Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b21bfef4-3d47-3e84-b423-ba543632cf2f.roa
File:                     b21bfef4-3d47-3e84-b423-ba543632cf2f.roa (raw, json)
Hash identifier:          Anngdnn762GWkpaX1Mnl8A//wM/HXcIKqeViyW8MxqM=
Subject key identifier:   87:B0:AB:4A:F2:0B:42:02:13:4C:F6:BD:06:6E:E5:A3:EB:6C:92:3C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5811CED3825F3B77FA12620
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b21bfef4-3d47-3e84-b423-ba543632cf2f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.105.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:1c:ed:38:25:f3:b7:7f:a1:26:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=8056cf12-d6e9-456e-aee0-d0b3b7f44fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:66:87:f7:46:5b:45:f4:db:ce:af:8f:78:82:
                    57:bb:e9:fc:a4:0f:64:a2:9f:5a:04:9b:99:b0:c9:
                    49:6f:dd:28:12:3a:a0:9d:f7:78:06:fd:0d:28:0e:
                    51:06:6e:7d:82:ab:60:98:cf:09:cd:3c:33:96:16:
                    b8:6a:94:fa:87:e6:f4:43:e0:79:e2:6c:e0:ed:34:
                    eb:2b:4a:ba:53:a7:07:34:bc:7d:68:17:b9:2b:4a:
                    57:84:97:0c:f5:d4:6d:f1:c0:cd:d1:9e:9c:05:22:
                    06:cf:c0:38:8e:fe:00:74:d2:c4:e8:35:f5:10:97:
                    63:37:6f:4b:d8:f6:2c:69:0e:a3:94:ef:22:40:67:
                    b1:24:0a:dd:fd:7b:17:23:e9:23:50:25:1a:c9:58:
                    7c:c8:fc:c9:43:f0:7c:63:52:0e:92:f8:f9:0e:33:
                    39:72:c3:2f:eb:7c:c7:86:1e:ef:a9:4b:32:bf:74:
                    78:a5:c3:26:7f:a9:6d:b6:21:6b:3e:41:5e:f7:c1:
                    52:88:a7:d0:66:e6:b6:09:d4:55:24:91:50:c5:4b:
                    7d:61:8e:e7:51:6b:eb:5c:59:20:37:e2:7d:8f:43:
                    13:1e:21:98:59:21:e2:d0:ee:88:9f:9c:84:d2:32:
                    bc:67:ba:e7:36:c5:7b:f4:d7:5b:9d:c1:85:0a:66:
                    9b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B0:AB:4A:F2:0B:42:02:13:4C:F6:BD:06:6E:E5:A3:EB:6C:92:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b21bfef4-3d47-3e84-b423-ba543632cf2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:9f:26:9b:ea:dc:1f:dc:f0:57:0a:65:74:14:25:79:69:59:
         c2:0d:6c:1d:5b:77:f7:dd:84:a7:4f:9f:b7:d9:2d:21:eb:4a:
         79:e9:f0:63:eb:76:32:d7:40:33:b6:1f:67:a0:bb:e6:45:07:
         0f:85:0d:9c:4c:ab:3b:f0:0c:1f:31:3c:d4:fd:2c:87:dc:4a:
         1e:99:70:b8:1f:87:9b:ce:4e:28:92:b3:65:d4:fd:ef:dd:14:
         33:2e:5a:b5:02:8e:d8:45:47:3a:32:97:58:df:da:26:49:1e:
         69:ba:4e:d4:3b:f5:cb:7b:c0:8a:07:07:25:5f:8b:23:99:c8:
         af:74:45:10:af:8c:5c:83:83:c3:e3:42:6f:0f:2b:47:72:0b:
         78:9a:8d:75:95:8a:c5:64:e0:06:b4:a7:e3:70:52:83:b0:8a:
         42:a1:c1:85:7f:9f:49:a5:e6:f6:f1:c5:53:17:d3:67:e7:60:
         e4:2d:4c:af:ce:89:68:9c:05:a6:cc:30:4f:7a:11:52:bf:a4:
         e0:21:b8:2e:6d:2c:f6:05:85:d1:d7:dc:be:f7:a0:c5:4d:d3:
         73:21:21:f6:78:83:4b:6b:70:2b:79:91:0d:26:2e:d2:c9:58:
         d8:c5:5c:e1:3f:57:aa:60:ae:f7:9b:e0:65:18:7b:c4:d4:36:
         a5:22:79:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRztOCXzt3+hJiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ODA1NmNmMTItZDZlOS00NTZlLWFlZTAtZDBiM2I3ZjQ0ZmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWaH90ZbRfTbzq+PeIJXu+n8pA9kop9aBJuZ
sMlJb90oEjqgnfd4Bv0NKA5RBm59gqtgmM8JzTwzlha4apT6h+b0Q+B54mzg7TTr
K0q6U6cHNLx9aBe5K0pXhJcM9dRt8cDN0Z6cBSIGz8A4jv4AdNLE6DX1EJdjN29L
2PYsaQ6jlO8iQGexJArd/XsXI+kjUCUayVh8yPzJQ/B8Y1IOkvj5DjM5csMv63zH
hh7vqUsyv3R4pcMmf6lttiFrPkFe98FSiKfQZua2CdRVJJFQxUt9YY7nUWvrXFkg
N+J9j0MTHiGYWSHi0O6In5yE0jK8Z7rnNsV79NdbncGFCmabpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIewq0ryC0ICE0z2vQZu5aPrbJI8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjIxYmZlZjQtM2Q0Ny0z
ZTg0LWI0MjMtYmE1NDM2MzJjZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2mVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADifJpvq3B/c8FcKZXQUJXlpWcINbB1bd/fdhKdPn7fZLSHrSnnp8GPr
djLXQDO2H2egu+ZFBw+FDZxMqzvwDB8xPNT9LIfcSh6ZcLgfh5vOTiiSs2XU/e/d
FDMuWrUCjthFRzoyl1jf2iZJHmm6TtQ79ct7wIoHByVfiyOZyK90RRCvjFyDg8Pj
Qm8PK0dyC3iajXWVisVk4Aa0p+NwUoOwikKhwYV/n0ml5vbxxVMX02fnYOQtTK/O
iWicBabMME96EVK/pOAhuC5tLPYFhdHX3L73oMVN03MhIfZ4g0trcCt5kQ0mLtLJ
WNjFXOE/V6pgrveb4GUYe8TUNqUieR8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:08:44 2025 by rpki-client