Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e30eb19-8815-3db4-bb74-9955f5c16fa5.roa
File:                     9e30eb19-8815-3db4-bb74-9955f5c16fa5.roa (raw, json)
Hash identifier:          5nlDvxX+4lhIEwh06tDbaNvdy9xcq+rYDo1xhfEw3BI=
Subject key identifier:   69:AC:2B:E6:36:63:08:96:D0:3F:3D:11:27:6C:A3:67:EB:46:1A:15
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BADFA83B70F0E6DD5B1700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e30eb19-8815-3db4-bb74-9955f5c16fa5.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        67.54.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:df:a8:3b:70:f0:e6:dd:5b:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ec6f50a5-6d40-4c81-9543-ea7ff86dab25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:18:1e:2b:f2:51:47:89:59:77:f9:65:5d:
                    61:19:90:94:b2:08:59:35:08:04:a6:8b:2c:05:43:
                    a3:01:48:74:9b:b6:6e:1f:ae:88:1f:5f:56:4b:b1:
                    08:76:0e:ef:39:31:4a:fe:0c:c8:52:57:8c:f0:9a:
                    93:01:ee:a7:91:82:93:6e:c9:1c:aa:6f:d5:38:31:
                    25:0b:3c:05:48:a6:6d:c8:f1:a0:90:5d:19:5c:76:
                    dc:d4:b3:97:f8:11:3f:b3:74:e2:ce:66:bb:47:1d:
                    80:17:c0:2c:b0:58:27:4d:25:33:9b:02:a9:99:79:
                    d6:3b:9e:c7:19:79:17:ba:47:fc:7a:d0:45:f9:b0:
                    c5:b8:f5:37:97:bb:45:f0:cb:d1:ee:5a:c0:d3:c9:
                    22:95:ba:29:b3:00:ae:25:98:bf:14:70:a9:f8:b0:
                    27:c5:d9:88:1d:0a:17:23:74:7f:e2:45:b6:8c:3d:
                    fb:ad:43:75:97:04:ef:06:31:f6:af:e1:e0:02:32:
                    96:55:30:5f:e0:dc:0a:3e:6d:b7:c4:1f:d1:36:6d:
                    23:45:b7:50:d2:a1:de:ae:bc:1a:28:fe:d8:5b:f5:
                    b2:f7:9e:17:24:52:51:0b:46:26:ab:b1:ff:7a:68:
                    68:ee:f8:d6:72:21:a3:7e:1e:a1:49:5f:35:dc:0c:
                    f4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AC:2B:E6:36:63:08:96:D0:3F:3D:11:27:6C:A3:67:EB:46:1A:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9e30eb19-8815-3db4-bb74-9955f5c16fa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:cc:33:e4:01:15:34:47:b3:af:93:2c:b9:07:25:20:41:e2:
         b2:6b:d3:b7:b5:25:3c:69:7c:5c:3d:28:bf:de:b9:08:be:6e:
         b0:cf:b6:29:66:b3:8e:5b:fc:29:c2:32:07:b9:6b:f1:b4:b3:
         c3:be:49:b1:4f:7a:d1:6f:7d:c2:c3:a7:73:5c:95:03:5f:31:
         35:3f:33:a9:f8:91:2f:7f:c6:23:94:dc:9a:35:95:8a:97:76:
         99:91:f4:d1:01:ea:0d:40:8e:24:ec:6d:ac:8c:35:b2:4d:33:
         6c:e2:30:98:c9:f1:e5:c0:2d:c3:32:7d:17:66:d1:95:98:4b:
         da:b3:37:e7:b5:4d:89:e3:b5:47:e9:4e:50:69:88:93:87:7a:
         21:7f:c3:80:8e:e0:d9:41:88:a3:58:d3:dd:65:88:e7:2e:19:
         82:67:88:33:ba:50:f1:28:62:cb:21:3b:72:08:3d:cf:e6:f3:
         7c:df:24:36:a5:0c:2a:de:42:83:60:d0:2c:2f:a6:08:bd:c7:
         53:16:7e:68:04:3b:a4:8c:e5:20:33:6b:4b:3a:ef:f2:9a:4d:
         1a:fe:11:15:8f:29:6e:40:e2:05:e4:9b:09:1f:41:c5:8d:cf:
         41:47:d6:74:f6:94:5a:ad:d8:c6:02:55:59:d5:3e:80:c0:68:
         7f:f5:cd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:40:45 2025 by rpki-client