Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36209def-bf15-3a77-b423-e8b518004aab.roa
File:                     36209def-bf15-3a77-b423-e8b518004aab.roa (raw, json)
Hash identifier:          xWesFYJgT8ap22Ao4F2+5pa8RpbT11VlMfLOHiWpSBg=
Subject key identifier:   3B:20:B7:EF:15:21:3B:DC:59:99:93:9F:04:F2:81:DC:89:0E:0D:C0
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D9F9B1F04AAC9A6C8CBF0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36209def-bf15-3a77-b423-e8b518004aab.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.106.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:9f:9b:1f:04:aa:c9:a6:c8:cb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c9ed8dc7-98fe-4d4d-b87e-fa3a8cff18cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:74:c6:5d:cd:ea:ef:45:dc:53:9b:a0:2d:bc:
                    ed:66:ac:5f:43:54:ac:05:30:dc:48:55:81:cc:3b:
                    fa:24:96:f2:75:96:bb:da:1b:74:55:6f:52:4d:ff:
                    00:ad:61:2a:84:d2:a0:0a:1c:d4:34:e4:64:fa:5f:
                    bf:b4:14:23:e4:04:87:ff:d6:3c:a6:47:fd:ca:5a:
                    6b:c7:76:b1:fe:6e:93:7d:9b:41:79:60:67:a4:f9:
                    0a:9d:55:b0:dc:49:7c:5c:1f:c4:77:2a:4d:92:93:
                    67:ba:87:6d:1a:55:0c:21:45:39:8f:b5:56:43:34:
                    14:13:95:b6:e6:2d:6d:c8:e2:c4:61:46:ba:54:c0:
                    17:b7:90:46:5d:17:d9:ca:2e:95:0f:1e:16:23:d6:
                    0f:be:97:0b:f4:0b:8e:09:22:57:d8:e6:5b:2d:2d:
                    8a:1e:3e:34:e2:63:f7:ef:34:49:c7:32:f1:78:c6:
                    dd:d9:21:91:aa:5b:41:8c:02:82:08:c9:90:74:22:
                    34:f4:6b:99:a2:f1:bf:c5:66:f7:9f:cb:fb:03:27:
                    6f:b0:27:9e:05:d9:e5:6a:90:d9:79:3b:3b:c9:29:
                    1e:19:7e:02:88:33:67:95:bb:8c:85:f2:20:c7:3a:
                    a0:83:d0:7b:c3:3a:ab:c4:65:20:44:6b:25:0c:ea:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:20:B7:EF:15:21:3B:DC:59:99:93:9F:04:F2:81:DC:89:0E:0D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36209def-bf15-3a77-b423-e8b518004aab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:aa:8e:32:15:f1:5a:e0:37:7f:af:41:ce:9a:83:cd:5f:6f:
         30:34:72:f4:ba:d9:a5:ad:f6:5a:3f:1f:7b:1b:dc:ea:94:2f:
         ec:f6:42:00:c0:83:39:13:13:aa:05:9f:cd:73:76:7b:4a:e7:
         12:c6:2f:08:d4:d2:80:20:d6:9b:28:d2:09:44:7c:6f:47:6c:
         d8:b1:ad:67:6c:a6:89:d2:dc:5b:b3:36:b0:41:c4:42:ee:a6:
         64:e6:e0:58:4c:ca:85:3d:8e:1f:90:1b:95:fc:5b:10:f6:2f:
         d3:ca:e8:a7:91:d6:6b:32:96:79:16:79:41:08:56:f8:4e:71:
         6a:6b:7e:ae:10:9b:12:90:f3:b8:d1:8d:0e:72:2c:01:a2:0f:
         08:d7:7d:eb:29:01:0b:bb:6d:eb:b7:1f:d8:1c:2c:9c:8d:55:
         26:7e:1e:d2:08:34:54:e5:79:f2:28:29:0a:2f:c9:ef:26:d7:
         86:d3:e4:5e:76:13:21:d6:2d:9a:db:e6:53:7f:5f:cf:3f:47:
         8d:f7:66:db:17:0d:f3:c8:da:11:89:10:d4:a0:0b:24:f2:65:
         4b:53:79:cc:fd:dc:bf:3f:b5:8a:c4:47:01:82:bc:56:b7:01:
         20:3f:54:4b:f4:bd:48:b2:8c:15:66:00:cb:06:34:97:a4:e8:
         24:1b:aa:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPZ+bHwSqyabIy/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
YzllZDhkYzctOThmZS00ZDRkLWI4N2UtZmEzYThjZmYxOGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXTGXc3q70XcU5ugLbztZqxfQ1SsBTDcSFWB
zDv6JJbydZa72ht0VW9STf8ArWEqhNKgChzUNORk+l+/tBQj5ASH/9Y8pkf9ylpr
x3ax/m6TfZtBeWBnpPkKnVWw3El8XB/EdypNkpNnuodtGlUMIUU5j7VWQzQUE5W2
5i1tyOLEYUa6VMAXt5BGXRfZyi6VDx4WI9YPvpcL9AuOCSJX2OZbLS2KHj404mP3
7zRJxzLxeMbd2SGRqltBjAKCCMmQdCI09GuZovG/xWb3n8v7AydvsCeeBdnlapDZ
eTs7ySkeGX4CiDNnlbuMhfIgxzqgg9B7wzqrxGUgRGslDOrGvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDsgt+8VITvcWZmTnwTygdyJDg3AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzYyMDlkZWYtYmYxNS0z
YTc3LWI0MjMtZThiNTE4MDA0YWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2p0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGiqjjIV8VrgN3+vQc6ag81fbzA0cvS62aWt9lo/H3sb3OqUL+z2QgDA
gzkTE6oFn81zdntK5xLGLwjU0oAg1pso0glEfG9HbNixrWdsponS3FuzNrBBxELu
pmTm4FhMyoU9jh+QG5X8WxD2L9PK6KeR1msylnkWeUEIVvhOcWprfq4QmxKQ87jR
jQ5yLAGiDwjXfespAQu7beu3H9gcLJyNVSZ+HtIINFTlefIoKQovye8m14bT5F52
EyHWLZrb5lN/X88/R433ZtsXDfPI2hGJENSgCyTyZUtTecz93L8/tYrERwGCvFa3
ASA/VEv0vUiyjBVmAMsGNJek6CQbqtA=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:33 2024 by rpki-client on console-ams.rpki-client.org