Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef70d90d-b557-3f5f-bffe-49339ac72b38.roa
File:                     ef70d90d-b557-3f5f-bffe-49339ac72b38.roa (raw, json)
Hash identifier:          fTIaQBcjr/MYL4ftLZEqzf08n3zeodavhDqIDX6HAew=
Subject key identifier:   05:EA:CD:2B:90:ED:09:B4:00:F0:B8:20:1E:E9:CB:6A:72:93:D3:3F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BADD80E1E77A2909FA1AC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef70d90d-b557-3f5f-bffe-49339ac72b38.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        67.54.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:dd:80:e1:e7:7a:29:09:fa:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=670f4514-ef55-472b-892a-f1b24b5552bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:e1:0d:00:29:94:2a:97:78:09:26:18:bd:
                    5c:3c:04:c1:49:02:c6:1c:1f:ef:98:c5:57:43:eb:
                    80:80:73:0a:97:77:36:96:e3:03:5d:a4:9f:8e:a5:
                    1d:70:82:1b:43:10:b1:66:ba:e2:ac:5d:f8:40:43:
                    ff:26:cc:a1:e0:4f:ad:0d:bc:b7:e2:a2:84:f0:bb:
                    62:ac:a5:9c:c7:b8:26:c3:18:4c:70:cc:2f:df:b2:
                    63:91:9c:4c:97:f0:ff:42:2c:b4:5d:ad:4d:c5:35:
                    be:61:6f:56:10:30:87:4f:3d:ec:e7:76:ef:22:65:
                    5a:c5:3d:b7:ac:d9:ab:75:a4:46:f8:9f:e8:5e:03:
                    25:8d:c5:cb:c2:e6:47:dc:39:82:33:6a:a4:3d:3d:
                    f8:e7:6a:85:b7:52:c2:27:0d:e1:91:f2:47:4e:a4:
                    08:93:80:53:68:72:b4:b4:88:cd:8c:f8:02:2e:37:
                    69:53:7e:34:0f:25:c7:eb:96:15:19:db:78:2d:e2:
                    31:8a:9d:06:3f:86:21:e4:a0:f6:37:a1:db:6a:d6:
                    90:4b:2b:61:66:3e:2b:b9:96:db:7e:eb:7d:2a:9e:
                    74:e8:eb:00:d8:cd:07:24:d1:b4:be:c2:05:d4:53:
                    2c:ad:38:33:83:5c:23:48:13:05:20:c9:61:e9:45:
                    a0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EA:CD:2B:90:ED:09:B4:00:F0:B8:20:1E:E9:CB:6A:72:93:D3:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef70d90d-b557-3f5f-bffe-49339ac72b38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:dc:0f:ba:dd:01:bf:29:05:49:48:6b:94:ef:78:fb:55:9c:
         7b:ab:cc:87:c4:21:5f:d1:10:6e:ff:ba:5f:c6:ba:44:21:21:
         12:91:2b:c2:3c:21:f8:d3:79:f8:ed:69:ed:0f:5c:63:88:d6:
         de:47:ea:d4:f6:8c:2d:1e:be:90:56:14:07:e9:8e:d1:1b:32:
         7e:8f:96:f1:00:2a:4c:40:1c:1f:9a:06:df:94:eb:a6:a9:21:
         99:80:6c:a8:21:ec:c8:6f:be:bf:42:1e:e3:f6:d4:f1:28:fa:
         92:06:6c:1a:49:26:0a:03:c6:4d:61:88:03:98:bc:83:4c:ef:
         36:ea:76:6f:a3:14:26:45:3b:51:65:5d:04:65:34:a9:01:82:
         68:06:c6:3a:f4:7d:2d:ae:01:05:a2:5e:08:9e:45:e9:9d:a7:
         35:19:d0:c0:af:98:4a:70:84:7c:0f:68:fd:47:7b:18:bf:67:
         e4:c3:74:3b:dd:61:ee:fd:0d:0b:e1:78:a4:cd:a0:8d:18:58:
         28:46:58:6e:28:c5:15:98:32:2d:c6:a6:36:bf:2b:09:40:29:
         01:a8:eb:fe:9b:b5:55:ef:02:f6:b7:ab:8d:e1:1f:e9:e0:c1:
         e9:7e:b5:3c:32:2a:9f:83:dc:e4:96:dc:97:ce:e7:0f:3d:b1:
         bd:14:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:45:49 2025 by rpki-client