Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc96f568-f759-39c3-bb46-6af6e9a3a817.roa
File:                     fc96f568-f759-39c3-bb46-6af6e9a3a817.roa (raw, json)
Hash identifier:          BPS+ZJp3jRlivKs1CCNW20UDv0kFFPVt8Z507KUdUCQ=
Subject key identifier:   9A:38:4F:D7:B1:0B:55:6F:04:E2:EF:F8:59:A8:6F:02:1E:A1:12:86
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5811BBA6C76BF6703912B00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc96f568-f759-39c3-bb46-6af6e9a3a817.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        75.105.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:1b:ba:6c:76:bf:67:03:91:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=98e1a99b-494a-4935-ad02-128383cc3424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:38:60:a4:c7:6a:f3:5b:08:f1:37:4f:c9:fb:
                    bf:13:be:0c:6e:6e:4b:ed:91:a6:34:f5:fc:e3:d5:
                    a3:9a:17:1e:59:18:9e:76:94:b5:b5:60:43:c5:a2:
                    97:17:cc:db:fa:e7:43:c4:0f:3b:ed:df:fa:68:56:
                    88:ae:ed:cf:2f:e5:82:2f:cb:99:3f:8a:54:72:14:
                    d1:6c:85:d9:c4:2e:bc:a2:44:56:68:85:40:6e:a7:
                    7e:63:8d:07:68:aa:d5:32:5e:99:e1:59:cb:cc:61:
                    88:f3:93:64:34:20:e4:8d:28:2c:e9:9b:1e:f3:c9:
                    bf:2a:1d:0e:90:f3:2d:e4:a8:b6:16:40:6b:6f:ed:
                    4c:11:8a:16:93:39:3e:6e:91:ee:c5:2c:97:ab:fe:
                    3a:f6:d0:bd:76:67:65:0b:93:68:e6:44:2d:f3:13:
                    e0:0d:4e:c2:e9:2a:85:a1:4e:a5:e2:af:83:10:bd:
                    d0:53:a8:6d:25:36:3c:7e:a6:14:bb:58:80:e1:9f:
                    f7:6c:6b:c7:6a:5c:5c:b5:c2:86:88:cc:da:d1:c7:
                    c2:4d:4d:3b:9e:fb:23:10:a9:65:48:8d:35:38:e2:
                    76:6b:0d:b6:b0:e2:3a:d1:14:28:c6:dd:9e:f3:c3:
                    26:dd:f0:90:37:2f:52:3a:f4:f3:d8:00:0e:fe:16:
                    e0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:38:4F:D7:B1:0B:55:6F:04:E2:EF:F8:59:A8:6F:02:1E:A1:12:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fc96f568-f759-39c3-bb46-6af6e9a3a817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:06:32:0a:e3:0b:15:64:ea:58:57:42:ee:2b:d8:84:31:70:
         d4:2c:08:fc:72:a8:0c:97:0c:19:c8:aa:1f:4b:8c:4f:7e:c8:
         e1:4e:8e:87:51:bd:76:70:12:af:55:20:f2:47:b2:2f:90:ee:
         3b:ed:b3:28:5b:90:08:1c:11:dd:39:f8:ba:3c:20:cd:c7:a7:
         f3:0f:71:65:4a:4e:e1:18:99:c1:89:10:d9:77:cb:8c:26:83:
         7a:fd:0f:2e:c0:fa:81:2e:67:97:48:50:25:e7:af:4c:5a:9a:
         74:34:69:da:80:43:83:c9:54:4e:10:01:53:f3:63:27:8b:14:
         77:91:df:b6:31:09:c2:85:8d:2f:1e:0f:b1:7e:8a:09:c8:e0:
         69:81:17:89:13:74:38:2f:d5:f0:26:c5:d5:84:1c:84:47:fd:
         cd:00:02:26:23:d4:33:a4:7c:48:a5:1e:b6:c9:55:72:70:c5:
         3c:ee:2d:e3:0c:1d:79:81:61:3d:a1:38:dd:6a:b1:9b:6b:e6:
         a4:82:7e:e5:7e:32:d4:3f:ed:33:53:e1:63:28:12:ad:f3:02:
         4a:08:33:c4:11:8b:68:0a:2a:5c:9e:01:2f:7f:65:9b:04:37:
         fd:76:4d:e1:cd:53:cb:cd:9c:41:0a:92:a4:e7:27:5a:7d:77:
         9a:33:eb:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRu6bHa/ZwORKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
OThlMWE5OWItNDk0YS00OTM1LWFkMDItMTI4MzgzY2MzNDI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zhgpMdq81sI8TdPyfu/E74Mbm5L7ZGmNPX8
49WjmhceWRiedpS1tWBDxaKXF8zb+udDxA877d/6aFaIru3PL+WCL8uZP4pUchTR
bIXZxC68okRWaIVAbqd+Y40HaKrVMl6Z4VnLzGGI85NkNCDkjSgs6Zse88m/Kh0O
kPMt5Ki2FkBrb+1MEYoWkzk+bpHuxSyXq/469tC9dmdlC5No5kQt8xPgDU7C6SqF
oU6l4q+DEL3QU6htJTY8fqYUu1iA4Z/3bGvHalxctcKGiMza0cfCTU07nvsjEKll
SI01OOJ2aw22sOI60RQoxt2e88Mm3fCQNy9SOvTz2AAO/hbgmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJo4T9exC1VvBOLv+FmobwIeoRKGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmM5NmY1NjgtZjc1OS0z
OWMzLWJiNDYtNmFmNmU5YTNhODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2lsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQGMgrjCxVk6lhXQu4r2IQxcNQsCPxyqAyXDBnIqh9LjE9+yOFOjodR
vXZwEq9VIPJHsi+Q7jvtsyhbkAgcEd05+Lo8IM3Hp/MPcWVKTuEYmcGJENl3y4wm
g3r9Dy7A+oEuZ5dIUCXnr0xamnQ0adqAQ4PJVE4QAVPzYyeLFHeR37YxCcKFjS8e
D7F+ignI4GmBF4kTdDgv1fAmxdWEHIRH/c0AAiYj1DOkfEilHrbJVXJwxTzuLeMM
HXmBYT2hON1qsZtr5qSCfuV+MtQ/7TNT4WMoEq3zAkoIM8QRi2gKKlyeAS9/ZZsE
N/12TeHNU8vNnEEKkqTnJ1p9d5oz6+I=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:54 2025 by rpki-client