Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1115f618-5fd1-3d7d-a6b7-a424bd4e5fa4.roa
File:                     1115f618-5fd1-3d7d-a6b7-a424bd4e5fa4.roa (raw, json)
Hash identifier:          Y5NGzVL6ng+umxW6XRrTinF6Fb9MhW8O7jtcTEslBDU=
Subject key identifier:   30:27:27:E6:43:E2:5B:F1:6F:31:50:71:D1:87:0D:FC:45:09:FF:AF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BADE992E6340C6E345F080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1115f618-5fd1-3d7d-a6b7-a424bd4e5fa4.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        67.54.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:de:99:2e:63:40:c6:e3:45:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ce668c49-124e-4460-a719-854aa074a6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bc:5c:67:c2:3a:aa:04:f1:f7:ec:af:65:c5:
                    e0:96:fa:1d:0c:8e:fc:ae:2b:47:e1:74:6c:38:6e:
                    14:6d:d6:8f:b3:02:0f:41:bb:3b:e1:87:9f:26:6d:
                    0c:00:da:7b:20:4e:41:00:8f:1b:f5:65:a3:01:d4:
                    02:bf:9e:84:71:c0:62:e1:7d:c2:59:7f:41:8a:50:
                    52:4b:cf:c7:69:50:43:28:a0:8e:99:72:7d:7b:a9:
                    e4:71:42:25:04:e7:df:88:36:c1:b3:57:84:a7:a2:
                    c6:41:bf:4e:b5:2c:12:36:67:dd:a3:c5:f7:b6:89:
                    28:b5:c8:d8:c0:d5:fd:3a:01:0d:44:df:3c:73:8a:
                    c5:2d:31:d9:00:ff:69:a5:18:bc:08:d7:7b:31:36:
                    c1:6c:28:d7:61:d4:25:5c:18:47:b7:50:9b:b3:75:
                    df:f2:cc:6c:ca:14:f7:ad:ef:a4:a6:48:0a:55:23:
                    0d:f7:3a:13:a1:81:b0:63:52:a8:68:b9:a6:8b:59:
                    7e:43:59:0e:fd:86:b0:76:af:76:87:40:4f:c7:a3:
                    c4:fc:82:5e:42:b9:34:48:bd:76:7f:ed:c2:4b:35:
                    b4:27:f5:08:2f:9d:38:67:e0:6b:05:cc:67:c8:b1:
                    1d:c3:3b:d8:13:75:88:12:96:2d:44:f1:d4:5f:b5:
                    d3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:27:27:E6:43:E2:5B:F1:6F:31:50:71:D1:87:0D:FC:45:09:FF:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1115f618-5fd1-3d7d-a6b7-a424bd4e5fa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:35:ca:0b:31:5e:db:4d:85:e4:06:31:cc:97:fe:ad:98:cd:
         b8:86:c5:36:0b:67:d1:20:82:dc:9f:b4:b1:46:2b:8e:33:eb:
         a8:04:4a:c8:07:c1:78:79:f7:aa:37:93:f5:92:dd:fe:58:6d:
         a2:90:d3:69:75:f8:d5:a2:37:bc:b0:d0:9d:28:99:6d:c4:a3:
         96:34:b5:1d:d0:ec:0b:42:48:25:2b:81:43:1b:5d:32:d1:51:
         c7:7a:61:f0:eb:b8:19:ed:d8:b6:e4:30:59:76:6b:a5:7f:8b:
         af:e2:11:9f:9e:fd:65:ee:6d:16:92:32:a5:5f:de:67:84:e9:
         66:d5:5e:fc:73:41:3c:55:c2:4b:4a:2e:3f:c9:63:d6:1b:ab:
         ea:db:2c:26:9a:e3:07:8e:00:39:77:9b:00:ed:1e:49:19:df:
         14:59:16:3e:e8:15:ed:3d:7e:fd:a7:9c:e0:20:09:2f:7d:c6:
         b7:58:1d:f3:1f:72:bf:cd:dc:c7:0c:a7:0c:18:94:c2:e3:bf:
         95:0f:68:a1:09:8e:15:be:15:5c:cd:7d:34:d8:f4:64:0b:b7:
         8c:e3:df:87:20:72:1e:ad:55:da:51:81:c3:ee:d5:07:47:88:
         b2:6a:97:31:4c:39:ec:99:86:07:3e:5c:e9:bf:b8:ad:09:69:
         55:ee:7f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:29:29 2025 by rpki-client