Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c910dce6-0555-34af-b37c-cbadc5c37ed5.roa
File:                     c910dce6-0555-34af-b37c-cbadc5c37ed5.roa (raw, json)
Hash identifier:          20lNrowYzgOMysypIl6rMsSk6eel88sUF3SnrqXqzjo=
Subject key identifier:   BF:F2:FE:C8:DD:6B:B4:30:27:43:B1:54:37:2A:DD:1F:6D:13:ED:AD
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285847E62A5B56F4D2127CE79C6200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c910dce6-0555-34af-b37c-cbadc5c37ed5.roa
Signing time:             Sat 16 Nov 2024 14:00:41 +0000
ROA not before:           Sat 16 Nov 2024 14:00:41 +0000
ROA not after:            Fri 14 Feb 2025 14:00:41 +0000
asID:                     7155
IP address blocks:        75.107.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e6:2a:5b:56:f4:d2:12:7c:e7:9c:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Nov 16 14:00:41 2024 GMT
            Not After : Feb 14 14:00:41 2025 GMT
        Subject: CN=e025ab21-6569-42b9-8753-e95ca088eeb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7e:8a:74:d3:e1:02:ae:5b:a0:42:83:14:5c:
                    f1:a6:31:bf:41:2d:7c:ed:21:5a:8a:eb:06:c8:52:
                    3c:f5:8c:a5:17:eb:46:b6:9d:21:1e:8e:ca:2d:f1:
                    33:6c:9e:cc:91:92:3d:df:55:0f:55:27:44:69:f4:
                    e8:80:fa:96:d6:a7:21:b8:d2:9e:ea:9f:79:10:ef:
                    2d:64:f0:88:4c:b6:5f:f4:88:a7:08:23:06:38:15:
                    c6:0b:72:ad:34:2f:80:6a:ba:dd:1a:47:5b:cc:47:
                    1e:65:45:30:9d:74:51:1b:96:4d:40:b1:a1:27:7b:
                    91:d3:6e:83:f6:6c:a7:84:ed:70:7f:53:d1:c6:72:
                    ae:fd:5f:f9:63:5d:c4:6a:85:56:8c:7a:d2:81:71:
                    6d:2f:71:98:7a:57:42:8c:a2:71:36:7b:e3:79:c0:
                    9e:01:28:2d:48:74:21:87:dc:d0:5e:02:86:0a:87:
                    67:48:46:6d:9b:15:e7:98:6d:b6:6b:6c:57:e4:c8:
                    ee:cb:35:34:2f:1e:39:18:ba:a7:c5:ba:ba:76:b8:
                    f9:a1:5a:d5:67:70:d4:58:65:34:28:57:63:dd:07:
                    c9:4a:1c:a8:b7:94:cb:58:bd:0d:52:5e:77:58:17:
                    e9:d5:a2:66:1e:3e:62:df:bc:98:1f:dc:ca:ad:7d:
                    b9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F2:FE:C8:DD:6B:B4:30:27:43:B1:54:37:2A:DD:1F:6D:13:ED:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c910dce6-0555-34af-b37c-cbadc5c37ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:8f:28:9a:0d:ff:9c:a3:92:9e:19:7d:5b:e8:e2:e0:b7:c6:
         68:4e:5b:2b:f6:bd:52:27:6d:a6:ae:74:4b:7a:dc:72:6a:1c:
         3c:12:ec:0a:2a:31:90:c2:25:29:29:46:23:28:ab:43:da:29:
         a3:a1:27:84:a3:e2:5d:15:76:96:52:85:52:49:a6:8a:c7:14:
         c3:49:9a:4b:e9:67:cb:5f:70:d7:d0:b4:d7:d3:c8:91:4a:d3:
         13:ae:02:00:29:5f:b4:67:23:46:f9:17:0f:ed:37:b3:7c:db:
         d1:05:d8:a5:04:2f:5f:fe:1f:3b:7c:e8:db:be:05:a4:4a:7e:
         6e:85:0e:7c:fb:85:99:d0:01:45:3a:3f:81:8f:8f:59:4f:c3:
         09:72:99:2b:f0:03:f8:37:6e:5b:1b:43:2a:4b:9f:e7:30:f1:
         46:7f:2c:a0:cb:4e:1d:27:45:82:8e:14:3e:a8:6c:94:99:51:
         3c:88:0e:15:a5:4d:1b:0f:b8:c4:e8:7a:32:24:42:cb:69:71:
         15:4e:b7:b2:95:ad:6e:34:f4:ab:e4:68:91:0e:2f:0b:0a:48:
         94:9b:88:1c:6a:96:07:a7:30:9b:a2:9d:88:fb:b7:72:a1:32:
         af:6f:b1:64:3f:ea:62:18:22:58:b1:c4:b1:d3:f1:ed:5a:cb:
         3f:31:e9:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKltW9NISfOecYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
ZTAyNWFiMjEtNjU2OS00MmI5LTg3NTMtZTk1Y2EwODhlZWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn6KdNPhAq5boEKDFFzxpjG/QS187SFaiusG
yFI89YylF+tGtp0hHo7KLfEzbJ7MkZI931UPVSdEafTogPqW1qchuNKe6p95EO8t
ZPCITLZf9IinCCMGOBXGC3KtNC+AarrdGkdbzEceZUUwnXRRG5ZNQLGhJ3uR026D
9mynhO1wf1PRxnKu/V/5Y13EaoVWjHrSgXFtL3GYeldCjKJxNnvjecCeASgtSHQh
h9zQXgKGCodnSEZtmxXnmG22a2xX5MjuyzU0Lx45GLqnxbq6drj5oVrVZ3DUWGU0
KFdj3QfJShyot5TLWL0NUl53WBfp1aJmHj5i37yYH9zKrX259wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL/y/sjda7QwJ0OxVDcq3R9tE+2tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzkxMGRjZTYtMDU1NS0z
NGFmLWIzN2MtY2JhZGM1YzM3ZWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2uiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIyPKJoN/5yjkp4ZfVvo4uC3xmhOWyv2vVInbaaudEt63HJqHDwS7Aoq
MZDCJSkpRiMoq0PaKaOhJ4Sj4l0VdpZShVJJporHFMNJmkvpZ8tfcNfQtNfTyJFK
0xOuAgApX7RnI0b5Fw/tN7N829EF2KUEL1/+Hzt86Nu+BaRKfm6FDnz7hZnQAUU6
P4GPj1lPwwlymSvwA/g3blsbQypLn+cw8UZ/LKDLTh0nRYKOFD6obJSZUTyIDhWl
TRsPuMToejIkQstpcRVOt7KVrW409KvkaJEOLwsKSJSbiBxqlgenMJuinYj7t3Kh
Mq9vsWQ/6mIYIlixxLHT8e1ayz8x6ak=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:36:40 2024 by rpki-client on console-ams.rpki-client.org