Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/39d4d81e-6e29-39ae-ac5f-d34ef20b5191.roa
File:                     39d4d81e-6e29-39ae-ac5f-d34ef20b5191.roa (raw, json)
Hash identifier:          u/Gi4CWqcNBOZhb2EORKEMQOet8xLh5J4tbPp+80xIY=
Subject key identifier:   7B:D7:2B:7F:13:F9:2C:EF:FF:FD:E2:A9:5F:E8:0F:64:8D:BF:DB:9C
Certificate issuer:       /CN=fcd81970-919f-4ccd-9c85-01ebf75cf163
Certificate serial:       010D0C9F432858495ABEE2480ABEF0178E869840
Authority key identifier: 15:45:93:8C:DA:F3:BA:38:37:A8:8E:22:2B:BE:0C:E9:2D:E0:5E:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/39d4d81e-6e29-39ae-ac5f-d34ef20b5191.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     986
IP address blocks:        23.142.192.0/24 maxlen: 24
                          23.247.228.0/22 maxlen: 22
                          161.129.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/fcd81970-919f-4ccd-9c85-01ebf75cf163.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/fcd81970-919f-4ccd-9c85-01ebf75cf163.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e2:48:0a:be:f0:17:8e:86:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd81970-919f-4ccd-9c85-01ebf75cf163
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=f81a3c5a-e92d-44c8-945b-7dea3e943247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:61:f7:a1:26:d6:6d:c4:14:c4:43:5e:b8:
                    50:5b:e3:4c:26:f6:66:3c:e0:f0:02:de:f7:92:eb:
                    e4:e5:b8:a6:06:f2:1a:0b:28:17:a1:99:f4:f6:38:
                    91:cd:5b:6d:70:df:b2:38:e3:ad:75:1e:8a:91:45:
                    4c:79:f2:c6:59:3d:cd:54:fa:0c:70:a8:70:a3:c0:
                    22:d1:ed:14:c0:08:70:fa:da:1a:f2:1b:05:61:d4:
                    b0:db:b5:e2:00:24:41:1e:8e:cc:c3:b7:8f:05:d3:
                    dc:43:66:b7:b6:1e:58:8b:ec:02:57:e9:57:c4:73:
                    f6:12:9e:77:44:37:2b:5d:b0:56:6e:ad:cd:95:7e:
                    61:9c:a2:2c:51:98:27:b0:f9:31:e9:5b:93:44:ca:
                    a1:f3:41:bc:23:74:34:ce:1c:ca:a9:28:f5:fc:6c:
                    b0:94:3e:2e:a7:d9:f9:cb:14:4e:2b:f2:af:99:ef:
                    e4:24:37:9f:ec:79:6e:bb:5a:f6:98:77:21:d5:73:
                    81:47:c3:48:be:df:7d:96:4e:41:03:78:a9:d9:25:
                    1d:4f:6d:22:13:92:57:6f:d1:23:9a:06:69:44:cf:
                    d8:56:fa:08:38:aa:5e:64:3c:3b:03:18:40:da:b4:
                    ac:b3:8e:54:40:06:8a:e0:bc:df:36:cb:eb:9a:4b:
                    0f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D7:2B:7F:13:F9:2C:EF:FF:FD:E2:A9:5F:E8:0F:64:8D:BF:DB:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/39d4d81e-6e29-39ae-ac5f-d34ef20b5191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/fcd81970-919f-4ccd-9c85-01ebf75cf163.crl

            X509v3 Authority Key Identifier:
                keyid:15:45:93:8C:DA:F3:BA:38:37:A8:8E:22:2B:BE:0C:E9:2D:E0:5E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.192.0/24
                  23.247.228.0/22
                  161.129.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:19:f2:e3:80:08:81:1e:47:14:c3:f5:25:cb:7e:24:e4:a2:
         45:44:f6:22:aa:c4:ed:bf:3d:cd:f8:9f:c5:58:fd:3f:43:d6:
         97:e1:30:72:e0:bc:c7:f4:97:ba:82:8f:3b:ab:df:f2:38:cd:
         b2:c0:3e:d7:75:29:8c:8f:79:8d:a8:b3:0f:e4:95:c1:e8:cb:
         ef:6f:32:fe:a0:21:6d:7e:c9:b6:4c:04:b2:cf:a9:8c:e7:60:
         01:91:31:21:82:d7:90:a6:3d:3d:de:24:94:61:64:74:43:01:
         9d:a3:35:2c:60:0c:8e:54:4e:3c:2d:8d:8d:f5:f5:74:e0:57:
         f1:af:cc:2c:c3:36:68:67:4d:a5:83:34:50:ff:46:e1:5e:e2:
         12:23:11:38:87:81:9d:ff:5e:31:83:62:2e:a9:61:d7:45:af:
         db:ce:e1:f4:dd:57:c4:8b:9a:14:c5:30:60:45:42:58:1f:cf:
         c5:32:f6:39:ee:c4:8e:9f:01:66:28:ef:c1:b3:37:dc:c4:4f:
         e3:44:34:cc:4c:63:06:3a:c6:1d:1d:6a:c4:c3:8b:f6:e7:7d:
         32:d0:59:19:5e:1b:25:a5:35:7e:1d:45:52:a8:0a:13:07:c8:
         4a:0a:f9:9e:8b:5c:48:ef:93:c0:7e:95:02:5e:fe:29:ca:ef:
         ec:24:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:27 2025 by rpki-client