Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98e996b1-d96f-3cbe-8060-604a85dd57de.roa
File:                     98e996b1-d96f-3cbe-8060-604a85dd57de.roa (raw, json)
Hash identifier:          ePHjkiYD1BUuUY4M86Txk13fWTJ60O67KXRpctdyc0E=
Subject key identifier:   52:BE:92:5A:25:CA:DB:46:E6:47:F4:8E:43:A9:66:8D:CB:98:08:72
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DA7388E8C636B2C3D7780
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98e996b1-d96f-3cbe-8060-604a85dd57de.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.107.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:a7:38:8e:8c:63:6b:2c:3d:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=10c7d218-0361-4f8a-8713-6c08372ac91b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e4:55:73:31:82:83:54:5e:be:17:3a:7c:e5:
                    1a:cb:8f:56:4c:60:29:45:8f:68:21:86:98:19:6d:
                    28:3d:b7:1d:9e:32:f8:37:2d:37:14:30:1b:df:f9:
                    03:14:41:0e:b9:21:d2:9c:fa:0c:37:1a:b2:8a:49:
                    23:42:9e:ef:4b:43:5b:25:1a:15:5d:91:99:a9:f8:
                    c6:1b:eb:43:27:c8:60:6c:43:bf:a2:b0:08:ec:01:
                    32:e4:53:40:32:8c:e6:34:a5:12:19:8b:ac:b5:0f:
                    6c:71:42:c2:ee:65:96:dc:a1:0f:f0:4b:02:10:8b:
                    77:4d:07:f9:1c:f8:a2:43:1f:fb:c1:d0:66:4f:22:
                    00:ae:48:f9:17:32:57:17:dd:f4:ce:77:7b:b8:ce:
                    e4:39:3d:4b:9a:86:42:94:26:fc:b2:9e:ea:82:e7:
                    85:80:2a:84:bd:20:c7:d5:58:e1:19:70:2f:a0:24:
                    d2:a8:d7:2c:42:e2:98:9e:59:34:52:c0:99:ae:e5:
                    96:5d:25:58:21:be:b6:cf:fc:97:fb:f9:04:49:bd:
                    16:5f:96:6e:c3:78:0e:2b:15:d1:a9:52:7d:1e:ac:
                    99:c9:8f:9a:a9:2b:4b:9b:3b:9e:0f:dd:2d:53:3c:
                    32:a9:43:c9:1a:0e:e5:b3:a4:2e:46:95:f4:0f:37:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BE:92:5A:25:CA:DB:46:E6:47:F4:8E:43:A9:66:8D:CB:98:08:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98e996b1-d96f-3cbe-8060-604a85dd57de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:36:ff:a5:f0:30:5d:6c:55:81:35:a2:91:dc:b1:17:96:25:
         bc:36:7b:75:70:dc:27:3d:ba:d4:c5:8b:04:a6:8b:c6:ff:57:
         03:ec:55:17:03:c2:6e:aa:50:83:99:a1:a3:02:3b:a4:bf:0d:
         79:c7:87:e2:f2:d4:d5:0a:b2:fa:59:f6:8f:4e:9e:8c:76:69:
         41:c8:41:44:52:fe:dd:e4:57:ff:59:3b:87:ac:14:03:ba:d5:
         7d:4a:e1:85:25:e0:a8:8f:c3:2d:2d:14:d2:57:ee:cb:10:16:
         c1:65:5a:05:57:2a:73:89:32:39:56:50:64:b1:4f:e2:84:16:
         d1:89:d4:5b:45:87:89:71:b4:53:26:3f:52:7c:0a:58:08:af:
         b9:25:75:b3:87:da:42:3b:d3:af:59:a0:0c:c1:6b:98:0b:02:
         18:ac:9c:24:6c:0e:53:ea:ce:aa:ec:c7:01:37:d7:e5:7f:ff:
         34:35:ba:8d:88:a3:6e:f2:cf:ce:29:4c:a8:ec:b6:ec:96:13:
         e3:cf:62:f0:32:c7:81:de:2b:51:3d:d0:39:8c:b2:a2:42:7e:
         ec:ef:1e:b7:08:c7:8f:cb:d0:68:63:50:f5:17:8c:5c:59:0c:
         21:32:dc:b1:a9:39:b1:c9:8a:f4:51:22:92:c0:fe:56:6d:7f:
         50:1d:4e:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPac4joxjayw9d4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
MTBjN2QyMTgtMDM2MS00ZjhhLTg3MTMtNmMwODM3MmFjOTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeRVczGCg1Revhc6fOUay49WTGApRY9oIYaY
GW0oPbcdnjL4Ny03FDAb3/kDFEEOuSHSnPoMNxqyikkjQp7vS0NbJRoVXZGZqfjG
G+tDJ8hgbEO/orAI7AEy5FNAMozmNKUSGYustQ9scULC7mWW3KEP8EsCEIt3TQf5
HPiiQx/7wdBmTyIArkj5FzJXF930znd7uM7kOT1LmoZClCb8sp7qgueFgCqEvSDH
1VjhGXAvoCTSqNcsQuKYnlk0UsCZruWWXSVYIb62z/yX+/kESb0WX5Zuw3gOKxXR
qVJ9HqyZyY+aqStLmzueD90tUzwyqUPJGg7ls6QuRpX0DzdB1wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFK+klolyttG5kf0jkOpZo3LmAhyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOThlOTk2YjEtZDk2Zi0z
Y2JlLTgwNjAtNjA0YTg1ZGQ1N2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2tjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGk2/6XwMF1sVYE1opHcsReWJbw2e3Vw3Cc9utTFiwSmi8b/VwPsVRcD
wm6qUIOZoaMCO6S/DXnHh+Ly1NUKsvpZ9o9Onox2aUHIQURS/t3kV/9ZO4esFAO6
1X1K4YUl4KiPwy0tFNJX7ssQFsFlWgVXKnOJMjlWUGSxT+KEFtGJ1FtFh4lxtFMm
P1J8ClgIr7kldbOH2kI7069ZoAzBa5gLAhisnCRsDlPqzqrsxwE31+V//zQ1uo2I
o27yz84pTKjstuyWE+PPYvAyx4HeK1E90DmMsqJCfuzvHrcIx4/L0GhjUPUXjFxZ
DCEy3LGpObHJivRRIpLA/lZtf1AdTiY=
-----END CERTIFICATE-----
Generated at Sun Apr 28 00:51:16 2024 by rpki-client on console-ams.rpki-client.org