Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f8bc6064-683f-3538-a47d-abdd1393f9cf.roa
File:                     f8bc6064-683f-3538-a47d-abdd1393f9cf.roa (raw, json)
Hash identifier:          sntCN0ewcZplQG3X7xOrIs4lj/dlrZF7amMxmBC4CpQ=
Subject key identifier:   58:A8:C9:31:70:18:2B:02:12:DC:5B:A5:8D:01:CA:E3:A4:F4:4D:A8
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3FA5F8DA76F5E91D240700
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f8bc6064-683f-3538-a47d-abdd1393f9cf.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     53979
IP address blocks:        75.112.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:a5:f8:da:76:f5:e9:1d:24:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=fed60e5f-c8da-4fef-84f5-1588d7af8796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:17:4b:eb:c5:ac:aa:f2:25:d8:8d:1f:41:1a:
                    17:5e:ea:7f:5d:3d:ae:ac:83:47:09:bb:12:9f:c5:
                    df:f9:5b:e5:cb:05:a2:53:78:a4:67:b0:47:22:7b:
                    5b:c7:60:c8:66:1f:ce:c9:29:dc:9b:13:ab:55:33:
                    8e:e2:b6:ee:6a:e2:3f:57:be:0b:c3:f9:3b:d5:d7:
                    cf:99:12:e0:11:fc:90:10:11:ab:04:16:05:4e:61:
                    ce:a5:10:90:a4:50:a3:1c:13:8f:f6:d2:cf:e5:5a:
                    79:6f:7a:89:17:22:2d:a7:b2:f4:ad:5d:8e:43:bd:
                    20:21:87:e1:ad:2d:43:2f:76:32:fd:8a:92:fe:e2:
                    e1:c1:e4:bc:8b:9f:a2:09:fe:e2:01:27:bd:9d:14:
                    1a:fc:d4:80:9a:0f:c6:02:b3:ed:89:c3:ce:9c:76:
                    6e:c6:2a:9e:17:42:90:af:f1:64:a9:e5:b3:f8:58:
                    b1:ab:7a:7d:11:cb:59:d2:b1:68:df:12:50:87:4c:
                    9d:26:17:bd:78:5b:0c:03:1b:50:d1:1c:23:10:49:
                    a8:80:3a:1c:c9:55:28:70:6d:9e:1e:8d:f2:87:5d:
                    33:64:18:f7:b2:af:a6:ef:81:af:da:4e:a5:1f:e8:
                    ae:86:1b:90:da:a4:70:50:cf:7a:27:fc:ff:6f:eb:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A8:C9:31:70:18:2B:02:12:DC:5B:A5:8D:01:CA:E3:A4:F4:4D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f8bc6064-683f-3538-a47d-abdd1393f9cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.112.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:eb:bf:94:ae:c7:51:02:9a:9c:58:15:82:c8:f8:0b:84:cd:
         ed:3b:a8:33:68:ed:8a:06:59:60:16:2c:e1:c8:73:ef:11:ec:
         96:05:41:d8:c1:78:62:61:86:14:06:3f:d1:7b:b5:e6:09:fd:
         cf:f3:08:9f:5e:2e:ff:3b:2d:84:0b:cc:45:cf:6e:b2:50:f5:
         ef:97:ae:10:ca:c1:1c:19:59:24:a9:20:96:aa:92:1d:c8:90:
         94:cf:32:16:84:b5:ff:22:3b:00:aa:84:22:cc:c8:cf:26:2e:
         cb:d8:ef:ef:21:f3:c1:4d:9e:19:3a:e5:b3:34:5f:6d:54:db:
         81:d2:f8:0e:f5:00:fd:3d:c5:37:dd:38:fa:d7:53:23:af:d4:
         ed:e9:88:bc:85:0a:0a:03:7c:49:7a:90:7b:92:61:f4:44:7e:
         5f:c1:8d:0d:56:88:63:1d:08:78:b8:e8:bb:ac:85:e3:b8:a0:
         57:f4:ee:d9:87:5d:20:b6:a9:7d:87:e9:a4:78:f7:17:d9:d8:
         f9:11:0a:24:76:e6:a2:81:15:47:7f:27:e6:47:48:59:93:bf:
         30:cd:e5:a9:a8:fd:c8:0a:5e:e9:11:1f:19:1f:ad:1f:7f:96:
         9c:ed:4c:88:76:1c:00:28:6d:a7:32:33:f5:71:1a:f1:e1:2b:
         93:e8:42:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6X42nb16R0kBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
ZmVkNjBlNWYtYzhkYS00ZmVmLTg0ZjUtMTU4OGQ3YWY4Nzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhdL68WsqvIl2I0fQRoXXup/XT2urINHCbsS
n8Xf+VvlywWiU3ikZ7BHIntbx2DIZh/OySncmxOrVTOO4rbuauI/V74Lw/k71dfP
mRLgEfyQEBGrBBYFTmHOpRCQpFCjHBOP9tLP5Vp5b3qJFyItp7L0rV2OQ70gIYfh
rS1DL3Yy/YqS/uLhweS8i5+iCf7iASe9nRQa/NSAmg/GArPticPOnHZuxiqeF0KQ
r/FkqeWz+Fixq3p9EctZ0rFo3xJQh0ydJhe9eFsMAxtQ0RwjEEmogDocyVUocG2e
Ho3yh10zZBj3sq+m74Gv2k6lH+iuhhuQ2qRwUM96J/z/b+vI5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFioyTFwGCsCEtxbpY0ByuOk9E2oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZjhiYzYwNjQtNjgzZi0z
NTM4LWE0N2QtYWJkZDEzOTNmOWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS3BEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILrv5Sux1ECmpxYFYLI+AuEze07qDNo7YoGWWAWLOHIc+8R7JYFQdjB
eGJhhhQGP9F7teYJ/c/zCJ9eLv87LYQLzEXPbrJQ9e+XrhDKwRwZWSSpIJaqkh3I
kJTPMhaEtf8iOwCqhCLMyM8mLsvY7+8h88FNnhk65bM0X21U24HS+A71AP09xTfd
OPrXUyOv1O3piLyFCgoDfEl6kHuSYfREfl/BjQ1WiGMdCHi46LusheO4oFf07tmH
XSC2qX2H6aR49xfZ2PkRCiR25qKBFUd/J+ZHSFmTvzDN5amo/cgKXukRHxkfrR9/
lpztTIh2HAAobacyM/VxGvHhK5PoQtw=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:27:15 2025 by rpki-client