Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/807b83d3-27fc-317f-afb0-47174ac1f0f7.roa
File:                     807b83d3-27fc-317f-afb0-47174ac1f0f7.roa (raw, json)
Hash identifier:          fQY7udA/gIee+3EPCXXDO3uCrupwQgT28wHQ6O0x44s=
Subject key identifier:   17:A0:09:92:50:9B:74:03:F5:81:54:FF:40:F6:BB:DD:0C:B6:CF:DF
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581B12B0AE3AC048B1CFC80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/807b83d3-27fc-317f-afb0-47174ac1f0f7.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.106.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:b1:2b:0a:e3:ac:04:8b:1c:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=d618fd97-836b-4fc5-af07-7a9bdd85a143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3f:40:f3:63:b1:bb:ec:25:d8:4f:c5:8a:51:
                    c8:39:8d:51:3e:03:32:bd:70:1c:a1:b4:3b:88:16:
                    aa:f3:04:e6:46:91:93:ce:40:7e:fb:4d:fd:53:3a:
                    de:6e:6f:cb:23:07:5f:91:e9:5f:b6:43:38:6c:3f:
                    8f:56:12:37:55:0f:93:0d:b8:7b:83:84:fc:45:53:
                    6e:03:95:58:2b:6b:c5:6f:b2:2d:12:19:0e:44:bb:
                    dc:24:ac:ba:bd:19:21:35:cd:a1:77:de:e4:9e:1d:
                    9e:ae:4b:22:66:bc:e8:9f:4b:09:de:92:19:96:d5:
                    6d:b2:29:21:4c:9a:8e:56:1d:2b:9e:56:af:79:67:
                    07:65:3a:23:e8:da:ec:9e:40:1e:f4:5f:74:b6:ce:
                    b3:7c:d7:a6:67:55:07:79:41:4a:04:ca:e7:94:59:
                    6e:3d:d1:2c:3c:f5:26:a3:c1:05:08:44:54:d9:51:
                    06:8a:07:e2:93:56:09:b8:73:9e:a1:60:31:b6:48:
                    8a:38:55:49:c8:e7:fb:12:ea:c5:ed:ec:ac:bb:9d:
                    3c:27:d8:3c:85:82:74:db:f3:d8:e4:77:f0:e4:33:
                    ae:e0:21:73:4d:f7:8b:dc:0c:5e:76:4d:d7:04:14:
                    aa:0e:c1:cc:df:b5:7c:b8:98:35:9a:ad:b7:fc:07:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A0:09:92:50:9B:74:03:F5:81:54:FF:40:F6:BB:DD:0C:B6:CF:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/807b83d3-27fc-317f-afb0-47174ac1f0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:dc:73:66:c7:04:33:3d:c8:d1:3c:73:dd:75:f5:40:9e:
         ed:e8:a3:00:c5:b7:d4:80:68:6b:d9:10:67:a9:51:e7:93:eb:
         21:0b:da:5b:8a:d1:0d:af:c6:18:49:90:ec:13:23:63:fd:c4:
         a8:ca:26:f0:9f:3d:5e:e3:83:bb:b1:ba:db:b5:f3:f9:c4:4b:
         c1:f1:5f:d8:59:ad:83:e4:dd:fc:09:43:02:80:df:5a:06:fb:
         8f:21:bf:9f:38:14:13:d2:36:7d:21:b9:bb:d7:e9:8e:df:fd:
         34:83:01:0b:29:15:fa:95:85:f6:b0:65:5b:d6:a6:01:3f:63:
         cc:15:b2:24:f9:f2:c6:6b:fb:6d:a4:3b:85:bc:b8:e2:6b:62:
         74:3c:28:1b:b3:e3:68:c9:8d:44:02:c8:92:dc:c3:30:bf:c1:
         f1:20:54:51:62:07:48:f2:da:22:1b:a1:39:79:70:60:5f:86:
         eb:39:cf:2d:31:df:d2:72:9b:44:28:63:95:88:d2:cc:a5:96:
         b2:e1:2f:c7:35:6f:5b:9d:f1:af:9b:55:49:ed:69:cc:6a:f9:
         6b:61:5b:98:34:3d:2e:21:55:2b:de:47:e2:f2:17:de:d8:d5:
         cd:e2:03:dd:f7:29:8d:ca:95:48:8c:61:1b:4b:3b:38:5b:47:
         77:ba:f9:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgbErCuOsBIsc/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDYxOGZkOTctODM2Yi00ZmM1LWFmMDctN2E5YmRkODVhMTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj9A82Oxu+wl2E/FilHIOY1RPgMyvXAcobQ7
iBaq8wTmRpGTzkB++039Uzrebm/LIwdfkelftkM4bD+PVhI3VQ+TDbh7g4T8RVNu
A5VYK2vFb7ItEhkORLvcJKy6vRkhNc2hd97knh2erksiZrzon0sJ3pIZltVtsikh
TJqOVh0rnlaveWcHZToj6NrsnkAe9F90ts6zfNemZ1UHeUFKBMrnlFluPdEsPPUm
o8EFCERU2VEGigfik1YJuHOeoWAxtkiKOFVJyOf7EurF7eysu508J9g8hYJ02/PY
5Hfw5DOu4CFzTfeL3Axedk3XBBSqDsHM37V8uJg1mq23/AeJzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBegCZJQm3QD9YFU/0D2u90Mts/fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODA3YjgzZDMtMjdmYy0z
MTdmLWFmYjAtNDcxNzRhYzFmMGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2o6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJx73HNmxwQzPcjRPHPddfVAnu3oowDFt9SAaGvZEGepUeeT6yEL2luK
0Q2vxhhJkOwTI2P9xKjKJvCfPV7jg7uxutu18/nES8HxX9hZrYPk3fwJQwKA31oG
+48hv584FBPSNn0hubvX6Y7f/TSDAQspFfqVhfawZVvWpgE/Y8wVsiT58sZr+22k
O4W8uOJrYnQ8KBuz42jJjUQCyJLcwzC/wfEgVFFiB0jy2iIboTl5cGBfhus5zy0x
39Jym0QoY5WI0syllrLhL8c1b1ud8a+bVUntacxq+WthW5g0PS4hVSveR+LyF97Y
1c3iA933KY3KlUiMYRtLOzhbR3e6+Yk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:23 2025 by rpki-client