Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2a5a9fb-9933-3cd7-847e-fa6a28136044.roa
File:                     d2a5a9fb-9933-3cd7-847e-fa6a28136044.roa (raw, json)
Hash identifier:          hWcncmTqX4IjG1mpXxYBe8R5yITLKme+SSkiCFcX0UQ=
Subject key identifier:   9C:29:78:CF:54:12:86:2A:CB:21:60:EF:89:F5:BB:99:3E:B7:F1:79
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C580FE52D1754EEB94C77200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2a5a9fb-9933-3cd7-847e-fa6a28136044.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        67.54.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:fe:52:d1:75:4e:eb:94:c7:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=e3c3f211-bc35-422c-ba62-f7c717fd70b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6a:34:3c:5d:6c:75:6b:26:de:fe:fe:14:58:
                    87:ea:8c:bb:ba:36:26:1c:56:57:57:b9:f5:11:17:
                    6a:c1:88:90:33:2a:15:61:37:cb:94:ef:02:b3:eb:
                    83:ea:f6:a0:e2:6a:a7:0a:4c:a8:3e:d1:32:c8:01:
                    fe:a6:fc:30:4a:82:a8:41:95:a2:d1:e6:a9:ac:fa:
                    ce:21:7a:1c:d2:62:f3:00:83:e3:10:dc:9e:c8:5f:
                    bf:c9:35:03:9f:81:ca:89:d7:f9:b0:d7:4a:23:6f:
                    34:20:9c:2d:25:a8:32:fc:1b:6c:fd:f0:d0:b5:92:
                    00:a2:cb:78:89:be:a7:6c:36:29:11:70:90:73:64:
                    6c:cd:d3:f2:7d:7c:b7:7c:80:2b:87:21:47:60:39:
                    76:b7:d9:af:94:a2:35:d3:e8:3e:1e:cf:8b:72:89:
                    2f:91:86:f0:61:d6:59:64:54:a2:91:c6:11:37:51:
                    61:85:68:0f:31:eb:8c:b0:fb:38:cb:e1:c8:96:23:
                    d0:a0:0a:c6:34:1c:b5:2f:6c:61:66:0d:0a:c0:ad:
                    78:cc:d5:2c:74:27:3c:b3:0e:44:ac:e1:ae:38:e3:
                    64:82:6a:ab:7a:3c:87:9d:fe:7d:ee:d5:e4:bd:5d:
                    82:96:2a:2c:53:d5:2a:36:ef:9f:c1:bb:fc:70:21:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:29:78:CF:54:12:86:2A:CB:21:60:EF:89:F5:BB:99:3E:B7:F1:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2a5a9fb-9933-3cd7-847e-fa6a28136044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:49:d7:29:5a:d4:b6:79:a2:78:24:db:c8:11:4e:89:db:7c:
         28:c8:d6:f3:b1:59:a0:fa:09:21:a3:95:5a:9a:56:17:34:20:
         5e:88:ce:05:6e:2e:94:25:a6:98:68:a5:98:78:a4:b1:eb:32:
         39:d1:a2:c9:b7:88:57:12:a3:71:77:b3:85:b5:c5:a7:c3:76:
         61:79:1d:f2:45:32:15:2c:ec:a5:e5:f0:91:70:41:76:d2:0d:
         12:bf:8f:b6:17:62:42:91:81:a1:cc:d7:be:8b:03:ad:91:57:
         64:47:f6:b5:e2:ec:84:87:9f:4a:fe:e1:a9:55:02:86:b5:05:
         7d:2c:c1:87:72:62:fd:3c:6e:45:e3:c7:e8:7c:e3:f2:20:09:
         88:6a:52:15:d0:41:5f:17:2b:97:3c:d5:49:34:4a:65:b3:cc:
         cf:9b:9c:8b:ad:15:53:75:2f:49:5f:43:59:50:19:c9:a8:68:
         75:67:cf:0a:51:00:a1:cd:36:82:f4:8e:fb:e9:7c:0d:e3:32:
         3f:ab:a8:73:ed:60:83:4f:15:cb:86:03:8e:ca:a6:83:99:e0:
         cb:56:0b:4c:72:9b:8b:1a:7b:4b:1c:fb:63:b1:cb:14:e8:d0:
         3e:39:4e:d6:d3:eb:88:ec:33:e3:b6:ce:d6:9c:90:17:df:42:
         1f:81:6a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:33 2025 by rpki-client