Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaefc255-337e-3b55-942b-04eed10e28f4.roa
File:                     aaefc255-337e-3b55-942b-04eed10e28f4.roa (raw, json)
Hash identifier:          JTCpZ1maDPah/pUSVo8+ZWGLUVPUHfTn/AJJaqzx9t8=
Subject key identifier:   D2:70:4C:81:46:F7:92:CB:DA:13:4B:04:7D:EE:35:2D:12:87:36:B1
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E06912CF928BBE89B6300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaefc255-337e-3b55-942b-04eed10e28f4.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.104.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:06:91:2c:f9:28:bb:e8:9b:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=b1d1d87c-f163-4515-989c-9d5deccd31c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:33:54:f9:f1:8f:cd:ac:65:cc:35:55:71:7a:
                    00:f7:a1:d0:e2:6f:42:cc:34:7a:71:b8:6f:f1:90:
                    5b:64:98:14:74:19:48:e5:23:71:90:b9:4a:3f:0f:
                    6f:a2:53:29:98:a7:57:95:49:69:86:29:1f:3e:fe:
                    06:92:97:e3:05:12:8c:02:d2:18:79:83:05:bb:d8:
                    82:b4:50:53:29:11:a8:64:90:b8:13:18:6f:99:3a:
                    32:6d:7b:46:9e:a0:c8:12:69:5a:59:05:20:86:6d:
                    77:df:b1:9e:ca:75:9a:a6:38:72:49:e3:42:ff:96:
                    06:73:1e:db:cc:87:dd:d3:e8:14:b5:2f:c6:a8:43:
                    a3:08:b3:85:10:f1:8f:a8:33:72:a6:61:f4:09:d0:
                    42:6f:26:cb:be:75:1f:31:9f:ec:bf:1d:b7:b4:92:
                    c9:11:75:57:7e:67:f4:fb:cf:a4:ed:eb:d8:b4:3a:
                    cc:49:80:53:ba:06:0b:8b:2d:30:aa:c6:19:d0:cb:
                    16:12:fa:84:d7:c0:83:85:df:6a:75:21:e3:6d:1f:
                    0b:a2:54:ab:3b:ed:e3:aa:c6:76:31:73:a1:71:f3:
                    4a:9b:f0:46:91:c8:d3:89:15:2a:e9:6f:04:fb:75:
                    a2:81:2e:72:bb:4c:ec:7e:85:10:b9:d2:d3:07:7a:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:70:4C:81:46:F7:92:CB:DA:13:4B:04:7D:EE:35:2D:12:87:36:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaefc255-337e-3b55-942b-04eed10e28f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:fd:4a:08:84:7a:ac:c7:3f:7c:9c:bc:a8:18:ae:d5:99:e2:
         91:43:97:6b:fd:b3:f8:c4:ef:e4:df:de:1c:89:7c:47:c5:dd:
         4c:be:01:c8:67:b3:60:56:aa:d1:5a:59:d6:95:e8:f9:c4:8f:
         9a:36:f2:56:8d:47:3d:15:aa:1c:d8:7f:61:85:39:da:41:2d:
         d0:8e:5f:8e:08:08:e0:75:52:65:eb:03:89:b1:35:68:16:37:
         fb:10:fd:7b:c4:fc:52:2f:7a:97:5a:58:c8:16:e2:1a:e7:cf:
         35:40:85:af:79:29:20:39:eb:0f:fb:7f:eb:bd:5d:f7:82:b4:
         b1:54:bc:0b:fa:50:e0:f6:ab:c3:76:32:eb:fa:ec:ca:7f:d6:
         bf:1b:df:09:b0:d9:93:a3:c9:41:d5:1a:ff:bc:1e:d7:05:b0:
         5f:d2:89:30:e8:20:7b:e4:5f:eb:73:b2:98:ae:c7:ec:48:c7:
         ac:d8:b2:70:5d:2a:cc:f9:46:df:f9:b6:8b:75:e7:63:af:9d:
         3b:94:e9:41:e0:2e:f5:15:b0:9e:0f:62:54:a6:25:4b:6b:5e:
         d0:47:e6:2f:f8:a1:03:b6:6f:70:9b:a6:7c:15:3a:9a:ce:4d:
         87:42:26:10:b8:c6:4b:f1:23:0f:e2:ab:59:a4:19:b9:cf:e3:
         c6:1e:e0:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPgaRLPkou+ibYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
YjFkMWQ4N2MtZjE2My00NTE1LTk4OWMtOWQ1ZGVjY2QzMWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTNU+fGPzaxlzDVVcXoA96HQ4m9CzDR6cbhv
8ZBbZJgUdBlI5SNxkLlKPw9volMpmKdXlUlphikfPv4GkpfjBRKMAtIYeYMFu9iC
tFBTKRGoZJC4ExhvmToybXtGnqDIEmlaWQUghm1337GeynWapjhySeNC/5YGcx7b
zIfd0+gUtS/GqEOjCLOFEPGPqDNypmH0CdBCbybLvnUfMZ/svx23tJLJEXVXfmf0
+8+k7evYtDrMSYBTugYLiy0wqsYZ0MsWEvqE18CDhd9qdSHjbR8LolSrO+3jqsZ2
MXOhcfNKm/BGkcjTiRUq6W8E+3WigS5yu0zsfoUQudLTB3oB+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJwTIFG95LL2hNLBH3uNS0ShzaxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWFlZmMyNTUtMzM3ZS0z
YjU1LTk0MmItMDRlZWQxMGUyOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2gwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGn9SgiEeqzHP3ycvKgYrtWZ4pFDl2v9s/jE7+Tf3hyJfEfF3Uy+Achn
s2BWqtFaWdaV6PnEj5o28laNRz0VqhzYf2GFOdpBLdCOX44ICOB1UmXrA4mxNWgW
N/sQ/XvE/FIvepdaWMgW4hrnzzVAha95KSA56w/7f+u9XfeCtLFUvAv6UOD2q8N2
Muv67Mp/1r8b3wmw2ZOjyUHVGv+8HtcFsF/SiTDoIHvkX+tzspiux+xIx6zYsnBd
Ksz5Rt/5tot152OvnTuU6UHgLvUVsJ4PYlSmJUtrXtBH5i/4oQO2b3CbpnwVOprO
TYdCJhC4xkvxIw/iq1mkGbnP48Ye4Nw=
-----END CERTIFICATE-----
Generated at Sun Apr 28 14:15:29 2024 by rpki-client on console-ams.rpki-client.org