Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c615e5-1b14-3d7c-86c1-2c0d20e97f2e.roa
File:                     c6c615e5-1b14-3d7c-86c1-2c0d20e97f2e.roa (raw, json)
Hash identifier:          dCTgL4RLoiCyRgUjOgtNHVO9Dkr49HlehBQVjly3Ig8=
Subject key identifier:   C4:53:43:E8:7B:16:F0:52:DD:AF:8F:27:77:6F:83:B7:E8:0B:03:2D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BADE3D8817402D94ACAF00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c615e5-1b14-3d7c-86c1-2c0d20e97f2e.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        67.54.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:de:3d:88:17:40:2d:94:ac:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=cbefb472-3ffa-424e-98b9-da74957a5419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:b7:79:68:f9:b9:5f:c0:77:69:f8:b5:af:
                    68:d6:79:0d:20:97:cf:5f:bf:21:f6:fa:72:20:41:
                    c6:82:43:bf:56:e1:d9:5b:b2:b7:18:ce:cc:d4:85:
                    d4:09:16:5e:c2:ef:8b:8d:09:8b:fd:14:e3:0d:e8:
                    62:9d:17:4c:c1:b4:0e:35:be:6d:8e:d4:db:7f:95:
                    ce:34:e6:ae:48:be:a8:59:cd:b7:dd:3c:7e:8b:62:
                    e6:db:79:04:91:d0:59:a1:65:4c:a0:6c:c1:fd:10:
                    3f:a7:cf:27:5d:84:23:88:ea:66:65:91:ca:b1:25:
                    e1:d5:05:2f:c0:54:4c:4f:39:4f:3b:7c:91:9b:2d:
                    22:e5:fe:a8:63:50:41:bb:40:00:08:ea:d8:16:0f:
                    c7:b6:d7:d7:34:14:9f:d5:d6:6a:f3:35:17:3b:84:
                    18:00:2a:c4:1f:24:de:c9:46:39:0c:a9:ba:ba:7f:
                    34:d5:78:45:c0:82:fe:12:ee:4f:d1:28:da:9e:74:
                    7e:bc:4b:b6:e4:23:2d:07:fb:ef:f0:27:42:f1:cd:
                    ed:7b:67:0a:b3:f8:ab:eb:bc:0c:34:21:5d:04:b2:
                    84:e9:1c:e8:d3:9e:8d:cc:34:84:b3:12:27:95:a4:
                    50:34:a4:f9:3d:b7:35:d4:92:4c:a6:99:88:97:64:
                    67:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:53:43:E8:7B:16:F0:52:DD:AF:8F:27:77:6F:83:B7:E8:0B:03:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c615e5-1b14-3d7c-86c1-2c0d20e97f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e8:6d:e4:9b:ed:fa:b8:ff:25:8c:ee:e8:e6:99:46:b5:10:
         76:1e:64:9d:1d:0b:a1:28:27:de:0a:2f:30:45:4e:39:87:41:
         3b:5b:c1:66:33:70:c6:c3:49:ca:79:aa:f7:9c:c4:21:a6:11:
         eb:c8:fb:40:07:aa:98:26:71:b7:72:63:74:9f:9d:fe:b7:2c:
         f9:70:76:65:b8:7f:01:9b:23:ba:01:db:dd:96:40:a8:0c:71:
         54:21:44:20:f9:35:c3:49:6e:83:d2:34:f3:37:ae:9c:d4:ee:
         38:5d:4a:1c:43:5d:51:5e:e1:d6:68:06:57:94:7d:bf:75:f4:
         c7:41:5e:39:d3:02:53:86:d9:5e:db:5e:f7:d2:a1:05:ba:5c:
         e4:ec:9e:92:c8:71:77:4f:47:ef:73:e7:5e:15:d1:56:15:a5:
         32:f9:6a:3f:22:e1:ca:a0:ee:78:ce:0d:39:80:f5:7d:6b:2a:
         22:cb:8f:8a:a6:7e:ee:5a:46:ae:14:0e:f0:98:90:70:3d:a5:
         70:b5:42:f6:f8:b7:4f:ba:b8:84:a1:2b:ad:6e:0b:a9:a9:17:
         71:61:f6:f6:0a:00:ba:3e:07:2e:4a:51:76:26:52:b7:ba:36:
         e0:13:3a:ff:0a:17:03:91:d2:eb:70:36:bd:76:2b:a6:9b:dc:
         1e:a9:fc:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkut49iBdALZSsrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
Y2JlZmI0NzItM2ZmYS00MjRlLTk4YjktZGE3NDk1N2E1NDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOa3eWj5uV/Ad2n4ta9o1nkNIJfPX78h9vpy
IEHGgkO/VuHZW7K3GM7M1IXUCRZewu+LjQmL/RTjDehinRdMwbQONb5tjtTbf5XO
NOauSL6oWc233Tx+i2Lm23kEkdBZoWVMoGzB/RA/p88nXYQjiOpmZZHKsSXh1QUv
wFRMTzlPO3yRmy0i5f6oY1BBu0AACOrYFg/HttfXNBSf1dZq8zUXO4QYACrEHyTe
yUY5DKm6un801XhFwIL+Eu5P0SjannR+vEu25CMtB/vv8CdC8c3te2cKs/ir67wM
NCFdBLKE6Rzo056NzDSEsxInlaRQNKT5Pbc11JJMppmIl2RnQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMRTQ+h7FvBS3a+PJ3dvg7foCwMtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzZjNjE1ZTUtMWIxNC0z
ZDdjLTg2YzEtMmMwZDIwZTk3ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzasMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/obeSb7fq4/yWM7ujmmUa1EHYeZJ0dC6EoJ94KLzBFTjmHQTtbwWYz
cMbDScp5qvecxCGmEevI+0AHqpgmcbdyY3Sfnf63LPlwdmW4fwGbI7oB292WQKgM
cVQhRCD5NcNJboPSNPM3rpzU7jhdShxDXVFe4dZoBleUfb919MdBXjnTAlOG2V7b
XvfSoQW6XOTsnpLIcXdPR+9z514V0VYVpTL5aj8i4cqg7njODTmA9X1rKiLLj4qm
fu5aRq4UDvCYkHA9pXC1Qvb4t0+6uIShK61uC6mpF3Fh9vYKALo+By5KUXYmUre6
NuATOv8KFwOR0utwNr12K6ab3B6p/JQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:15:18 2025 by rpki-client