Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/73009017-4a88-31ff-a91e-0e3d8e4f5560.roa
File:                     73009017-4a88-31ff-a91e-0e3d8e4f5560.roa (raw, json)
Hash identifier:          5BgK3w/fItyB1sMJsm19aWpNLwdscHOj0XZ/nBsiA0M=
Subject key identifier:   0F:E8:E6:1B:AF:18:81:DE:D9:5F:94:3B:BE:E0:CB:39:6C:35:69:E7
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328584B2625E54B0BFF0051EDD06480
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/73009017-4a88-31ff-a91e-0e3d8e4f5560.roa
Signing time:             Wed 10 Sep 2025 12:04:57 +0000
ROA not before:           Wed 10 Sep 2025 12:04:57 +0000
ROA not after:            Tue 09 Dec 2025 13:04:57 +0000
asID:                     47629
IP address blocks:        23.170.243.0/24 maxlen: 24
                          23.170.244.0/24 maxlen: 24
                          23.170.246.0/24 maxlen: 24
                          23.170.248.0/24 maxlen: 24
                          23.170.249.0/24 maxlen: 24
                          23.170.252.0/24 maxlen: 24
                          23.170.253.0/24 maxlen: 24
                          23.170.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:26:25:e5:4b:0b:ff:00:51:ed:d0:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Sep 10 12:04:57 2025 GMT
            Not After : Dec  9 13:04:57 2025 GMT
        Subject: CN=4947695b-60ea-4cba-94f0-c977b72df7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f0:c6:8f:76:42:f5:15:e4:c9:43:5b:1b:60:
                    30:9b:88:fa:38:3f:2b:4e:c7:ce:fb:05:a5:7d:2d:
                    b0:1b:ea:d3:38:08:bf:f9:12:af:19:50:b3:69:e0:
                    94:60:19:df:ad:5b:70:5c:fe:0c:c9:b0:d7:9d:22:
                    4d:e5:77:99:55:4f:c8:e8:f8:bc:a3:73:a4:e6:11:
                    42:07:8c:bb:4e:3f:72:aa:f3:36:0a:82:08:41:f5:
                    d2:13:74:2e:0d:42:5a:b2:1d:e5:ac:dd:1f:d8:34:
                    5d:6d:19:d6:9e:da:bf:4e:8a:73:d2:66:a7:4f:39:
                    e0:9a:c3:4e:06:ca:46:0f:37:58:aa:03:fc:55:51:
                    9c:64:84:5f:df:8e:c3:bd:87:8a:dc:fd:65:7b:c3:
                    59:1f:1b:2e:9a:29:ee:b2:88:dc:35:a3:c2:5b:c1:
                    ae:b5:7f:0c:34:a9:b5:d6:19:61:a1:fa:3d:6d:70:
                    a8:01:55:83:77:96:fd:32:33:9e:94:31:2e:a8:c1:
                    75:07:ef:d6:81:2c:17:07:de:e4:30:e9:73:57:06:
                    aa:a0:a5:1a:40:50:58:6b:0c:bc:91:8c:3e:91:65:
                    36:ea:7a:15:f5:7d:fd:d2:82:f7:89:80:93:b1:ae:
                    8a:85:21:5a:59:19:89:9c:0e:10:a6:27:95:99:63:
                    3d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E8:E6:1B:AF:18:81:DE:D9:5F:94:3B:BE:E0:CB:39:6C:35:69:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/73009017-4a88-31ff-a91e-0e3d8e4f5560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.243.0-23.170.244.255
