Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85d17248-5bb5-3e4c-b619-2d3e9eb63124.roa
File:                     85d17248-5bb5-3e4c-b619-2d3e9eb63124.roa (raw, json)
Hash identifier:          2D1WYlk/UJ7pRrhk/u6Q801XTCopw9qgB/GsNb1PksI=
Subject key identifier:   82:53:37:93:F1:3D:1B:50:AF:E6:FF:2C:F3:0E:D9:67:37:01:51:22
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5812269D7DD09FEA7B27500
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85d17248-5bb5-3e4c-b619-2d3e9eb63124.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.106.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:22:69:d7:dd:09:fe:a7:b2:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=d174eb4d-e47b-4750-991c-30835c75606c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:63:08:43:89:08:c7:13:0b:02:f0:3e:81:
                    6b:f2:94:28:15:49:e1:86:da:be:d4:c0:a6:34:b1:
                    d4:31:d1:84:5b:ba:36:a0:b7:c0:47:87:c1:97:61:
                    c5:a1:1c:c0:b4:54:c8:eb:13:26:cb:37:3d:79:2d:
                    7f:3e:46:fb:03:1c:26:8e:63:d1:ba:c3:c2:1a:38:
                    65:3c:38:fc:15:61:27:23:ad:1c:81:64:d3:82:ef:
                    69:e3:a1:17:c8:3e:f0:a3:6f:99:31:7e:25:07:d6:
                    8b:3e:cb:75:a9:a8:bd:1c:1e:db:37:54:d2:a9:19:
                    ef:5b:d9:f5:bc:6c:a1:7d:7b:a1:c6:28:a7:7d:f6:
                    35:3e:f1:80:ae:c8:71:c3:b8:f2:fa:4d:4b:61:40:
                    5d:f5:1d:4b:41:6d:0f:92:0e:45:e4:e7:c0:41:12:
                    a2:c0:4c:6f:f2:d3:54:3c:ee:44:91:9a:e0:0b:64:
                    26:fd:3c:73:e7:71:8f:92:9b:a9:b8:62:a2:33:bf:
                    7a:b2:ba:e2:79:b2:88:ce:de:8b:4c:78:ea:bd:71:
                    c3:d6:c6:f1:ed:0d:6c:91:13:1b:b4:b0:4b:d6:db:
                    7e:e3:0f:0e:64:1d:3b:14:63:1c:d6:52:d6:29:69:
                    e8:03:d1:4b:35:55:bc:59:47:03:42:3f:58:fe:66:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:53:37:93:F1:3D:1B:50:AF:E6:FF:2C:F3:0E:D9:67:37:01:51:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/85d17248-5bb5-3e4c-b619-2d3e9eb63124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.106.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:47:c7:c8:a1:39:3f:cb:6c:dd:03:58:df:9b:96:8f:ae:47:
         39:6e:07:39:93:57:bf:9d:dc:e1:c1:53:1b:27:bb:8b:06:13:
         0b:90:27:d1:b6:3e:7d:98:77:47:0b:13:d9:58:4b:b3:d8:b0:
         13:41:10:5f:85:bb:91:f2:b3:57:b3:f1:96:ff:62:6c:d2:a3:
         11:a2:f8:67:23:b3:c4:f4:a4:eb:f9:92:9c:2a:23:3b:dc:92:
         e2:25:56:0e:91:57:eb:04:64:a2:90:ed:25:7c:e0:1d:63:34:
         df:77:c4:7b:f0:a0:30:b4:ce:d1:b8:f1:44:fe:a2:c2:18:8b:
         13:df:72:01:a2:3e:40:2c:10:fd:dd:2b:2d:bd:ca:08:b8:da:
         74:53:bf:10:b1:20:1f:cf:46:e3:2a:8b:a5:b7:d8:a2:c9:f4:
         a2:df:70:75:1d:9e:4e:4e:ed:f0:41:e2:23:21:31:27:14:70:
         4a:b8:00:3f:31:32:5a:89:e4:a2:ef:8b:ef:1b:26:e9:f8:c1:
         40:a7:94:fd:2c:22:0f:0e:17:96:a0:da:d1:1c:70:a4:c9:9c:
         1f:e8:ed:3f:6d:0e:4d:b4:ae:a1:54:cc:99:d9:68:e0:60:96:
         4e:88:92:a5:fd:d2:9e:e7:30:af:9d:ac:66:8b:b2:ba:23:39:
         da:e2:b2:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgSJp190J/qeydQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDE3NGViNGQtZTQ3Yi00NzUwLTk5MWMtMzA4MzVjNzU2MDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7RjCEOJCMcTCwLwPoFr8pQoFUnhhtq+1MCm
NLHUMdGEW7o2oLfAR4fBl2HFoRzAtFTI6xMmyzc9eS1/Pkb7AxwmjmPRusPCGjhl
PDj8FWEnI60cgWTTgu9p46EXyD7wo2+ZMX4lB9aLPst1qai9HB7bN1TSqRnvW9n1
vGyhfXuhxiinffY1PvGArshxw7jy+k1LYUBd9R1LQW0Pkg5F5OfAQRKiwExv8tNU
PO5EkZrgC2Qm/Txz53GPkpupuGKiM796srriebKIzt6LTHjqvXHD1sbx7Q1skRMb
tLBL1tt+4w8OZB07FGMc1lLWKWnoA9FLNVW8WUcDQj9Y/mZipQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIJTN5PxPRtQr+b/LPMO2Wc3AVEiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODVkMTcyNDgtNWJiNS0z
ZTRjLWI2MTktMmQzZTllYjYzMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2onMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALJHx8ihOT/LbN0DWN+blo+uRzluBzmTV7+d3OHBUxsnu4sGEwuQJ9G2
Pn2Yd0cLE9lYS7PYsBNBEF+Fu5Hys1ez8Zb/YmzSoxGi+Gcjs8T0pOv5kpwqIzvc
kuIlVg6RV+sEZKKQ7SV84B1jNN93xHvwoDC0ztG48UT+osIYixPfcgGiPkAsEP3d
Ky29ygi42nRTvxCxIB/PRuMqi6W32KLJ9KLfcHUdnk5O7fBB4iMhMScUcEq4AD8x
MlqJ5KLvi+8bJun4wUCnlP0sIg8OF5ag2tEccKTJnB/o7T9tDk20rqFUzJnZaOBg
lk6IkqX90p7nMK+drGaLsrojOdrisvM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:14 2025 by rpki-client