:45:
                    85:32:5b:cb:49:aa:01:ff:14:61:00:c9:bf:1d:36:
                    05:8a:89:e7:a2:23:c7:21:01:7b:37:32:95:53:2b:
                    3e:09:b0:25:00:78:fd:d0:96:a9:3a:db:32:42:b8:
                    99:21:84:fe:ba:95:2e:7c:c0:b9:8a:17:49:5e:45:
                    fb:ab:50:98:b0:71:04:0b:05:5b:dc:65:6b:a9:ca:
                    2b:76:20:d5:f3:51:8d:02:1d:69:a4:9b:4b:ed:ac:
                    60:cd:f3:73:36:26:67:75:12:2b:70:4c:e4:9a:e1:
                    c7:88:b0:c6:34:87:74:6f:81:fc:bd:6d:68:91:0f:
                    1d:6f:b0:54:b0:5c:01:c7:b5:0e:c1:35:a1:e0:1b:
                    40:b3:c7:ad:37:73:33:f2:13:7a:bb:48:c0:b3:c1:
                    b2:ee:89:12:85:7b:a2:35:a3:d3:e2:3c:06:2e:97:
                    c0:a0:60:9b:62:a6:63:20:ca:95:74:fe:40:44:2c:
                    8d:97:7a:1e:99:82:d6:12:e8:dd:9e:86:ef:93:e2:
                    dd:8f:f1:00:77:88:8f:a4:ff:dd:1d:7c:ac:b7:46:
                    16:55:5d:f2:28:6f:62:ad:6b:a8:74:c8:e2:01:3e:
                    0d:a1:f6:61:9b:15:2c:ae:e7:86:6f:bf:75:89:c1:
                    09:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DA:DC:AF:7D:58:46:10:C5:FF:35:B6:34:FE:E4:75:89:74:B7:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c76f5d3f-a0ec-3393-8686-b53d79e01cbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:62:6f:22:19:3f:d9:be:1c:c8:9b:a4:71:7b:7b:7c:46:d4:
         4d:2b:c6:9d:e6:8d:ab:9b:9f:67:cd:21:03:22:6e:2b:e0:6f:
         34:84:59:aa:57:bc:75:cb:d1:c2:4c:9a:37:5c:b4:ec:5a:48:
         3b:1b:d8:38:c9:4e:fd:10:f0:37:2f:ee:43:6c:aa:8b:34:71:
         35:11:dc:1e:47:0f:b0:22:15:a9:12:c1:ac:02:07:50:d0:ce:
         bb:3d:04:21:1d:e8:75:81:06:2f:f3:3b:b3:fe:ab:37:45:f4:
         bd:c6:7a:a2:0a:c6:8b:91:0f:56:3f:a1:63:6f:de:0a:cf:76:
         46:43:c7:77:de:92:aa:68:56:4e:7c:f8:a1:d4:2c:ea:5c:5f:
         89:f8:3d:00:32:4d:4f:16:86:0e:aa:9f:38:f1:45:73:8c:5e:
         cc:3e:be:5a:94:c1:45:8e:9e:0b:21:e1:1d:f1:85:bc:36:a3:
         18:a0:6c:93:ee:55:65:a7:7f:46:4a:37:a2:bb:59:37:ea:27:
         4c:ee:a9:94:61:8e:ce:c5:e9:a6:b8:27:61:6c:8f:68:db:b8:
         39:35:97:3b:b0:56:6d:77:8a:bb:57:92:5d:2b:31:7e:99:17:
         49:92:11:aa:74:bd:99:43:c3:87:b0:95:d6:4f:bb:3e:32:1d:
         26:0c:60:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 16:51:27 2024 by rpki-client on console-ams.rpki-client.org