Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbc196ae-b2be-3cf4-ba16-78a04503eba4.roa
File:                     fbc196ae-b2be-3cf4-ba16-78a04503eba4.roa (raw, json)
Hash identifier:          EDkeTJAgwP5rfUCuIi5yu5REFIK7LSpMrTHHzD45ysI=
Subject key identifier:   CA:FD:23:39:17:86:12:13:5F:57:0E:E6:03:96:ED:A4:A3:AE:DC:9D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA53F7F5307913519EEA60
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbc196ae-b2be-3cf4-ba16-78a04503eba4.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        67.54.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:53:f7:f5:30:79:13:51:9e:ea:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=202d463c-c14d-4a40-89b1-5e7b3dad7218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:d4:13:39:0e:e1:80:5c:ab:2c:f0:63:07:
                    5b:3c:d4:d6:3b:17:d1:fe:17:e2:76:c0:6b:99:97:
                    11:93:14:15:36:a2:92:06:0c:14:29:f7:18:36:20:
                    b2:0d:8e:10:60:f1:c4:d3:b0:9e:f4:20:fb:4e:ff:
                    cf:c0:f7:c4:1a:2c:a1:fb:a3:66:61:3b:4b:e0:f4:
                    61:bd:de:6f:89:52:b3:c0:71:4f:79:c5:10:90:c8:
                    d8:e1:1e:0d:14:70:42:76:83:c8:3e:2d:cb:fd:3a:
                    85:12:c9:82:5c:8e:5f:05:a8:ec:d3:e0:81:41:4e:
                    86:cb:a4:28:a8:a8:31:8f:46:a2:7c:6d:42:f3:d3:
                    bd:c2:bf:a1:97:e1:00:40:6d:57:e9:87:22:e5:b1:
                    40:6f:f9:ed:b6:2e:b4:c2:ba:ad:44:8e:fe:a2:3f:
                    a1:7c:7d:2e:03:64:92:15:22:c3:69:c0:59:d8:72:
                    85:68:37:b1:73:ea:f7:9d:e8:c4:a5:ce:00:01:28:
                    69:95:b4:f1:85:1e:d1:e9:7b:b0:a9:3f:5b:64:fc:
                    85:e8:76:2c:a5:ef:20:5d:1a:04:6a:56:5f:d4:56:
                    ac:fb:f6:54:a4:11:30:f5:44:78:2f:15:dc:18:4a:
                    76:b7:38:73:bf:55:35:b4:eb:cf:8c:b0:8d:e6:46:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FD:23:39:17:86:12:13:5F:57:0E:E6:03:96:ED:A4:A3:AE:DC:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbc196ae-b2be-3cf4-ba16-78a04503eba4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:3e:b6:45:cb:e2:26:9c:ae:17:5f:b5:39:19:9c:55:a2:f9:
         54:83:9c:22:81:43:5b:eb:0e:f8:11:7f:0c:cf:fb:56:00:08:
         0f:a7:65:ae:2a:b1:e0:72:13:ab:1e:37:49:34:fa:58:9c:0d:
         0e:f0:af:e7:12:0a:bb:f5:45:ce:c8:f9:cc:82:96:65:b5:48:
         fd:55:69:fd:1b:4a:96:4f:82:a8:61:a3:3d:ec:10:7d:25:8a:
         73:4f:a2:e9:4d:f6:dd:44:42:8b:85:8f:53:0b:a6:f9:fc:b3:
         6d:f9:7e:20:ec:08:0b:9d:78:67:fd:28:28:82:79:e7:f3:07:
         f7:fe:fc:0c:42:c4:d8:0d:5e:9f:bf:34:12:03:5a:b3:4e:56:
         39:5d:40:fd:92:ae:63:a1:ea:99:b0:9e:f2:6b:d0:e3:11:bd:
         22:2d:4f:47:69:53:7f:62:d1:e5:c5:50:9a:ff:39:30:cd:aa:
         fc:4a:82:e9:cc:f4:aa:aa:fa:67:25:d4:99:cd:f8:07:d3:5b:
         b4:bd:c8:1d:2e:1e:fe:ca:bb:03:a7:a8:ad:15:dd:79:bb:00:
         ad:dc:5a:90:e1:81:be:36:c4:28:6b:9e:ae:e7:f7:b6:76:6b:
         b5:1b:91:0f:91:24:77:1a:00:0f:87:f5:b5:57:c7:1f:1f:ef:
         42:f3:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:26:18 2025 by rpki-client