Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5cd01525-05e2-3f19-ba84-1337ba8d0008.roa
File:                     5cd01525-05e2-3f19-ba84-1337ba8d0008.roa (raw, json)
Hash identifier:          Ewq8bE8sBdys/sA3OkqeFm2BhgQ70dD6apRzA6VVe3o=
Subject key identifier:   CA:98:A3:2A:D7:F3:4A:C7:BD:B5:E6:B4:AF:A4:38:F7:34:27:A2:DA
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E110B7F6B111A91E1EBC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5cd01525-05e2-3f19-ba84-1337ba8d0008.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.105.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:11:0b:7f:6b:11:1a:91:e1:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=ec94caf7-c9e0-4065-b18d-ffa1d159a5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:13:ab:2c:8e:49:2f:b5:34:75:57:4f:f6:
                    82:29:12:e3:bd:b4:e5:dd:fc:f2:28:b9:bb:ca:cc:
                    02:14:74:29:b1:a0:14:28:80:ab:40:e7:0b:01:6c:
                    c9:b6:ff:55:37:a7:43:86:02:f0:b3:f8:3a:39:92:
                    3e:a5:48:76:88:8d:af:27:05:1b:3e:0b:2a:ff:1e:
                    ef:ec:2c:f8:16:86:a5:f4:15:0c:98:e6:19:3a:78:
                    fd:34:f6:a9:e8:af:8e:18:54:0d:ee:ff:7f:16:61:
                    61:1b:fc:80:59:2e:78:50:35:bc:17:45:30:27:01:
                    97:83:3f:c0:03:1b:75:a9:9c:a6:74:f7:3c:9f:73:
                    c1:27:ad:9b:7b:03:3f:a9:6e:0e:2c:33:5b:2f:52:
                    64:d3:93:61:f3:47:be:54:41:f8:48:bf:e6:58:6f:
                    20:99:43:24:04:eb:1a:30:8d:b4:27:80:06:66:9a:
                    2d:f3:e4:2f:14:a9:46:67:46:b6:c8:c4:7b:07:35:
                    ef:3e:26:9f:3f:8d:4c:80:66:df:25:c8:38:9f:13:
                    da:77:01:93:0b:fd:fa:c0:15:06:b1:58:92:c1:ca:
                    a3:0f:cf:dd:67:e3:19:e1:6b:b2:4e:07:95:5f:b8:
                    74:7b:0a:87:86:65:45:89:2b:f2:ce:08:c9:f4:4e:
                    61:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:98:A3:2A:D7:F3:4A:C7:BD:B5:E6:B4:AF:A4:38:F7:34:27:A2:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5cd01525-05e2-3f19-ba84-1337ba8d0008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b1:83:1a:f7:17:96:0d:de:0d:87:a6:3b:04:29:86:1c:01:
         18:d6:bd:13:1d:c8:99:f2:ca:87:e2:92:9a:c9:af:b8:f5:30:
         29:b7:79:b6:a9:44:2c:1d:2f:6c:ff:cf:ff:bb:ab:d5:52:19:
         ac:88:34:0e:cf:52:28:76:06:e1:04:d1:57:2b:7c:8e:a0:f7:
         91:ba:47:69:b3:78:0a:d3:f1:ee:c9:fa:51:aa:f1:3b:30:54:
         13:39:b0:7c:2d:f6:46:b4:94:f7:e4:03:27:60:89:43:4b:b1:
         3d:b2:73:00:47:8b:78:02:a1:7a:96:31:07:9e:db:09:13:c8:
         cb:fc:dd:32:a5:57:14:a8:89:f6:ff:95:c1:b4:0c:01:67:34:
         6c:af:47:1a:0f:10:10:9c:ea:7f:d0:6d:78:84:0e:8c:e8:7d:
         3a:5d:01:ae:36:36:a4:fe:d0:86:62:ac:cd:5d:57:6c:75:7b:
         9e:a2:c6:f4:79:e9:79:ee:ba:3d:57:c2:c9:10:36:a9:cc:8c:
         3e:96:07:99:37:23:cc:ce:92:60:ea:74:d0:a9:15:ee:ec:fb:
         a2:65:3d:07:88:ab:b3:3d:f1:eb:06:20:e0:be:46:a9:9f:5f:
         76:88:1c:48:f1:89:f1:b6:74:a5:97:1b:c1:46:5d:d5:6c:59:
         3d:16:4b:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPhELf2sRGpHh68AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
ZWM5NGNhZjctYzllMC00MDY1LWIxOGQtZmZhMWQxNTlhNWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq34TqyyOSS+1NHVXT/aCKRLjvbTl3fzyKLm7
yswCFHQpsaAUKICrQOcLAWzJtv9VN6dDhgLws/g6OZI+pUh2iI2vJwUbPgsq/x7v
7Cz4Foal9BUMmOYZOnj9NPap6K+OGFQN7v9/FmFhG/yAWS54UDW8F0UwJwGXgz/A
Axt1qZymdPc8n3PBJ62bewM/qW4OLDNbL1Jk05Nh80e+VEH4SL/mWG8gmUMkBOsa
MI20J4AGZpot8+QvFKlGZ0a2yMR7BzXvPiafP41MgGbfJcg4nxPadwGTC/36wBUG
sViSwcqjD8/dZ+MZ4WuyTgeVX7h0ewqHhmVFiSvyzgjJ9E5hKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMqYoyrX80rHvbXmtK+kOPc0J6LaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWNkMDE1MjUtMDVlMi0z
ZjE5LWJhODQtMTMzN2JhOGQwMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2ltMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGxgxr3F5YN3g2HpjsEKYYcARjWvRMdyJnyyofikprJr7j1MCm3ebap
RCwdL2z/z/+7q9VSGayINA7PUih2BuEE0VcrfI6g95G6R2mzeArT8e7J+lGq8Tsw
VBM5sHwt9ka0lPfkAydgiUNLsT2ycwBHi3gCoXqWMQee2wkTyMv83TKlVxSoifb/
lcG0DAFnNGyvRxoPEBCc6n/QbXiEDozofTpdAa42NqT+0IZirM1dV2x1e56ixvR5
6Xnuuj1XwskQNqnMjD6WB5k3I8zOkmDqdNCpFe7s+6JlPQeIq7M98esGIOC+Rqmf
X3aIHEjxifG2dKWXG8FGXdVsWT0WS8I=
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org