Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36b393be-bb73-39d1-b8fb-b5997af9857d.roa
File:                     36b393be-bb73-39d1-b8fb-b5997af9857d.roa (raw, json)
Hash identifier:          QD1rwKM9NTPAAKhfEmqXNu8lrRSJJgUZ84kC2EAUhWM=
Subject key identifier:   04:50:9F:27:C3:20:D0:D7:5D:80:37:37:17:11:80:2E:9B:4A:A0:93
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA7B50C457E165E70CBE80
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36b393be-bb73-39d1-b8fb-b5997af9857d.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.107.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:7b:50:c4:57:e1:65:e7:0c:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=b6ce1832-4ee6-4f03-b5d3-0cd1b5f95647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:12:42:58:03:1f:35:1d:ce:92:c8:bf:50:a2:
                    da:09:d5:50:17:34:16:f0:be:25:07:7a:67:a0:17:
                    24:12:60:4f:9e:d6:90:01:75:d5:4d:c8:bd:0a:49:
                    2e:f2:da:c1:13:16:09:d7:92:f3:7a:0b:86:52:e9:
                    78:a3:d4:6e:46:f7:15:95:8e:cf:09:8d:d7:a3:64:
                    37:23:1f:1a:28:80:da:49:69:4e:39:9f:42:ae:a4:
                    6b:19:d6:7c:31:a8:7f:1f:35:6a:6b:bd:52:a9:01:
                    a5:b9:09:7d:f1:d4:a2:03:f8:f3:8b:47:16:3c:27:
                    1d:c8:21:b3:fa:d8:eb:df:83:91:37:68:36:63:7a:
                    a3:bc:38:e8:63:a9:aa:3d:57:0c:bb:9a:3f:f2:00:
                    fd:99:3a:a9:84:14:e1:a0:9b:74:1c:50:c3:90:5d:
                    90:63:af:db:e1:a4:9d:9f:cc:27:96:6e:45:05:13:
                    3e:22:bf:1b:91:71:d6:b3:79:25:77:46:cb:2c:4e:
                    40:05:6f:cc:fa:e3:32:5e:6d:0d:10:c6:77:70:c2:
                    77:11:3e:77:65:25:1a:8c:05:bb:71:d3:b6:64:3e:
                    d8:d5:5d:f3:55:fc:e9:d4:97:b9:88:5f:0d:24:4e:
                    72:2c:a1:25:83:04:09:c7:64:09:6c:18:53:b4:f2:
                    f1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:50:9F:27:C3:20:D0:D7:5D:80:37:37:17:11:80:2E:9B:4A:A0:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36b393be-bb73-39d1-b8fb-b5997af9857d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.107.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:14:86:cb:08:a9:5c:98:8b:67:eb:46:5c:7a:82:7c:a0:ea:
         5a:d9:cb:24:ed:bb:f0:f9:30:dd:f3:fe:22:f6:48:84:d5:a2:
         0e:46:0d:26:63:26:24:7d:13:d2:64:25:81:70:b3:6e:3a:c2:
         dd:87:ee:a4:bf:3c:24:93:0f:27:44:2b:94:0f:84:a4:02:28:
         df:ab:5b:a5:a2:aa:27:b4:b9:e7:c0:6a:92:ae:ec:70:ce:5d:
         7d:65:ae:26:89:03:05:4a:f6:f2:a6:29:2c:e4:c1:f5:fe:da:
         13:ca:f5:da:85:f8:5d:52:a1:d7:34:28:d9:51:62:32:46:75:
         70:9d:c6:a9:2f:bc:f5:d3:c9:39:1c:85:4f:3c:91:4c:0a:2e:
         36:f1:e2:54:44:c8:4a:d9:31:82:96:50:27:2a:03:2c:42:3e:
         49:ff:61:78:b1:58:a5:61:ce:df:21:01:6c:4e:ae:68:ba:55:
         2c:fd:f1:a3:46:fc:f1:fb:0b:c0:1f:31:18:f9:6f:77:e0:23:
         d5:ad:41:41:ee:16:f9:88:15:c0:90:af:54:c8:73:6c:65:12:
         a3:a4:72:35:ed:d3:ee:c1:21:57:99:c3:35:f6:88:8d:02:73:
         a9:d0:69:f2:8c:b7:15:d4:f1:5b:a4:5e:53:c5:8f:9e:d7:de:
         00:9f:ba:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuntQxFfhZecMvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
YjZjZTE4MzItNGVlNi00ZjAzLWI1ZDMtMGNkMWI1Zjk1NjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhJCWAMfNR3Oksi/UKLaCdVQFzQW8L4lB3pn
oBckEmBPntaQAXXVTci9Ckku8trBExYJ15LzeguGUul4o9RuRvcVlY7PCY3Xo2Q3
Ix8aKIDaSWlOOZ9CrqRrGdZ8Mah/HzVqa71SqQGluQl98dSiA/jzi0cWPCcdyCGz
+tjr34ORN2g2Y3qjvDjoY6mqPVcMu5o/8gD9mTqphBThoJt0HFDDkF2QY6/b4aSd
n8wnlm5FBRM+Ir8bkXHWs3kld0bLLE5ABW/M+uMyXm0NEMZ3cMJ3ET53ZSUajAW7
cdO2ZD7Y1V3zVfzp1Je5iF8NJE5yLKElgwQJx2QJbBhTtPLxzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFARQnyfDINDXXYA3NxcRgC6bSqCTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzZiMzkzYmUtYmI3My0z
OWQxLWI4ZmItYjU5OTdhZjk4NTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2vQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4UhssIqVyYi2frRlx6gnyg6lrZyyTtu/D5MN3z/iL2SITVog5GDSZj
JiR9E9JkJYFws246wt2H7qS/PCSTDydEK5QPhKQCKN+rW6Wiqie0uefAapKu7HDO
XX1lriaJAwVK9vKmKSzkwfX+2hPK9dqF+F1Sodc0KNlRYjJGdXCdxqkvvPXTyTkc
hU88kUwKLjbx4lREyErZMYKWUCcqAyxCPkn/YXixWKVhzt8hAWxOrmi6VSz98aNG
/PH7C8AfMRj5b3fgI9WtQUHuFvmIFcCQr1TIc2xlEqOkcjXt0+7BIVeZwzX2iI0C
c6nQafKMtxXU8VukXlPFj57X3gCfuq8=
-----END CERTIFICATE-----
Generated at Wed May 7 16:57:34 2025 by rpki-client