                  23.170.246.0/24
                  23.170.248.0/23
                  23.170.252.0-23.170.254.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:cf:30:66:a1:ce:1f:f7:c1:49:62:51:b3:42:83:4f:28:4b:
         4e:68:42:07:72:f1:4f:15:ae:ac:2e:4e:e4:ed:14:2d:64:1b:
         7e:71:a3:be:46:58:9a:92:1a:e0:7c:3d:4c:ca:cd:ee:d6:31:
         c2:6a:ee:67:40:14:32:0e:d5:4b:0b:18:2f:74:0e:32:f6:f7:
         34:29:d7:48:6d:52:b4:82:0a:ae:61:f5:0c:2d:6f:a6:5a:76:
         fd:a7:ae:75:e0:dd:a5:d9:65:b1:79:46:d1:12:60:34:68:16:
         32:82:0c:e3:a0:a2:8d:12:b4:e2:ec:a0:61:3e:1b:81:42:ab:
         ab:e0:6a:1e:dd:a2:b1:79:a9:a8:b4:12:21:f7:58:ca:80:c1:
         99:eb:f9:33:90:b3:27:5f:c2:5a:19:7c:70:ce:61:1f:73:39:
         f9:bd:8e:92:91:13:a3:d2:9a:65:36:70:09:d2:c8:41:df:a9:
         ff:71:7b:f2:15:57:c1:ae:0d:1f:a9:b6:9d:f7:34:c5:e7:8a:
         dc:4e:06:15:c9:84:fd:c9:f0:1a:3d:ee:ff:b2:13:9d:e4:65:
         0e:af:bd:71:13:b5:f0:2b:f5:12:83:d9:8e:1b:0d:48:6d:93:
         bc:75:28:70:fb:2f:0d:67:0c:3f:87:76:ba:89:24:74:61:df:
         b2:15:2f:a4
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEsmJeVLC/8AUe3QZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4
OGRmMB4XDTI1MDkxMDEyMDQ1N1oXDTI1MTIwOTEzMDQ1N1owLzEtMCsGA1UEAxMk
NDk0NzY5NWItNjBlYS00Y2JhLTk0ZjAtYzk3N2I3MmRmN2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvDGj3ZC9RXkyUNbG2Awm4j6OD8rTsfO+wWl
fS2wG+rTOAi/+RKvGVCzaeCUYBnfrVtwXP4MybDXnSJN5XeZVU/I6Pi8o3Ok5hFC
B4y7Tj9yqvM2CoIIQfXSE3QuDUJash3lrN0f2DRdbRnWntq/Topz0manTzngmsNO
BspGDzdYqgP8VVGcZIRf347DvYeK3P1le8NZHxsuminusojcNaPCW8GutX8MNKm1
1hlhofo9bXCoAVWDd5b9MjOelDEuqMF1B+/WgSwXB97kMOlzVwaqoKUaQFBYawy8
kYw+kWU26noV9X390oL3iYCTsa6KhSFaWRmJnA4QpieVmWM9xQIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFA/o5huvGIHe2V+UO77gyzlsNWnnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5
NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvNzMwMDkwMTctNGE4OC0z
MWZmLWE5MWUtMGUzZDhlNGY1NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4
OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl
ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2
YmJkZTg4ZGYuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAAXqvMD
BAAXqvQDBAAXqvYDBAEXqvgwDAMEAheq/AMEABeq/jBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC+zzBmoc4f
98FJYlGzQoNPKEtOaEIHcvFPFa6sLk7k7RQtZBt+caO+RliakhrgfD1Mys3u1jHC
au5nQBQyDtVLCxgvdA4y9vc0KddIbVK0ggquYfUMLW+mWnb9p6514N2l2WWxeUbR
EmA0aBYyggzjoKKNErTi7KBhPhuBQqur4Goe3aKxeamotBIh91jKgMGZ6/kzkLMn
X8JaGXxwzmEfczn5vY6SkROj0pplNnAJ0shB36n/cXvyFVfBrg0fqbad9zTF54rc
TgYVyYT9yfAaPe7/shOd5GUOr71xE7XwK/USg9mOGw1IbZO8dShw+y8NZww/h3a6
iSR0Yd+yFS+k
-----END CERTIFICATE-----
Generated at Sat Oct 11 04:50:31 2025 by rpki-client