Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/556f558a-fbd8-3155-904b-e3e0b9be60b4.roa
File:                     556f558a-fbd8-3155-904b-e3e0b9be60b4.roa (raw, json)
Hash identifier:          zJwXYRTyt3NXv2X7ZSkyFjJxUpllwAnH5qTcPRHR2Nk=
Subject key identifier:   76:0A:4A:8B:94:82:58:24:9B:31:06:FB:1B:24:55:F6:98:2F:CF:99
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AE642E95BC031D5A529A0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/556f558a-fbd8-3155-904b-e3e0b9be60b4.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.106.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:e6:42:e9:5b:c0:31:d5:a5:29:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=72a792cc-356f-485e-8ec7-f543d7d01391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5c:87:82:89:3f:2e:2e:32:7a:86:9e:ec:87:
                    97:ca:d5:1d:08:21:49:c9:6a:69:e7:ec:76:c4:6c:
                    3a:fc:96:bb:5f:8a:72:41:4f:af:2b:cc:60:01:06:
                    97:ed:1e:33:4c:94:e7:a6:66:d8:9a:9a:5c:dc:5c:
                    22:bc:18:33:42:be:50:71:2b:b0:ad:03:ca:af:26:
                    27:b9:42:91:62:a8:cb:f2:a3:1e:fc:cc:55:e9:19:
                    e4:05:3f:f9:de:1a:f6:90:39:5c:e0:c5:95:0b:e4:
                    56:ce:b6:21:e3:eb:ed:3d:ac:d8:a8:45:e1:80:7f:
                    d6:1c:6f:33:c4:42:f8:3a:e1:7c:9c:eb:fd:c7:73:
                    97:c5:10:a1:13:ac:a1:8f:af:31:f8:48:79:15:a7:
                    94:c8:0f:e0:2e:63:4e:de:a4:10:99:d1:5e:1d:9d:
                    8d:a8:e0:a7:66:35:de:5c:58:b6:35:fd:b1:ca:ca:
                    1b:01:b6:ab:b9:c7:03:bb:07:b9:1f:7f:ca:0b:b8:
                    ed:27:ca:c3:5d:9d:72:26:69:1d:e3:4e:c7:f6:75:
                    9e:0b:c4:91:73:d8:4c:77:8b:2d:d7:b3:96:58:5a:
                    7f:33:31:5a:a9:02:3c:1f:f4:43:49:ee:4d:46:98:
                    b1:95:fb:58:5c:8f:4c:0f:07:cf:76:bf:aa:3d:7d:
                    90:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0A:4A:8B:94:82:58:24:9B:31:06:FB:1B:24:55:F6:98:2F:CF:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/556f558a-fbd8-3155-904b-e3e0b9be60b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:99:09:94:97:ab:3d:86:ab:3a:e1:37:01:37:77:43:f3:e4:
         d2:29:47:a3:ac:4d:0f:e8:e2:4b:c0:3f:76:8b:3c:79:6f:7b:
         40:d4:0a:32:ee:94:69:f1:82:fd:d4:44:af:f6:b2:f9:35:b2:
         08:32:59:00:cb:10:6c:7f:23:b6:7a:6e:8b:83:44:c2:87:a7:
         06:eb:81:d4:52:0f:41:de:1a:b0:d5:97:b8:ec:b7:1d:71:31:
         8f:91:6b:f7:14:34:e7:47:bd:37:76:79:29:3a:78:ec:f2:30:
         ab:97:cd:0e:63:e7:e1:a6:2f:85:de:a8:c2:1c:d4:0a:7a:11:
         c9:c1:64:2f:da:09:45:8b:44:07:bf:f1:43:8a:f0:fc:dc:eb:
         12:25:94:63:f8:23:da:05:8a:18:ca:7a:ec:a2:b6:a3:be:03:
         cf:18:24:c5:84:9e:30:c5:e4:d2:48:49:17:47:9d:fa:b0:e3:
         57:56:45:e1:f8:8d:9b:81:7c:f3:0d:c5:dd:1d:90:40:3b:20:
         cf:2d:ea:60:12:62:19:46:91:6e:cf:98:c1:a1:87:4b:7a:22:
         79:69:c7:5f:43:66:97:f7:85:47:44:3b:c3:cd:c2:c0:af:75:
         d7:18:47:28:63:65:dc:bc:8c:e6:3e:93:53:45:9a:e1:ee:36:
         d6:a0:a8:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKuZC6VvAMdWlKaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NzJhNzkyY2MtMzU2Zi00ODVlLThlYzctZjU0M2Q3ZDAxMzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlyHgok/Li4yeoae7IeXytUdCCFJyWpp5+x2
xGw6/Ja7X4pyQU+vK8xgAQaX7R4zTJTnpmbYmppc3FwivBgzQr5QcSuwrQPKryYn
uUKRYqjL8qMe/MxV6RnkBT/53hr2kDlc4MWVC+RWzrYh4+vtPazYqEXhgH/WHG8z
xEL4OuF8nOv9x3OXxRChE6yhj68x+Eh5FaeUyA/gLmNO3qQQmdFeHZ2NqOCnZjXe
XFi2Nf2xysobAbaruccDuwe5H3/KC7jtJ8rDXZ1yJmkd407H9nWeC8SRc9hMd4st
17OWWFp/MzFaqQI8H/RDSe5NRpixlftYXI9MDwfPdr+qPX2QsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYKSouUglgkmzEG+xskVfaYL8+ZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTU2ZjU1OGEtZmJkOC0z
MTU1LTkwNGItZTNlMGI5YmU2MGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2rrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKSZCZSXqz2GqzrhNwE3d0Pz5NIpR6OsTQ/o4kvAP3aLPHlve0DUCjLu
lGnxgv3URK/2svk1sggyWQDLEGx/I7Z6bouDRMKHpwbrgdRSD0HeGrDVl7jstx1x
MY+Ra/cUNOdHvTd2eSk6eOzyMKuXzQ5j5+GmL4XeqMIc1Ap6EcnBZC/aCUWLRAe/
8UOK8Pzc6xIllGP4I9oFihjKeuyitqO+A88YJMWEnjDF5NJISRdHnfqw41dWReH4
jZuBfPMNxd0dkEA7IM8t6mASYhlGkW7PmMGhh0t6Inlpx19DZpf3hUdEO8PNwsCv
ddcYRyhjZdy8jOY+k1NFmuHuNtagqNc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:33 2024 by rpki-client on console-fra.rpki-client.org