Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e4f6308-f260-3ecc-9b38-533262a4826e.roa
File:                     3e4f6308-f260-3ecc-9b38-533262a4826e.roa (raw, json)
Hash identifier:          utZZsDwx/OfF3MQXOETQkUJ+3HEXtH1F2UsT5rAZuMY=
Subject key identifier:   79:03:16:41:A5:FB:ED:0C:A9:28:8E:12:B9:01:66:49:27:CC:4F:45
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E179C94F43A65A5A3F380
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e4f6308-f260-3ecc-9b38-533262a4826e.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.106.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:17:9c:94:f4:3a:65:a5:a3:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c9c2ff3f-5bfa-4033-89a3-26b7185bb663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:34:4e:c3:1d:87:b4:75:22:c8:b4:5e:b3:4d:
                    71:31:08:18:66:98:dd:95:c0:e0:a0:22:ad:57:45:
                    04:83:10:07:6e:c1:71:21:23:4c:d1:c4:57:5e:93:
                    16:47:cd:6a:a1:c7:60:04:7c:29:a4:df:6b:4d:8f:
                    f7:93:9d:32:98:77:0a:5b:59:f0:fe:c4:4e:66:97:
                    a8:f5:84:51:48:6d:93:a1:c0:49:33:9f:7b:8b:df:
                    af:6a:9c:3b:16:0e:a8:e9:6f:ce:0d:cc:7e:2c:fa:
                    87:84:17:88:3d:6d:ff:60:5b:66:79:d4:1e:74:6a:
                    fa:a3:14:2b:c2:70:39:45:dd:5b:38:29:73:cc:b6:
                    5d:13:07:58:59:c9:40:2c:ee:b2:33:bc:dd:0f:e5:
                    c6:69:be:e3:d7:28:f3:0d:da:bf:53:27:4b:e3:0c:
                    f2:82:5f:67:3f:88:b7:9e:66:16:71:99:55:97:b0:
                    3e:29:b7:88:ba:b7:d5:e5:9b:2f:0c:51:dc:9b:3a:
                    89:8b:26:cf:8b:f3:eb:04:99:47:32:e9:a0:8b:82:
                    af:3c:c0:5a:bb:d2:bf:22:b2:f6:a4:7c:1e:f4:17:
                    76:37:bf:9f:59:bd:89:5e:a5:82:2b:16:6a:ae:d8:
                    92:27:3a:95:96:b4:7e:49:96:11:91:74:1b:50:47:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:03:16:41:A5:FB:ED:0C:A9:28:8E:12:B9:01:66:49:27:CC:4F:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e4f6308-f260-3ecc-9b38-533262a4826e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f7:80:48:f9:03:3d:a6:81:a2:05:d3:a8:aa:b6:b7:87:9b:
         45:79:ff:5a:e4:74:91:62:6c:14:19:61:f9:d7:a1:9d:de:d3:
         47:3c:df:ab:44:85:75:19:16:29:64:dc:4c:66:ba:85:cd:10:
         bc:85:69:d6:65:d4:c3:e5:bc:ef:77:b7:9d:c4:6c:e4:f6:eb:
         b0:fa:af:e8:0b:be:bd:07:d2:38:5d:35:78:e3:7a:b4:92:4f:
         83:f3:62:4a:21:88:5e:4b:13:1e:5d:1d:b6:9e:0c:fb:1d:8f:
         1a:82:0a:39:df:6c:3f:6a:3f:fb:5e:c6:15:ec:cf:7d:d1:b8:
         e7:6d:81:1b:34:41:d0:7c:76:88:21:d1:20:9f:f0:6e:98:ec:
         d5:82:60:62:b1:40:48:ef:bb:3d:7c:4f:fe:2f:01:fe:74:de:
         4f:d8:1a:83:2a:eb:e2:b0:a7:c9:70:a8:97:b2:c5:41:62:0c:
         84:6b:7f:15:f1:35:f6:f4:c0:aa:fe:70:9b:fc:ea:ab:26:83:
         8e:f9:79:77:e8:76:5e:32:41:41:3f:c8:06:1b:bf:bc:c8:38:
         ce:eb:af:99:e8:c1:03:dd:77:f8:d4:ce:e8:29:28:f7:7f:b1:
         31:48:c8:16:38:14:3a:e0:20:7c:b1:af:aa:6e:ab:1b:d3:5f:
         33:e1:14:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPheclPQ6ZaWj84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
YzljMmZmM2YtNWJmYS00MDMzLTg5YTMtMjZiNzE4NWJiNjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zROwx2HtHUiyLRes01xMQgYZpjdlcDgoCKt
V0UEgxAHbsFxISNM0cRXXpMWR81qocdgBHwppN9rTY/3k50ymHcKW1nw/sROZpeo
9YRRSG2TocBJM597i9+vapw7Fg6o6W/ODcx+LPqHhBeIPW3/YFtmedQedGr6oxQr
wnA5Rd1bOClzzLZdEwdYWclALO6yM7zdD+XGab7j1yjzDdq/UydL4wzygl9nP4i3
nmYWcZlVl7A+KbeIurfV5ZsvDFHcmzqJiybPi/PrBJlHMumgi4KvPMBau9K/IrL2
pHwe9Bd2N7+fWb2JXqWCKxZqrtiSJzqVlrR+SZYRkXQbUEe22wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHkDFkGl++0MqSiOErkBZkknzE9FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2U0ZjYzMDgtZjI2MC0z
ZWNjLTliMzgtNTMzMjYyYTQ4MjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2qRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEn3gEj5Az2mgaIF06iqtreHm0V5/1rkdJFibBQZYfnXoZ3e00c836tE
hXUZFilk3ExmuoXNELyFadZl1MPlvO93t53EbOT267D6r+gLvr0H0jhdNXjjerSS
T4PzYkohiF5LEx5dHbaeDPsdjxqCCjnfbD9qP/texhXsz33RuOdtgRs0QdB8dogh
0SCf8G6Y7NWCYGKxQEjvuz18T/4vAf503k/YGoMq6+Kwp8lwqJeyxUFiDIRrfxXx
Nfb0wKr+cJv86qsmg475eXfodl4yQUE/yAYbv7zIOM7rr5nowQPdd/jUzugpKPd/
sTFIyBY4FDrgIHyxr6puqxvTXzPhFP4=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:38 2024 by rpki-client on console-ams.rpki-client.org