Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5e1643e-962a-3b2c-881f-1d8cc83de847.roa
File:                     a5e1643e-962a-3b2c-881f-1d8cc83de847.roa (raw, json)
Hash identifier:          +COXEe1sSYCE7pYpdfwlAX5Zd0g5fkVQsoy6O5FlMuY=
Subject key identifier:   BA:5B:E8:24:C0:35:0A:07:A0:D2:1F:97:F8:63:BD:31:99:D1:2B:D3
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453D71D5A6BB9EA16A9BC400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5e1643e-962a-3b2c-881f-1d8cc83de847.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     40306
IP address blocks:        75.107.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:71:d5:a6:bb:9e:a1:6a:9b:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=0be64e43-114f-4da7-9303-1b9a9d0a4ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d2:9c:1c:59:42:52:fc:ad:44:82:da:2a:e6:
                    a0:a4:55:79:da:59:92:a3:f1:6e:ba:ce:ae:f9:ae:
                    a6:12:37:4b:25:ac:78:78:29:ee:44:2d:47:21:8f:
                    8e:13:83:28:09:8d:7b:73:d7:1d:8a:34:e4:53:79:
                    25:44:08:1f:de:a5:b0:4a:6e:37:de:e1:e0:0f:74:
                    cc:a8:a6:b1:0a:78:a2:fa:3b:90:ee:06:b6:29:b5:
                    38:9b:7a:2c:74:e6:44:98:09:9e:76:e3:ce:63:49:
                    2d:ff:7e:2f:1b:5b:60:bf:1a:17:68:18:9b:dd:2c:
                    2b:19:e3:23:ce:c2:96:8f:af:a5:ed:ea:76:26:09:
                    17:38:67:aa:de:0f:fd:90:dd:76:91:3d:20:5a:06:
                    5b:e7:b3:e9:36:fd:2a:b5:49:89:ab:a5:cf:91:3f:
                    c0:df:33:07:1d:80:60:94:0d:0c:d1:51:4b:45:5e:
                    7f:86:a1:11:2a:88:11:f8:78:96:e9:f5:66:cd:7b:
                    9d:fe:25:ee:a1:a9:1f:03:f0:0a:da:02:de:96:8c:
                    81:89:53:e9:bd:90:c5:93:09:64:60:34:85:3f:e9:
                    3e:bd:6c:1f:3a:ff:27:02:08:0b:42:ce:63:18:72:
                    92:12:ab:79:f3:8f:fe:1c:f5:3c:79:e6:6c:e8:90:
                    41:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5B:E8:24:C0:35:0A:07:A0:D2:1F:97:F8:63:BD:31:99:D1:2B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5e1643e-962a-3b2c-881f-1d8cc83de847.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:b9:89:76:a5:71:49:42:f7:35:8e:48:8d:42:26:d4:21:be:
         14:d7:27:1c:c3:6d:d2:19:a4:24:69:4b:6c:e7:65:e0:5f:63:
         13:57:46:77:6d:38:67:f7:92:02:a9:ad:33:30:48:d2:cd:f6:
         ac:50:e2:2b:be:ff:ac:f2:98:84:c0:5c:17:20:18:6d:a4:24:
         65:e9:73:c3:4c:30:8e:dd:ad:9a:f1:44:db:cd:4c:74:3d:d4:
         02:ec:28:f9:19:ea:d1:65:c8:bf:f6:b1:0c:12:7a:97:00:d0:
         d9:a8:90:d9:37:06:a6:5a:47:9f:82:68:53:6a:02:13:22:88:
         fd:7d:c8:e6:16:6e:27:58:99:87:c5:4c:f8:82:2a:e6:ce:41:
         5e:50:f7:32:fd:7b:b5:40:18:71:3d:a3:17:eb:7d:70:9f:0b:
         91:40:4d:0d:20:1e:70:6d:a2:cb:c0:f5:a0:90:01:dd:65:bd:
         54:58:f3:f4:a1:c2:9b:2f:40:2a:3c:3e:48:2b:ad:43:66:e0:
         eb:0e:9b:90:9d:f7:ee:45:b0:ae:e7:f9:a6:d4:b3:e8:e5:d2:
         47:e8:db:f9:ac:8c:b7:37:68:c3:d2:fc:3a:93:08:e0:0d:23:
         eb:28:e6:15:c1:c6:56:d0:eb:30:f2:50:2c:88:ec:92:5d:fa:
         a5:b1:98:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPXHVprueoWqbxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
MGJlNjRlNDMtMTE0Zi00ZGE3LTkzMDMtMWI5YTlkMGE0ZGVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtKcHFlCUvytRILaKuagpFV52lmSo/Fuus6u
+a6mEjdLJax4eCnuRC1HIY+OE4MoCY17c9cdijTkU3klRAgf3qWwSm433uHgD3TM
qKaxCnii+juQ7ga2KbU4m3osdOZEmAmeduPOY0kt/34vG1tgvxoXaBib3SwrGeMj
zsKWj6+l7ep2JgkXOGeq3g/9kN12kT0gWgZb57PpNv0qtUmJq6XPkT/A3zMHHYBg
lA0M0VFLRV5/hqERKogR+HiW6fVmzXud/iXuoakfA/AK2gLeloyBiVPpvZDFkwlk
YDSFP+k+vWwfOv8nAggLQs5jGHKSEqt584/+HPU8eeZs6JBBHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLpb6CTANQoHoNIfl/hjvTGZ0SvTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTVlMTY0M2UtOTYyYS0z
YjJjLTg4MWYtMWQ4Y2M4M2RlODQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2u5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI65iXalcUlC9zWOSI1CJtQhvhTXJxzDbdIZpCRpS2znZeBfYxNXRndt
OGf3kgKprTMwSNLN9qxQ4iu+/6zymITAXBcgGG2kJGXpc8NMMI7drZrxRNvNTHQ9
1ALsKPkZ6tFlyL/2sQwSepcA0NmokNk3BqZaR5+CaFNqAhMiiP19yOYWbidYmYfF
TPiCKubOQV5Q9zL9e7VAGHE9oxfrfXCfC5FATQ0gHnBtosvA9aCQAd1lvVRY8/Sh
wpsvQCo8PkgrrUNm4OsOm5Cd9+5FsK7n+abUs+jl0kfo2/msjLc3aMPS/DqTCOAN
I+so5hXBxlbQ6zDyUCyI7JJd+qWxmG8=
-----END CERTIFICATE-----
Generated at Sat Apr 27 17:55:40 2024 by rpki-client on console-ams.rpki-client.org