Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68313c97-ccc7-3f72-b4dc-734bebf95bb0.roa
File:                     68313c97-ccc7-3f72-b4dc-734bebf95bb0.roa (raw, json)
Hash identifier:          cQTgm46YcnLA0+HcQ+sfEMehcTqFLQ1sXWHb1ymutxY=
Subject key identifier:   72:DC:04:77:14:54:F4:B2:37:B9:B5:2E:74:60:A8:0A:62:D0:FB:65
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62AE9BB6C52D0F68EBE6660
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68313c97-ccc7-3f72-b4dc-734bebf95bb0.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.107.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:e9:bb:6c:52:d0:f6:8e:be:66:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=5365a16a-9291-4b85-abde-808a6285958d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9a:30:d5:2a:53:7a:c8:87:0c:4b:c2:22:be:
                    14:0d:06:06:24:0f:c8:11:40:bd:09:56:5d:63:49:
                    6f:c8:31:2b:b6:70:33:82:f7:57:97:57:1c:45:cd:
                    10:0b:e8:d3:45:12:0f:7b:d8:df:45:f1:ef:db:3e:
                    e7:a2:a4:61:4f:d7:41:60:5e:c4:bd:1b:cf:46:c0:
                    f7:fb:e9:0c:7c:a8:50:a1:d6:86:14:c6:65:fc:51:
                    ce:05:67:02:d6:03:8f:27:d7:4a:c9:c3:88:82:7e:
                    86:0e:02:11:49:86:01:a3:68:ee:0c:7d:d5:cc:5e:
                    54:8e:7d:76:b3:6e:49:9b:aa:e9:43:14:63:ac:da:
                    03:d1:52:4f:7a:21:84:e2:16:22:81:ee:b6:52:6c:
                    b1:25:1b:72:48:97:1f:9f:fb:31:06:7e:31:5f:75:
                    a2:80:12:ac:bd:dc:07:51:02:bc:73:96:ed:de:8a:
                    d2:25:52:fd:a1:2a:36:0a:16:a9:28:a7:44:61:84:
                    f5:75:80:62:c1:c4:f9:08:2f:c7:15:15:d8:0b:ac:
                    f7:16:46:40:a3:50:c6:6d:9e:1a:93:ab:a9:c6:68:
                    06:73:c9:4d:bd:64:e9:11:53:c4:c2:9a:74:51:46:
                    21:ed:56:f9:3d:be:0d:86:55:24:96:a5:3a:47:35:
                    c8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DC:04:77:14:54:F4:B2:37:B9:B5:2E:74:60:A8:0A:62:D0:FB:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68313c97-ccc7-3f72-b4dc-734bebf95bb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f5:45:75:c6:a1:d8:71:e6:e2:fb:08:75:34:ab:2c:18:cb:
         c1:66:92:0e:c3:52:56:3b:05:12:57:df:92:04:39:e1:48:bb:
         9a:52:01:6c:1f:37:55:17:60:4f:d7:70:78:8a:da:69:06:24:
         3f:3d:5d:1a:af:eb:55:8e:e0:1b:85:c3:a0:3f:42:cb:e1:0b:
         59:5c:fa:25:bb:6f:74:17:d0:44:f9:5c:82:04:cb:fd:c0:d6:
         97:56:64:5d:33:1c:e6:f9:f3:64:85:b0:0b:57:10:59:25:ac:
         a0:5f:2d:f2:d8:c6:bb:cc:78:32:38:af:2b:d3:44:e8:2e:ac:
         ac:44:50:0a:a6:8e:53:c1:6a:c5:94:31:38:a6:32:26:c0:6f:
         3d:54:a1:df:8b:b5:49:74:87:ac:8f:cf:38:a0:3b:3e:7a:3c:
         31:38:8c:33:3e:57:b7:1e:09:13:e2:71:71:dc:6f:b8:7f:10:
         d9:1c:d4:ec:09:12:54:d4:98:19:30:cb:03:07:37:07:c6:0b:
         07:7e:8a:e0:43:ba:17:ac:76:3c:7c:16:68:2b:a5:fa:10:20:
         0b:49:05:4d:df:e6:31:6b:f6:22:c7:10:f4:2f:78:02:17:c5:
         42:de:70:ed:ae:26:a4:7b:0f:10:77:eb:19:72:55:c4:56:24:
         f1:95:d8:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKum7bFLQ9o6+ZmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NTM2NWExNmEtOTI5MS00Yjg1LWFiZGUtODA4YTYyODU5NThkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZow1SpTesiHDEvCIr4UDQYGJA/IEUC9CVZd
Y0lvyDErtnAzgvdXl1ccRc0QC+jTRRIPe9jfRfHv2z7noqRhT9dBYF7EvRvPRsD3
++kMfKhQodaGFMZl/FHOBWcC1gOPJ9dKycOIgn6GDgIRSYYBo2juDH3VzF5Ujn12
s25Jm6rpQxRjrNoD0VJPeiGE4hYige62UmyxJRtySJcfn/sxBn4xX3WigBKsvdwH
UQK8c5bt3orSJVL9oSo2ChapKKdEYYT1dYBiwcT5CC/HFRXYC6z3FkZAo1DGbZ4a
k6upxmgGc8lNvWTpEVPEwpp0UUYh7Vb5Pb4NhlUklqU6RzXI+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHLcBHcUVPSyN7m1LnRgqApi0PtlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjgzMTNjOTctY2NjNy0z
ZjcyLWI0ZGMtNzM0YmViZjk1YmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2twMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHz1RXXGodhx5uL7CHU0qywYy8Fmkg7DUlY7BRJX35IEOeFIu5pSAWwf
N1UXYE/XcHiK2mkGJD89XRqv61WO4BuFw6A/QsvhC1lc+iW7b3QX0ET5XIIEy/3A
1pdWZF0zHOb582SFsAtXEFklrKBfLfLYxrvMeDI4ryvTROgurKxEUAqmjlPBasWU
MTimMibAbz1Uod+LtUl0h6yPzzigOz56PDE4jDM+V7ceCRPicXHcb7h/ENkc1OwJ
ElTUmBkwywMHNwfGCwd+iuBDuhesdjx8FmgrpfoQIAtJBU3f5jFr9iLHEPQveAIX
xULecO2uJqR7DxB36xlyVcRWJPGV2BE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:11:41 2024 by rpki-client on console-fra.rpki-client.org