Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f660f530-c204-3dfc-be83-55e386fc2976.roa
File:                     f660f530-c204-3dfc-be83-55e386fc2976.roa (raw, json)
Hash identifier:          RHjaJmESFKRhxr7pjK77pVi+ZuQxx1zFImlTd29ytAU=
Subject key identifier:   E1:D1:76:1F:FA:7E:D2:76:BA:70:B2:F5:5D:C7:90:AA:F6:41:01:66
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BAF239E706B7B9686C7A00
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f660f530-c204-3dfc-be83-55e386fc2976.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        75.104.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:f2:39:e7:06:b7:b9:68:6c:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=6b248199-0165-4cba-be89-2e1a583ed198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e0:50:51:a1:0f:a4:4b:e4:f3:b8:1f:dd:69:
                    d1:2c:b0:fa:83:5a:7b:0b:ac:e1:f9:60:28:69:f2:
                    df:ac:ca:a5:52:ef:e8:dd:e7:16:3a:a6:97:db:d7:
                    19:a3:67:26:ac:08:56:c9:0f:38:b5:b9:99:ee:67:
                    bf:2c:c8:ec:8c:94:73:36:0f:fe:46:1f:8b:0f:31:
                    75:88:85:52:a8:73:00:6b:3c:f9:b2:56:8d:f2:31:
                    d9:1e:bb:af:5a:5d:b9:fb:c7:e7:19:b8:b2:ea:e5:
                    67:c7:31:53:cd:d7:e5:ac:20:86:a1:f3:6a:74:89:
                    c0:a0:de:05:28:56:ca:d6:db:57:4a:8f:6a:2b:e8:
                    dd:ab:b5:84:6a:6d:83:1b:60:1d:77:a6:e2:a6:12:
                    8c:ac:15:a3:5f:71:5d:29:c5:7c:15:c2:82:ff:6c:
                    03:c8:8d:40:3a:61:5e:dd:f7:c9:3d:5e:fe:fd:b7:
                    cc:da:b2:d9:2c:b1:5a:0e:d2:ba:fd:bf:39:70:af:
                    b8:3f:97:2c:a2:6f:fb:10:57:ce:db:c0:36:d4:cd:
                    66:8e:64:04:41:f6:d7:31:63:5c:42:d1:0a:a6:bd:
                    3b:dc:1c:7d:3e:bc:49:c2:5f:34:0d:c5:e0:63:27:
                    b3:f4:3e:ad:3e:48:cc:fc:57:2e:ae:8d:1d:c3:cf:
                    8d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D1:76:1F:FA:7E:D2:76:BA:70:B2:F5:5D:C7:90:AA:F6:41:01:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f660f530-c204-3dfc-be83-55e386fc2976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.104.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:43:b9:7d:d3:91:80:42:81:bd:ee:53:bc:83:9b:45:d0:f6:
         85:ff:b8:b5:30:33:80:19:a2:c7:23:c8:a8:56:8b:62:35:79:
         28:2d:c0:2e:ae:a1:20:37:bb:aa:cb:4a:1c:f3:f8:06:8a:ee:
         22:78:c8:14:2a:f3:47:8e:e6:cb:1d:e6:fb:60:f7:dd:43:dc:
         47:94:36:a4:39:cb:c6:7e:db:eb:23:4e:1d:b7:26:52:c9:97:
         d4:3d:df:73:38:78:61:48:de:59:e7:ba:ed:ee:fa:cd:39:4d:
         2b:51:52:4e:43:07:09:87:78:7c:00:d5:d5:18:e9:c0:3f:81:
         95:87:2a:35:35:17:0b:28:4e:a1:6a:b1:21:8e:e4:50:41:32:
         97:63:df:64:77:4f:58:01:c3:24:ff:fe:3a:e4:ae:a9:14:78:
         d8:37:a6:7f:82:a3:46:32:c6:d4:0f:59:2d:05:cf:30:44:51:
         a4:75:4a:9b:a9:70:66:52:45:7b:c1:1d:07:a2:a3:8a:19:4d:
         00:e6:37:e7:a6:f6:4c:f5:0e:0e:dd:9c:89:18:14:ee:76:1d:
         d1:fe:68:16:2a:6c:89:17:40:86:75:8a:d3:3c:ad:fe:4c:59:
         07:75:4f:77:fe:3a:32:80:3b:4d:a0:69:de:ac:ea:44:3a:5c:
         f3:b8:bb:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuvI55wa3uWhsegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
NmIyNDgxOTktMDE2NS00Y2JhLWJlODktMmUxYTU4M2VkMTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguBQUaEPpEvk87gf3WnRLLD6g1p7C6zh+WAo
afLfrMqlUu/o3ecWOqaX29cZo2cmrAhWyQ84tbmZ7me/LMjsjJRzNg/+Rh+LDzF1
iIVSqHMAazz5slaN8jHZHruvWl25+8fnGbiy6uVnxzFTzdflrCCGofNqdInAoN4F
KFbK1ttXSo9qK+jdq7WEam2DG2Add6biphKMrBWjX3FdKcV8FcKC/2wDyI1AOmFe
3ffJPV7+/bfM2rLZLLFaDtK6/b85cK+4P5csom/7EFfO28A21M1mjmQEQfbXMWNc
QtEKpr073Bx9PrxJwl80DcXgYyez9D6tPkjM/Fcuro0dw8+N8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOHRdh/6ftJ2unCy9V3HkKr2QQFmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjY2MGY1MzAtYzIwNC0z
ZGZjLWJlODMtNTVlMzg2ZmMyOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2iqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIhDuX3TkYBCgb3uU7yDm0XQ9oX/uLUwM4AZoscjyKhWi2I1eSgtwC6u
oSA3u6rLShzz+AaK7iJ4yBQq80eO5ssd5vtg991D3EeUNqQ5y8Z+2+sjTh23JlLJ
l9Q933M4eGFI3lnnuu3u+s05TStRUk5DBwmHeHwA1dUY6cA/gZWHKjU1FwsoTqFq
sSGO5FBBMpdj32R3T1gBwyT//jrkrqkUeNg3pn+Co0YyxtQPWS0FzzBEUaR1Spup
cGZSRXvBHQeio4oZTQDmN+em9kz1Dg7dnIkYFO52HdH+aBYqbIkXQIZ1itM8rf5M
WQd1T3f+OjKAO02gad6s6kQ6XPO4u1I=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:44:51 2025 by rpki-client