Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a10a9df-c35f-38aa-8cc4-5630ceef5cd7.roa
File:                     4a10a9df-c35f-38aa-8cc4-5630ceef5cd7.roa (raw, json)
Hash identifier:          0ktt4xny5fVmMpvcVp2T00zD7NTBqF7b8GAJbcZMoCg=
Subject key identifier:   03:B2:EE:D6:99:4B:0D:79:40:56:D0:72:A1:03:1C:DB:BA:12:14:08
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAFF2BC5F810D5A1684900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a10a9df-c35f-38aa-8cc4-5630ceef5cd7.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.105.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:ff:2b:c5:f8:10:d5:a1:68:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=256a9c66-c05c-4b8b-a14f-b3c071d0585e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:45:f7:c5:dd:ba:ae:ea:de:7d:d0:e3:ee:
                    79:4d:25:05:17:ed:1d:5d:0c:34:fe:a7:db:32:ac:
                    e6:b1:8a:b7:e8:08:12:73:6a:1f:23:4d:3f:69:b2:
                    96:e9:6e:de:87:c8:2c:e7:1b:bc:19:0f:9f:9a:19:
                    2a:16:63:92:5a:a0:19:53:c4:e7:b0:ad:be:d6:c4:
                    34:b3:32:74:ae:76:b5:33:6b:27:61:02:e8:ac:16:
                    44:0b:83:7a:a7:d9:80:6c:8d:dd:40:5b:55:e6:8c:
                    46:b1:44:2a:6c:59:7e:c9:81:06:84:fa:af:37:d9:
                    dc:ac:2c:8d:71:94:f4:c3:a4:b1:1f:e3:5d:d3:ff:
                    92:44:01:ab:aa:76:58:a9:48:36:03:f4:69:c2:bd:
                    04:fa:9d:32:c1:05:b1:7a:30:ea:90:3d:67:a2:44:
                    a4:c6:87:9e:69:6a:5e:2e:aa:61:1e:50:59:f4:b8:
                    88:43:8e:87:a8:8a:13:a9:e1:e8:60:0f:7c:2f:f8:
                    6a:0b:3f:03:3d:59:2f:c8:a1:e4:72:b5:68:61:17:
                    35:ec:de:13:92:e9:f4:4c:07:a4:76:69:e2:a8:29:
                    8d:d3:de:d0:24:e8:dc:22:2c:d4:ce:84:89:57:46:
                    fc:9a:af:43:b3:16:0a:51:14:fc:83:15:4e:00:bd:
                    01:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B2:EE:D6:99:4B:0D:79:40:56:D0:72:A1:03:1C:DB:BA:12:14:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4a10a9df-c35f-38aa-8cc4-5630ceef5cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.105.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e2:1c:e4:1c:d5:77:f2:8f:f1:29:e3:e7:8d:a4:23:76:68:
         20:52:91:3e:43:1c:53:d8:ec:42:cb:05:98:82:33:d1:a5:52:
         41:ee:f6:ea:2e:5b:fb:e8:3e:79:d4:24:01:84:aa:07:70:2e:
         01:1f:49:c7:fe:de:b2:86:6d:e1:bc:44:c6:11:7b:a3:78:eb:
         06:e1:e7:52:77:94:fe:d2:43:e2:56:70:ca:68:e5:7b:0c:00:
         74:f0:70:0d:df:f6:62:4c:a2:7c:c9:63:a4:9d:07:58:78:46:
         21:b4:0c:cc:75:b6:0f:38:ac:f7:eb:67:f2:dc:d8:32:88:f2:
         e3:02:8e:99:92:46:89:13:6b:4c:87:b6:10:bc:5d:28:b1:dc:
         72:be:52:8c:77:c6:8f:47:2d:61:2c:dd:e9:3a:44:1e:4c:74:
         ca:13:e0:7e:2a:83:71:3f:12:b6:2b:f9:b2:e9:9d:7a:e7:1c:
         05:d3:d1:49:bd:22:7d:70:b1:37:f7:a0:62:d9:73:56:45:cc:
         e3:96:35:e2:98:85:ff:6b:a3:0f:34:a0:c5:2a:2a:9f:55:bd:
         dc:b8:7a:7e:64:5b:74:fc:73:b3:ab:34:cd:83:12:6e:33:03:
         56:2a:f6:75:ee:ed:23:87:76:6f:1d:ff:6a:e1:9c:7f:e9:bc:
         d4:8d:4c:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuv8rxfgQ1aFoSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
MjU2YTljNjYtYzA1Yy00YjhiLWExNGYtYjNjMDcxZDA1ODVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9hF98Xduq7q3n3Q4+55TSUFF+0dXQw0/qfb
MqzmsYq36AgSc2ofI00/abKW6W7eh8gs5xu8GQ+fmhkqFmOSWqAZU8TnsK2+1sQ0
szJ0rna1M2snYQLorBZEC4N6p9mAbI3dQFtV5oxGsUQqbFl+yYEGhPqvN9ncrCyN
cZT0w6SxH+Nd0/+SRAGrqnZYqUg2A/Rpwr0E+p0ywQWxejDqkD1nokSkxoeeaWpe
LqphHlBZ9LiIQ46HqIoTqeHoYA98L/hqCz8DPVkvyKHkcrVoYRc17N4Tkun0TAek
dmniqCmN097QJOjcIizUzoSJV0b8mq9DsxYKURT8gxVOAL0BqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAOy7taZSw15QFbQcqEDHNu6EhQIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGExMGE5ZGYtYzM1Zi0z
OGFhLThjYzQtNTYzMGNlZWY1Y2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2mdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfiHOQc1Xfyj/Ep4+eNpCN2aCBSkT5DHFPY7ELLBZiCM9GlUkHu9uou
W/voPnnUJAGEqgdwLgEfScf+3rKGbeG8RMYRe6N46wbh51J3lP7SQ+JWcMpo5XsM
AHTwcA3f9mJMonzJY6SdB1h4RiG0DMx1tg84rPfrZ/Lc2DKI8uMCjpmSRokTa0yH
thC8XSix3HK+Uox3xo9HLWEs3ek6RB5MdMoT4H4qg3E/ErYr+bLpnXrnHAXT0Um9
In1wsTf3oGLZc1ZFzOOWNeKYhf9row80oMUqKp9Vvdy4en5kW3T8c7OrNM2DEm4z
A1Yq9nXu7SOHdm8d/2rhnH/pvNSNTJ8=
-----END CERTIFICATE-----
Generated at Tue May 6 03:43:48 2025 by rpki-client