Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d33c28b5-5809-3dad-aff3-5ae8a5e75ef9.roa
File:                     d33c28b5-5809-3dad-aff3-5ae8a5e75ef9.roa (raw, json)
Hash identifier:          GBLAVIXVF6Ge2xEGkndagCk7KKi+oWxvZzkBTe86ApM=
Subject key identifier:   9C:5B:1C:D0:BA:46:63:25:31:FA:2B:B1:71:D5:CF:E8:58:DF:0B:A2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D744A78994033E78C1BC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d33c28b5-5809-3dad-aff3-5ae8a5e75ef9.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        67.54.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:74:4a:78:99:40:33:e7:8c:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=282aa6ab-2839-49b1-9abd-1193f37e113f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:83:82:29:29:0c:87:41:b2:48:68:25:92:6f:
                    f5:5e:c7:74:62:79:1f:fe:a3:2c:b7:47:34:a4:54:
                    18:3c:6d:02:20:f7:b3:17:a8:73:06:c8:12:f2:f2:
                    50:be:35:a4:e3:39:3d:3f:d2:5c:21:b4:13:12:bf:
                    c6:e0:27:7f:71:11:87:ed:ac:db:78:7e:b4:95:0b:
                    bb:4e:94:98:13:0f:62:11:da:e4:fa:bf:9e:f4:ab:
                    08:2f:35:60:22:6a:39:b5:7c:20:99:fa:53:70:7d:
                    4a:de:a3:f2:88:a1:63:74:ce:71:3e:61:41:43:29:
                    69:e3:ea:6f:46:48:3d:bf:9c:59:ad:89:85:5c:95:
                    15:d2:e7:a7:98:c4:4e:9a:a6:23:73:87:4b:7f:5a:
                    3a:92:04:82:3a:db:96:82:1e:66:a1:15:50:3d:53:
                    4d:40:a7:d3:79:11:c4:f3:3b:96:4e:97:c8:18:c2:
                    25:f8:9b:a0:cf:71:77:84:0e:89:28:19:d1:9d:98:
                    55:73:38:7b:c7:29:5e:14:4f:62:a4:c0:8a:e9:c7:
                    c0:c1:87:dc:ac:08:77:7a:f1:f7:da:55:01:f2:cc:
                    90:c9:75:04:8e:2d:1c:e9:b2:10:08:0f:ef:cc:33:
                    32:65:37:ca:84:ba:37:72:14:c6:f7:38:f0:ab:27:
                    ce:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5B:1C:D0:BA:46:63:25:31:FA:2B:B1:71:D5:CF:E8:58:DF:0B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d33c28b5-5809-3dad-aff3-5ae8a5e75ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c2:c2:f2:73:b5:36:d2:b1:67:13:23:b0:2d:15:01:1b:85:
         3d:8e:7a:c5:cd:43:65:82:8f:5d:2f:ee:11:3c:0c:58:32:d6:
         95:e6:b6:bc:16:96:57:e6:bd:fe:a4:be:51:db:e6:d3:ca:a1:
         b8:a6:95:40:19:9d:9a:0b:eb:57:39:8b:b1:25:9c:d2:ec:26:
         75:46:0a:b6:cb:d3:db:b3:78:3f:99:39:47:be:f1:d9:b9:d5:
         96:bb:03:9c:81:4a:fd:32:b8:47:b1:b0:60:91:65:a1:07:a3:
         ac:8b:f7:9a:8f:87:4a:ef:db:51:54:db:7b:3e:17:2e:68:58:
         8b:fd:b9:bf:7c:ba:a7:e9:33:08:aa:77:2c:4d:41:f4:cd:13:
         86:ff:90:4b:08:19:bd:c5:c5:0c:0d:7b:2b:76:f3:38:d7:e2:
         dd:2f:ff:64:36:31:76:85:ee:00:0b:db:82:14:96:bb:93:65:
         33:02:10:bd:ee:f7:17:11:d2:12:b8:bd:ab:e7:5a:17:d4:00:
         65:8d:0e:18:ec:3a:77:f3:e0:33:33:cc:78:8e:fa:26:48:89:
         a8:7e:9b:4e:8d:b1:c6:a8:a2:ff:ab:7e:8e:c4:aa:2a:52:60:
         e9:de:25:f1:1a:72:c3:f1:f3:f1:0b:4b:19:dc:64:d2:89:8f:
         34:35:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:33 2024 by rpki-client on console-ams.rpki-client.org