Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa
File:                     67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa (raw, json)
Hash identifier:          I1uSuoA6HC7ASw4EfWO3ZT9nRm4Dpz1PzwAn1ff/OSU=
Subject key identifier:   A7:97:00:55:ED:FD:04:8E:27:6D:E5:99:95:98:A7:33:7B:1A:29:8A
Certificate issuer:       /CN=54a220d5-4ac8-4e34-bec0-5a555376e674
Certificate serial:       010D0C9F43285849780F0B36D4BCAF921C614954
Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     19381
IP address blocks:        67.212.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:0b:36:d4:bc:af:92:1c:61:49:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=c7e0fb1a-2b08-424b-8eaa-32fecfd11d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e3:44:25:fe:d2:29:b4:91:0e:4e:83:b9:93:
                    eb:75:97:bc:49:ea:b0:81:ef:a8:78:ea:36:88:95:
                    06:9a:1c:be:f7:7d:5c:9f:71:d5:fb:0c:d6:2c:cf:
                    5d:c9:a2:1a:f9:e6:8c:a3:9b:96:e8:fd:3c:71:e2:
                    39:32:26:2d:d5:eb:4c:5a:68:7c:0e:34:91:d5:bc:
                    a4:04:c5:cd:48:b1:27:3b:33:ed:16:e3:27:79:79:
                    1b:36:f3:67:bb:1e:71:7f:31:c7:82:0d:3b:73:ea:
                    ff:51:36:85:08:35:4b:f8:27:ee:8d:3c:c6:6a:1f:
                    1c:02:f9:a3:2e:1e:10:9e:05:23:23:cc:c8:80:34:
                    6c:38:ba:bb:a0:06:5e:d5:96:9f:6a:82:c1:eb:c2:
                    fc:1e:d2:92:a8:36:05:12:20:92:68:96:5a:8c:6c:
                    d7:8b:06:bc:e0:14:ca:ae:ed:58:58:ca:f6:8f:9c:
                    8d:84:d0:72:cd:78:2a:83:38:b2:f7:81:c1:82:1f:
                    71:7c:c7:05:f2:1f:06:ff:64:ae:c4:ef:e6:20:fe:
                    f1:ba:95:4b:b5:43:62:c6:e0:34:4e:95:46:cc:cf:
                    05:88:85:5b:38:7a:9c:db:c6:1d:8a:98:92:ec:40:
                    a0:70:8e:83:17:bd:1f:b8:21:f6:6a:71:da:e7:f5:
                    f0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:97:00:55:ED:FD:04:8E:27:6D:E5:99:95:98:A7:33:7B:1A:29:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/67ee1afd-1434-3a0f-8ac6-5524f6895cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl

            X509v3 Authority Key Identifier:
                keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b7:23:45:a5:ce:dc:31:e4:b3:8b:9a:a7:75:ec:3d:70:61:
         84:3f:1d:bc:d4:62:e3:60:b2:cf:95:8b:e2:19:97:34:09:2d:
         77:19:59:c2:5e:ad:f4:29:64:d3:96:1b:5b:a3:45:e3:90:15:
         d0:ee:b2:b9:b7:b0:e7:19:1f:14:f0:52:19:ba:18:d9:fa:4f:
         00:24:ef:8c:fe:eb:e0:3b:a9:7e:b8:b0:4d:65:e5:65:c2:5a:
         25:d9:84:55:ba:47:8b:b8:c4:ee:6d:6b:b1:1b:db:e9:5a:d9:
         7a:92:0c:15:5e:b9:0e:f0:28:cb:90:0a:53:f5:8a:7a:79:af:
         fa:d3:25:c0:3c:22:f8:c8:00:9c:56:39:d8:7e:44:00:d8:42:
         cc:0f:4e:10:22:54:7c:3f:80:2c:28:d0:cc:be:40:79:24:25:
         9f:41:8a:cb:ba:22:19:7f:91:4a:07:f5:0b:01:67:55:09:6c:
         98:80:b5:07:0a:1e:a1:e4:a8:05:2e:f3:94:cd:0f:74:9c:1f:
         c4:52:e5:db:9c:ad:2e:b9:b6:b6:14:10:b3:d5:21:9c:ce:95:
         0d:0a:38:a8:db:d5:d4:b4:c2:50:63:cb:b6:f8:23:00:12:fb:
         bd:bc:9a:9a:fb:34:99:bc:a3:dd:68:4d:a4:09:6f:ee:32:34:
         86:30:13:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:30:03 2025 by rpki-client