Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a75f8fc-241e-3648-a6c1-be8918d91ef3.roa
File:                     5a75f8fc-241e-3648-a6c1-be8918d91ef3.roa (raw, json)
Hash identifier:          Hl7dnHjvWBzcUqPxeDmJO4cguH9uthHCnhHbwAQ5w5Q=
Subject key identifier:   66:73:D0:CD:11:FE:3A:C7:EF:83:CD:74:BE:27:C2:C4:41:2B:93:E1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5811EFBA32EBC63B0BC7D00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a75f8fc-241e-3648-a6c1-be8918d91ef3.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.105.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:1e:fb:a3:2e:bc:63:b0:bc:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=57703617-e529-4adb-b169-c840ac542d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f6:e4:ab:1f:cd:b0:88:35:e2:c1:82:c5:43:
                    9a:c2:7f:94:85:ee:8a:b4:ad:da:c5:bc:13:76:bd:
                    e2:cb:4a:ab:6b:75:00:9b:ad:b8:cf:18:7c:ed:f4:
                    04:e3:39:02:c6:05:9a:0a:5d:2c:5e:26:04:ca:74:
                    25:f7:96:af:ca:2b:c9:b7:37:df:3a:4d:e5:99:c3:
                    64:a7:be:7f:86:4e:1c:0d:1e:a4:19:52:4a:52:51:
                    ee:4d:b1:e9:58:f2:7e:f3:72:27:6e:d8:c1:c2:47:
                    37:26:cb:fb:da:9b:69:c8:fa:4c:f1:f6:7e:43:10:
                    c6:d9:1b:3e:6b:da:70:06:42:4b:6e:a2:63:ec:7e:
                    05:8f:22:75:d1:bd:71:72:45:d0:70:b7:18:67:b6:
                    59:c5:da:9b:c4:0b:17:98:49:49:e5:17:4b:92:62:
                    d4:78:95:a2:f7:25:3c:2b:cd:6e:d3:3d:9c:4f:c5:
                    09:e3:37:6e:b8:d0:23:77:24:2d:1e:05:52:03:da:
                    96:ba:db:07:3e:6d:bb:95:a4:52:7b:f2:d3:f8:6e:
                    8b:cf:cc:89:25:55:08:ea:46:19:f2:b8:cf:1b:38:
                    23:91:39:71:fb:0a:24:4a:9d:d0:82:e7:17:60:68:
                    44:f7:a5:88:f8:6d:b9:e1:ec:9d:cc:02:b8:c1:0b:
                    a9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:73:D0:CD:11:FE:3A:C7:EF:83:CD:74:BE:27:C2:C4:41:2B:93:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a75f8fc-241e-3648-a6c1-be8918d91ef3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:99:b0:41:ad:77:53:ad:e5:b8:d2:78:31:13:12:70:85:84:
         f0:a2:b2:20:89:73:2e:5f:5e:5f:2b:75:30:60:8d:41:cd:8b:
         eb:c0:a1:5a:f3:8b:3f:89:95:6d:10:09:f4:ab:6b:38:9a:61:
         68:c2:37:60:68:77:e8:04:e8:2c:5f:87:d5:cc:be:04:9e:13:
         37:3a:3f:32:2d:21:47:2d:4c:55:4b:dc:f9:90:d0:68:50:a8:
         0b:92:bc:46:94:43:1d:b5:2d:b8:8a:7d:f6:d3:e5:6d:08:7b:
         be:a6:9f:50:4f:c5:42:13:76:ed:0e:3c:24:4a:76:43:2f:c2:
         b3:cf:4d:ea:d6:50:f3:4e:6e:9a:4c:83:2a:da:12:80:98:b1:
         11:8d:63:a9:e0:e3:0b:14:56:71:b1:96:c3:1d:bd:19:36:db:
         94:ae:56:77:6e:59:db:cb:17:03:40:fb:0c:c3:38:91:d3:1b:
         0a:59:1c:18:28:93:a3:a3:09:7a:79:17:08:c8:37:37:82:0b:
         58:07:81:69:7c:60:42:5a:38:ac:3e:a9:68:c8:e2:93:b5:30:
         29:17:ff:f2:0d:e6:c7:98:ac:21:4c:c1:8d:f1:03:77:8b:49:
         0e:32:b7:4e:47:73:82:c8:9c:03:a8:7b:f2:84:de:c2:2a:b5:
         9b:0c:51:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgR77oy68Y7C8fQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
NTc3MDM2MTctZTUyOS00YWRiLWIxNjktYzg0MGFjNTQyZDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPbkqx/NsIg14sGCxUOawn+Uhe6KtK3axbwT
dr3iy0qra3UAm624zxh87fQE4zkCxgWaCl0sXiYEynQl95avyivJtzffOk3lmcNk
p75/hk4cDR6kGVJKUlHuTbHpWPJ+83InbtjBwkc3Jsv72ptpyPpM8fZ+QxDG2Rs+
a9pwBkJLbqJj7H4FjyJ10b1xckXQcLcYZ7ZZxdqbxAsXmElJ5RdLkmLUeJWi9yU8
K81u0z2cT8UJ4zduuNAjdyQtHgVSA9qWutsHPm27laRSe/LT+G6Lz8yJJVUI6kYZ
8rjPGzgjkTlx+wokSp3QgucXYGhE96WI+G254eydzAK4wQuphQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGZz0M0R/jrH74PNdL4nwsRBK5PhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWE3NWY4ZmMtMjQxZS0z
NjQ4LWE2YzEtYmU4OTE4ZDkxZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2nZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGyZsEGtd1Ot5bjSeDETEnCFhPCisiCJcy5fXl8rdTBgjUHNi+vAoVrz
iz+JlW0QCfSraziaYWjCN2Bod+gE6Cxfh9XMvgSeEzc6PzItIUctTFVL3PmQ0GhQ
qAuSvEaUQx21LbiKffbT5W0Ie76mn1BPxUITdu0OPCRKdkMvwrPPTerWUPNObppM
gyraEoCYsRGNY6ng4wsUVnGxlsMdvRk225SuVnduWdvLFwNA+wzDOJHTGwpZHBgo
k6OjCXp5FwjINzeCC1gHgWl8YEJaOKw+qWjI4pO1MCkX//IN5seYrCFMwY3xA3eL
SQ4yt05Hc4LInAOoe/KE3sIqtZsMUSE=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:08:25 2025 by rpki-client