Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55c5fb6f-eb0a-36ef-b3a4-68b8b29fb586.roa
File:                     55c5fb6f-eb0a-36ef-b3a4-68b8b29fb586.roa (raw, json)
Hash identifier:          Ri0MzTjUx5ZJWxsAWlpngVquAJnDcFlDZ3QTs5iNM4o=
Subject key identifier:   F7:D3:E2:EF:34:C5:DA:B5:9B:0B:FC:D5:B1:4B:9F:EC:E2:DB:E1:97
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA5403DFCB45AB0C138620
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55c5fb6f-eb0a-36ef-b3a4-68b8b29fb586.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        67.54.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:54:03:df:cb:45:ab:0c:13:86:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=4a71d5a7-dda2-4f3d-bc25-640eb4429b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:14:0a:e2:fa:2b:1f:58:d9:00:96:e7:d3:96:
                    97:e8:3c:9c:54:e1:55:6b:2f:38:a7:3d:36:e2:ac:
                    a0:9f:79:0b:0a:f3:32:5a:c1:ce:d5:72:b5:b7:0f:
                    54:31:2b:8e:0f:bc:21:e3:9f:88:78:92:49:50:c8:
                    15:0e:38:36:ec:7d:bd:ef:4a:d1:a8:65:0f:38:06:
                    db:04:13:f6:ed:7f:fa:78:b0:8f:ef:c9:06:ae:30:
                    a8:1e:58:90:f1:fe:79:17:bc:f0:cb:b1:8f:52:54:
                    14:eb:dc:a4:68:43:94:85:9a:e5:74:e8:2b:73:dc:
                    e9:ca:cd:9a:34:56:28:53:12:83:81:dc:02:b6:cc:
                    a7:94:28:8e:22:d6:c7:e0:12:45:72:1d:7b:6b:ab:
                    0d:ab:16:be:93:3c:a5:5b:53:d9:e8:e2:54:48:d3:
                    68:2b:e5:09:a5:bf:36:b3:e3:84:66:7a:a6:19:9e:
                    ff:6e:b4:e3:b6:cb:b5:b7:db:cf:9b:fc:c8:5b:bd:
                    83:3e:72:49:3d:25:ed:42:1c:2a:67:b0:c4:f2:9e:
                    82:28:e3:cf:04:72:6f:c1:19:49:40:06:64:18:89:
                    60:9c:a0:b9:12:2c:eb:cf:f7:99:95:58:43:ed:0d:
                    5a:d8:cd:ab:6f:a7:40:54:2d:30:b5:72:f1:bf:97:
                    70:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D3:E2:EF:34:C5:DA:B5:9B:0B:FC:D5:B1:4B:9F:EC:E2:DB:E1:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55c5fb6f-eb0a-36ef-b3a4-68b8b29fb586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:25:61:29:6a:09:45:00:76:2b:98:eb:8c:1c:74:0b:a7:11:
         68:39:ac:86:55:bf:1e:4a:df:ec:3a:16:66:ac:34:26:f8:5a:
         77:6d:f0:4c:74:7d:8b:25:97:cd:e7:be:d0:4a:b6:cd:51:af:
         fc:78:81:76:84:42:23:90:05:3d:1a:0d:81:57:0a:f1:ca:8e:
         02:84:ca:2b:6a:bf:b6:98:14:c6:2c:b6:43:97:fe:60:db:63:
         3e:2a:46:f4:31:ad:8c:6b:1a:df:a5:2a:11:33:17:13:5d:ec:
         eb:d8:bb:16:68:01:6c:de:7e:d8:6d:88:ad:81:e6:89:e2:2f:
         b6:b7:a1:ae:04:3d:d7:12:64:04:92:64:1d:75:dd:e8:76:15:
         b2:c7:f1:40:9e:8d:72:b6:36:31:64:f7:2b:ca:29:dc:1f:64:
         d0:a4:88:ca:d4:6c:fd:bc:ba:d7:b3:6d:b9:b0:d2:b8:ba:65:
         0a:89:2d:7f:fa:70:9d:d5:65:10:7d:74:23:02:ce:35:08:3a:
         05:05:e9:0d:c2:d0:de:71:bb:9f:ca:78:f7:0c:82:50:3e:7b:
         1d:47:95:56:aa:fc:6f:e4:0e:aa:e5:ad:e1:25:61:8f:94:ff:
         26:91:af:ba:a4:2e:08:88:d5:8c:47:c4:69:0c:37:39:78:45:
         ab:b3:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:21 2025 by rpki-client