Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91e67b38-ff34-3bc1-a0f2-42843bbef479.roa
File:                     91e67b38-ff34-3bc1-a0f2-42843bbef479.roa (raw, json)
Hash identifier:          0VOJd7FMuZe1qDeSt0GzT+pzEd6cn5Xceo2FXhTBh/M=
Subject key identifier:   7B:E8:97:CF:71:48:B9:2A:F1:C1:34:3C:9B:7D:A0:7B:64:B7:97:C1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA55351D764CDC619AD680
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91e67b38-ff34-3bc1-a0f2-42843bbef479.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        67.54.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:55:35:1d:76:4c:dc:61:9a:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=07bb4a24-6a4e-4782-a61f-832c86dc067e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ce:55:2e:72:75:4e:df:fb:df:46:bf:ba:0e:
                    5d:c9:40:38:bf:c5:5c:b3:39:63:c7:40:48:d9:17:
                    2e:b4:25:63:c9:ef:be:36:37:26:ac:c7:73:4a:93:
                    37:db:21:75:c5:20:0b:15:11:1b:52:8e:94:e6:cf:
                    84:cb:5d:f5:35:ac:b2:2a:35:93:96:78:9d:67:8a:
                    0e:0a:e3:ed:5d:40:1c:32:c1:16:40:a6:b7:4d:72:
                    42:0c:4b:79:9a:0b:ee:df:32:ad:d1:ce:05:1a:34:
                    6d:2f:2a:83:7a:82:ad:cf:31:18:9f:be:22:da:3d:
                    a1:40:a7:f6:6f:e8:15:0e:f9:0f:d6:1d:77:a8:47:
                    6c:da:13:89:67:97:83:7c:db:77:14:44:56:29:d3:
                    19:01:e6:95:c4:ca:e5:9a:53:a2:d1:73:71:34:82:
                    e1:40:ad:dc:cc:30:9c:da:af:0c:12:14:f6:c4:7a:
                    92:61:09:e1:ab:ab:84:59:b5:8f:3a:db:39:df:5b:
                    fa:41:9d:4f:7e:9b:f7:0a:d2:91:be:ad:59:44:e2:
                    1b:96:ff:e4:a1:91:2e:69:df:a2:41:9a:ad:0b:c5:
                    00:a4:59:78:1a:9c:09:84:30:e9:7c:a6:e4:70:5c:
                    7b:42:24:58:1d:88:58:1c:a4:08:f7:5b:7d:61:83:
                    22:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E8:97:CF:71:48:B9:2A:F1:C1:34:3C:9B:7D:A0:7B:64:B7:97:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/91e67b38-ff34-3bc1-a0f2-42843bbef479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:a0:09:fc:51:e6:d1:42:aa:c7:1c:fc:75:66:6b:08:b3:6c:
         1a:10:be:08:31:11:91:9c:21:46:a0:dc:ca:82:70:70:7d:ec:
         12:bf:db:14:df:75:0c:ae:f9:55:26:b8:7d:fd:d5:cf:ba:4a:
         06:93:44:b1:d6:c4:8e:c4:85:40:b3:61:a7:6e:c2:21:08:67:
         6d:25:13:6d:a4:21:3a:df:2d:61:1b:bd:c0:27:1a:cf:86:77:
         c6:b3:6b:71:eb:65:08:17:2b:e4:5d:18:c9:1f:15:63:5c:49:
         1c:5b:65:5d:89:24:db:5f:f6:59:92:a8:ae:87:71:a4:79:d5:
         d8:a2:fa:ae:63:1d:5d:70:68:9b:38:96:a2:ba:74:4a:72:8d:
         b5:47:d2:32:a7:df:f0:f4:03:b5:f0:b2:02:38:27:0b:58:35:
         bb:ef:59:4e:95:38:cf:c3:c0:ae:f8:46:03:c7:cf:ac:00:51:
         2e:e3:2a:44:31:e5:40:96:ff:24:f4:96:00:30:1b:88:96:ef:
         e3:a5:75:a0:0a:dd:d8:6a:40:35:c4:52:2a:cd:28:aa:3c:4b:
         8f:4d:89:d8:77:98:6f:39:53:f2:d6:48:95:bd:e1:ae:66:1e:
         0a:33:2f:7e:98:85:73:d0:56:2a:d2:d6:2d:ae:13:dd:d0:be:
         a9:be:2e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:59:32 2025 by rpki-client