Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a314008a-1b76-3c43-a0ee-dca834765f17.roa
File:                     a314008a-1b76-3c43-a0ee-dca834765f17.roa (raw, json)
Hash identifier:          EbxrvegFDHLTuFxfxI1BnJGle9tZqVcbcA3rSEmYEYQ=
Subject key identifier:   00:DF:F2:81:18:80:27:C7:64:56:AC:11:ED:C1:E9:8A:EB:B8:12:B2
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA5573745428C586ADA080
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a314008a-1b76-3c43-a0ee-dca834765f17.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        67.54.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:55:73:74:54:28:c5:86:ad:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=9307cbd2-b366-4318-afbe-d48a71e673db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:6c:b9:90:88:4e:6e:47:ba:d7:52:67:05:
                    53:88:00:39:0a:93:54:e2:35:22:1a:d8:aa:1c:51:
                    25:9f:86:82:a4:bc:b1:8e:79:98:e1:ff:35:a1:73:
                    8e:d2:34:74:f8:d9:0f:a5:d1:93:ba:70:66:97:39:
                    25:9d:2d:03:f1:d5:59:f9:48:ae:da:67:a7:22:27:
                    6b:cf:77:84:a7:cf:00:7b:5d:43:df:d0:a8:50:4f:
                    02:eb:55:0d:fc:de:8a:a8:3b:7f:1b:10:3f:c7:34:
                    46:96:27:4e:7c:14:a2:68:a8:08:87:82:b6:e3:2d:
                    a8:55:b9:2d:87:22:fc:d4:4a:85:ff:e0:fc:1a:08:
                    33:b1:a2:6b:01:1d:81:b5:d2:1a:46:ef:34:9f:a2:
                    06:28:0d:60:f1:b2:72:c1:8d:d6:49:51:84:f3:f7:
                    3e:63:c0:fd:93:f2:0c:d6:c2:f5:07:3b:a1:60:95:
                    87:d4:ed:39:50:21:e6:b3:36:06:25:93:ea:3d:94:
                    b9:c4:14:9c:e6:a7:e3:c9:a1:69:99:87:70:ea:ea:
                    37:a1:53:60:d5:9b:1d:4b:f6:0d:d6:55:6a:c2:12:
                    0c:63:79:7b:b9:f9:33:22:c4:28:ae:a0:dd:b1:d1:
                    1c:a5:c5:6a:c7:40:e2:35:7e:4c:ec:33:be:67:d2:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DF:F2:81:18:80:27:C7:64:56:AC:11:ED:C1:E9:8A:EB:B8:12:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a314008a-1b76-3c43-a0ee-dca834765f17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:d7:a0:ed:2d:4f:b2:64:9e:bd:50:06:68:49:86:bd:9d:31:
         52:69:da:5a:25:0f:ff:7d:2e:94:26:bd:68:95:be:25:53:8a:
         ea:7d:30:31:2b:97:06:68:7c:e5:05:66:45:15:a4:69:94:71:
         90:e0:40:51:86:39:f7:86:5a:cf:c1:63:28:98:a6:0b:c9:6b:
         8f:b3:00:8a:e7:c5:c6:8b:4a:3c:d6:b9:8e:ae:15:a9:d6:f6:
         08:c8:3f:96:33:0c:94:f3:df:13:6d:3b:87:6c:c4:ab:3f:57:
         9d:af:80:ff:87:8c:9a:2d:bf:1e:57:d8:e4:0f:85:02:f3:99:
         2b:cf:2c:c7:23:43:c7:77:7a:ba:92:a9:72:32:8b:c2:eb:d3:
         77:57:df:20:ec:b3:35:bf:6f:a4:54:74:12:5a:2d:37:a7:da:
         91:71:b7:1c:53:27:79:c9:9b:98:bb:be:19:b1:8b:cc:b0:f6:
         11:6c:98:5b:5f:6c:60:b4:c2:91:9e:cc:fd:33:15:5b:21:ee:
         29:92:eb:a5:e0:a0:74:a5:5c:ac:9c:a4:c5:22:fd:fb:64:45:
         ee:a8:2a:30:d2:e2:4e:f9:0b:1e:01:bd:fc:d9:23:a4:83:a5:
         6c:3c:0f:05:b5:ce:1e:2d:f4:5c:51:74:9b:e8:ed:1b:6e:3b:
         05:13:b9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:54 2025 by rpki-client