Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c39428f5-a570-31b9-ae41-45fd8168f071.roa
File:                     c39428f5-a570-31b9-ae41-45fd8168f071.roa (raw, json)
Hash identifier:          qdyMBMyUlvn7LwakS3ccdk9kXFXPowy6FUIza7kVB3A=
Subject key identifier:   28:13:6C:08:6E:2C:F7:18:2A:5C:CD:74:55:EE:D4:5E:16:CF:CB:ED
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453E108D2E02F150F8033700
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c39428f5-a570-31b9-ae41-45fd8168f071.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        75.105.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3e:10:8d:2e:02:f1:50:f8:03:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=332ce30c-4c4b-4605-a82a-a6f2c0584b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6d:26:7f:1e:ff:37:a6:d4:76:49:1e:f8:f8:
                    d2:ff:02:71:58:84:63:a7:84:3c:a9:70:d9:41:6c:
                    b7:9f:2a:1f:25:c8:5e:e2:11:ad:fc:0e:ac:97:5b:
                    f6:db:5c:ac:26:ce:41:f5:02:73:b7:a0:9c:6d:71:
                    8d:a3:a2:cc:54:04:f0:73:44:ed:0b:18:4e:40:45:
                    09:57:55:30:77:0b:e1:9d:06:30:24:80:4e:b3:e9:
                    7c:77:10:6a:a7:7f:3b:66:8b:84:bd:80:37:8d:48:
                    d7:da:1c:e6:0d:c2:20:77:6e:0b:93:29:1d:05:44:
                    e4:70:bd:3c:62:17:ba:0e:be:a1:e7:3a:77:f4:07:
                    52:22:17:b3:a0:98:7f:23:8f:af:59:d4:48:54:c3:
                    0e:b5:aa:f1:b7:4d:b0:e6:45:a5:e5:f0:19:cb:0d:
                    de:11:f0:87:6d:57:31:8e:a8:a4:d6:a0:9f:30:68:
                    b8:a4:c4:fe:e9:ef:a4:1d:6c:f0:f9:d0:54:92:f2:
                    60:46:be:29:9d:c1:7e:ec:5c:84:98:b8:83:15:53:
                    b3:29:e6:dc:e3:4b:4b:d4:43:65:5f:a4:d7:a4:25:
                    48:6e:32:c7:01:98:26:73:d8:77:60:72:fb:87:c0:
                    45:88:6c:52:15:ac:e7:53:a5:e0:ed:ff:46:00:eb:
                    05:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:13:6C:08:6E:2C:F7:18:2A:5C:CD:74:55:EE:D4:5E:16:CF:CB:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c39428f5-a570-31b9-ae41-45fd8168f071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:fd:13:a7:42:cb:1f:b3:f3:14:9c:d6:05:11:46:81:d1:a4:
         d5:bf:7a:2e:5b:ea:43:e9:ba:dd:e4:27:2c:b4:4f:4b:7b:76:
         00:34:bf:7f:8c:c5:16:3c:06:83:90:0d:4b:1c:9f:f3:38:13:
         e6:99:05:02:be:89:1e:e3:97:0c:b7:d4:78:5c:bd:a8:54:bf:
         58:16:ae:2f:c1:60:e2:e3:d6:e6:f6:6d:cb:37:8e:cb:b2:ec:
         50:bc:ad:f7:11:36:b7:01:f0:0d:8b:3e:ec:70:fe:d1:d3:08:
         61:5a:fa:1d:56:5c:9c:22:d6:1a:a0:4f:a6:8d:aa:b7:ec:56:
         2a:aa:7a:9a:a2:b0:fb:c7:e2:1a:67:94:f9:b6:c2:a8:20:fe:
         de:24:c2:60:36:0b:9c:ba:26:29:0e:e8:fa:16:d2:d4:9e:bf:
         58:3d:d9:c7:aa:86:0c:d2:43:78:d6:0d:df:14:ef:72:f9:a6:
         48:f9:d0:90:20:e6:d6:3e:d0:08:6a:86:68:b9:68:96:e7:55:
         9d:d5:3c:67:66:7e:95:f1:61:cf:fc:e7:50:98:65:67:a4:c0:
         22:22:fc:71:36:4e:fc:fe:4a:d6:2d:ce:80:0d:b1:40:af:e6:
         c8:dc:f0:00:9e:1c:a0:82:52:f4:ed:b5:67:4c:00:72:6c:e6:
         d6:87:61:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVFPhCNLgLxUPgDNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MDMyMDEzMDAzM1oXDTI0MDYxODEzMDAzM1owLzEtMCsGA1UEAxMk
MzMyY2UzMGMtNGM0Yi00NjA1LWE4MmEtYTZmMmMwNTg0YjgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW0mfx7/N6bUdkke+PjS/wJxWIRjp4Q8qXDZ
QWy3nyofJche4hGt/A6sl1v221ysJs5B9QJzt6CcbXGNo6LMVATwc0TtCxhOQEUJ
V1UwdwvhnQYwJIBOs+l8dxBqp387ZouEvYA3jUjX2hzmDcIgd24LkykdBUTkcL08
Yhe6Dr6h5zp39AdSIhezoJh/I4+vWdRIVMMOtarxt02w5kWl5fAZyw3eEfCHbVcx
jqik1qCfMGi4pMT+6e+kHWzw+dBUkvJgRr4pncF+7FyEmLiDFVOzKebc40tL1ENl
X6TXpCVIbjLHAZgmc9h3YHL7h8BFiGxSFaznU6Xg7f9GAOsF2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCgTbAhuLPcYKlzNdFXu1F4Wz8vtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzM5NDI4ZjUtYTU3MC0z
MWI5LWFlNDEtNDVmZDgxNjhmMDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2lbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAML9E6dCyx+z8xSc1gURRoHRpNW/ei5b6kPput3kJyy0T0t7dgA0v3+M
xRY8BoOQDUscn/M4E+aZBQK+iR7jlwy31HhcvahUv1gWri/BYOLj1ub2bcs3jsuy
7FC8rfcRNrcB8A2LPuxw/tHTCGFa+h1WXJwi1hqgT6aNqrfsViqqepqisPvH4hpn
lPm2wqgg/t4kwmA2C5y6JikO6PoW0tSev1g92ceqhgzSQ3jWDd8U73L5pkj50JAg
5tY+0Ahqhmi5aJbnVZ3VPGdmfpXxYc/851CYZWekwCIi/HE2Tvz+StYtzoANsUCv
5sjc8ACeHKCCUvTttWdMAHJs5taHYX4=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:22:48 2024 by rpki-client on console-ams.rpki-client.org