Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/2eeed96f-8589-393a-8f5d-f7b751cba2a7.roa
File:                     2eeed96f-8589-393a-8f5d-f7b751cba2a7.roa (raw, json)
Hash identifier:          ikpBtJjsadRSO0MyWTeZa5b5i+qwPNczEaI2GL0HNRk=
Subject key identifier:   93:E6:67:5C:94:49:74:26:46:AA:53:79:E8:D0:E9:B4:BA:7C:A1:B5
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F432858471CED4E2DC0945AD98DB26300
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/2eeed96f-8589-393a-8f5d-f7b751cba2a7.roa
Signing time:             Wed 04 Sep 2024 12:00:00 +0000
ROA not before:           Wed 04 Sep 2024 12:00:00 +0000
ROA not after:            Fri 21 Aug 2026 04:00:00 +0000
asID:                     36692
IP address blocks:        67.215.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1c:ed:4e:2d:c0:94:5a:d9:8d:b2:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Sep  4 12:00:00 2024 GMT
            Not After : Aug 21 04:00:00 2026 GMT
        Subject: CN=366e7519-c089-4e9a-858e-69efea5e8f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:a3:77:a6:b7:de:5c:e9:64:9f:ea:1a:d8:
                    f7:4e:78:b6:cd:27:5a:40:aa:ae:60:ff:59:76:d2:
                    ef:41:45:0f:0c:20:2d:74:d1:af:53:79:38:78:09:
                    37:3e:62:c1:c7:49:b1:c5:05:59:40:ef:10:47:ed:
                    16:a5:3b:98:4e:95:70:5f:ef:f6:b8:ae:08:72:24:
                    25:df:73:da:ab:0c:1f:0e:3e:6c:b5:58:a2:ce:bd:
                    d8:13:63:12:be:f9:17:23:cd:f6:83:fe:7f:bc:61:
                    a7:c8:c3:0f:7b:42:3c:b3:51:6a:91:a7:90:0a:9e:
                    33:86:31:9c:54:ac:32:8f:c2:a3:07:5a:f5:44:2f:
                    27:d5:84:41:3c:3e:07:4a:72:89:45:fd:76:06:d3:
                    7f:1d:59:bf:44:33:f2:57:06:05:6d:01:cd:03:dc:
                    c9:26:9a:5d:94:0a:e8:de:77:2a:65:09:8f:77:8b:
                    8c:8a:40:b3:43:03:ee:c0:3f:da:f8:fb:73:25:90:
                    d9:57:64:17:7a:52:9b:82:02:0e:2b:d3:69:ab:9f:
                    26:1e:db:99:43:4b:a4:5e:46:04:17:21:bc:99:37:
                    5c:8c:b7:3a:76:c9:ed:72:30:f1:9a:20:43:8d:16:
                    65:d0:ec:88:22:87:c2:bf:a4:41:9e:32:e0:db:3a:
                    29:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E6:67:5C:94:49:74:26:46:AA:53:79:E8:D0:E9:B4:BA:7C:A1:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/2eeed96f-8589-393a-8f5d-f7b751cba2a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:fa:0d:2d:2b:d4:22:c7:76:30:bf:fe:17:79:75:82:d1:5e:
         e3:ac:f5:19:f3:0b:d1:df:cd:a6:b4:91:5c:cc:2c:14:5b:9b:
         e0:d3:90:2f:a5:4b:56:3b:59:57:23:fd:be:d0:9f:2b:e2:8c:
         18:25:b9:89:69:28:0d:86:f6:3f:8e:43:c5:bc:46:12:18:08:
         39:98:bc:67:e9:a4:92:e0:4a:20:25:85:41:56:c5:67:9d:75:
         f9:13:f2:b3:77:e4:60:7e:ae:88:ee:fe:6e:6a:0a:e0:71:7e:
         5d:3f:f1:8c:01:3e:c7:7a:20:aa:1b:c5:10:87:f5:c6:fc:64:
         64:9e:60:b1:88:97:81:a7:b0:c4:4d:fa:72:d1:6b:74:3d:2d:
         b8:39:c9:e0:4e:d6:b9:39:c9:c1:9b:9a:b2:77:6b:a2:be:65:
         d0:b7:e8:fc:e0:79:94:0e:cc:d2:5f:3b:f0:89:75:eb:0d:dd:
         a1:36:d0:93:5c:aa:f3:79:ca:31:f6:26:79:0e:6f:66:73:b0:
         3b:8a:98:d2:a5:2b:34:aa:25:3a:fb:c5:a5:38:ea:4c:c9:37:
         13:dc:5e:6c:66:15:23:6c:e9:44:4e:6d:51:70:7d:3d:25:8e:
         90:db:d4:a7:6f:55:5b:8e:4b:3d:52:c2:2e:2c:c1:22:e7:47:
         39:ae:ba:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:39 2025 by rpki-client