Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46909c8e-0574-3e52-a236-c78a09a4c57c.roa
File:                     46909c8e-0574-3e52-a236-c78a09a4c57c.roa (raw, json)
Hash identifier:          LAUYKSywII6oYY91VaVvxxX3+T09vlYEep+TPKzr03E=
Subject key identifier:   8E:B4:1A:6E:5D:09:BE:D5:FA:A1:CA:91:B1:10:62:27:57:52:A0:4E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BADF6EBB2A6B19A793E360
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46909c8e-0574-3e52-a236-c78a09a4c57c.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        67.54.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:df:6e:bb:2a:6b:19:a7:93:e3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=2cae4e8b-1f10-4fc9-89ba-03ace64fdc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a8:76:f6:04:8d:35:57:a4:7a:b2:45:21:75:
                    34:ea:9d:21:18:4e:b2:dd:05:8a:f8:ee:d7:28:4e:
                    38:2f:f8:8f:21:c9:6e:56:17:15:b6:95:2d:d8:c1:
                    e7:d4:83:69:72:3d:76:cc:26:d2:71:bb:8f:aa:ee:
                    ad:7b:95:1b:38:bb:2d:ff:fa:4f:a0:be:a9:19:9b:
                    7a:73:22:37:43:6e:26:5f:aa:3b:94:9f:2c:9e:20:
                    bb:d6:2f:93:83:d3:42:0b:42:20:62:0d:23:9a:07:
                    09:30:c0:52:ed:fd:4d:dd:af:2e:bd:2e:77:fd:9a:
                    ae:0c:7b:94:d9:97:23:29:8c:a7:fd:33:87:59:ad:
                    c2:0d:64:a4:86:4b:74:d3:22:b7:f6:da:ae:fc:6a:
                    4d:a4:09:40:1c:bb:76:2b:a3:fc:23:4a:7a:8c:2a:
                    ad:f3:b7:a3:f6:44:d5:b9:bb:cb:b2:f7:68:47:09:
                    73:e9:86:e3:57:7e:38:41:d1:65:61:3e:64:ec:4a:
                    f6:2c:44:84:3e:a0:0c:cb:fa:4a:97:b9:e9:48:d8:
                    76:78:04:05:43:d6:93:be:b9:e0:23:7b:6e:70:96:
                    b9:d8:01:ca:3c:dc:41:8d:32:76:0b:0f:ce:e9:f3:
                    0a:55:91:32:bb:ca:81:8e:af:36:7d:64:31:86:b5:
                    23:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B4:1A:6E:5D:09:BE:D5:FA:A1:CA:91:B1:10:62:27:57:52:A0:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/46909c8e-0574-3e52-a236-c78a09a4c57c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:69:0a:9b:81:56:0d:d3:aa:b9:47:21:32:b0:df:af:18:22:
         a0:35:5d:1b:3b:ed:d2:80:18:23:34:67:c4:e1:fa:77:ea:38:
         41:1c:f6:ae:db:dc:2b:a5:1a:5c:ea:d3:1e:cb:e9:11:58:e9:
         f2:34:e3:41:19:7e:27:76:12:be:26:77:ce:73:1a:32:12:85:
         9e:38:43:1c:52:49:8e:70:88:b3:64:6f:75:7d:56:28:32:ba:
         ac:ff:39:5d:f0:91:88:6f:1c:b7:87:f0:98:a5:71:c4:12:28:
         b6:c1:77:bc:94:8c:f2:29:56:a3:ab:23:98:34:b5:7c:b0:e8:
         d3:ca:70:59:4b:28:47:42:c8:c1:cd:9e:df:6a:95:63:38:3b:
         0b:fb:43:ca:4e:a2:91:70:9a:7f:59:7a:be:ea:2d:af:55:b8:
         a9:e9:a0:8a:80:bb:bb:d7:0d:72:de:c4:20:f3:5b:8b:47:07:
         0d:bc:85:78:1a:77:da:7f:75:5c:15:f6:b5:a2:6b:4a:d0:aa:
         1e:a2:37:9f:28:f0:c0:f3:94:37:94:39:4b:d6:61:90:3f:d1:
         3f:30:5b:92:87:c1:bc:32:3f:90:57:b9:ec:bd:db:e6:df:72:
         ba:3e:b2:e2:a5:c2:21:9e:cf:69:97:f2:f7:01:67:66:9f:92:
         61:7e:f0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:07:13 2025 by rpki-client