Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/87fba722-5dc2-3c90-8573-bed0796d43f1.roa
File:                     87fba722-5dc2-3c90-8573-bed0796d43f1.roa (raw, json)
Hash identifier:          +R5STsLVdL+IKIht+GupdoDq1P26Yt4Ne9BSl6NhO1Y=
Subject key identifier:   29:AD:9E:53:47:70:38:55:E3:24:33:3B:EA:3C:49:06:31:30:77:B0
Certificate issuer:       /CN=30040710-7ccf-4c85-98c7-8d6246d146f5
Certificate serial:       010D0C9F432858491246C7F721F2FA571251CF00
Authority key identifier: 88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/87fba722-5dc2-3c90-8573-bed0796d43f1.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     399478
IP address blocks:        23.176.240.0/24 maxlen: 24
                          2620:95:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:c7:f7:21:f2:fa:57:12:51:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30040710-7ccf-4c85-98c7-8d6246d146f5
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=246b99ce-1e2c-4a4c-8f0a-678a76ed9cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:00:26:d5:3f:e4:63:9c:32:f7:36:fc:36:
                    ff:e2:8e:ad:34:b7:9c:79:89:d3:12:25:da:ec:0c:
                    92:6a:1f:4a:3b:2f:4d:75:c7:eb:e0:94:1f:47:39:
                    24:cc:f9:09:e7:87:58:bd:a2:61:a7:a2:6a:66:55:
                    f5:63:32:8e:dc:74:44:71:10:cc:95:bb:b3:a7:9c:
                    94:93:2a:ca:5d:ce:72:22:aa:a2:4c:59:6c:a8:4d:
                    67:ff:89:f5:2d:02:4b:1f:3a:14:01:98:26:27:0f:
                    01:89:c9:5a:5f:df:e4:43:59:47:a7:de:46:a7:c0:
                    1a:2d:eb:79:9d:3b:d9:04:84:7c:9e:27:cf:99:6e:
                    34:b2:2e:6e:52:f2:8c:96:0d:cb:78:26:6f:3a:a6:
                    58:ea:05:81:4e:d3:97:43:f0:fb:91:a5:ab:b4:6a:
                    57:5a:93:56:0f:4f:b8:f2:d7:ea:85:74:18:12:a1:
                    21:28:49:02:15:65:be:52:a2:62:82:27:ec:28:4f:
                    f0:af:0f:2e:d2:61:06:22:40:f5:f0:46:6f:c3:32:
                    fc:67:3b:91:ec:34:ac:0b:0b:b0:2d:5e:74:17:e3:
                    9a:f0:a7:cc:be:53:45:b4:7f:f7:dc:ab:c7:f9:6d:
                    13:9f:64:ae:25:3c:d6:67:d9:38:01:6c:e0:b7:64:
                    51:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AD:9E:53:47:70:38:55:E3:24:33:3B:EA:3C:49:06:31:30:77:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/87fba722-5dc2-3c90-8573-bed0796d43f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5/30040710-7ccf-4c85-98c7-8d6246d146f5.crl

            X509v3 Authority Key Identifier:
                keyid:88:49:6C:9A:06:41:D7:B2:2E:6D:FF:EC:B6:CD:24:5B:B7:BB:0A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/30040710-7ccf-4c85-98c7-8d6246d146f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.240.0/24
                IPv6:
                  2620:95:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:06:ee:c1:4a:15:45:ab:5d:72:7e:8d:b0:4b:82:e4:e8:1f:
         e8:19:b2:a3:ed:02:be:cf:93:4a:5b:be:44:d8:76:e7:0f:c7:
         f2:8d:28:a1:01:5b:74:a7:b1:d1:28:06:33:46:c1:2e:ca:6d:
         b0:2b:9e:ec:3f:3b:dc:ae:2a:8d:6a:df:51:a4:77:79:66:35:
         52:15:5f:b6:53:fb:2e:40:48:08:9d:04:36:cd:dc:d5:a7:5e:
         06:93:5d:9a:0e:38:fe:6f:83:23:53:f4:42:d9:eb:07:f1:99:
         4f:46:2a:d4:fe:a2:97:f7:1f:81:e5:9a:73:81:47:7b:2f:ba:
         34:41:87:7c:09:a8:53:fc:c2:fb:75:7f:e5:f4:f5:f6:1f:84:
         0d:ad:35:40:08:54:d7:ae:ea:ce:67:f7:f6:09:7f:81:50:59:
         ff:26:27:de:d0:7f:0d:6d:34:b5:f2:e8:79:6b:c7:19:13:75:
         15:08:8d:44:9a:6d:4b:2c:3c:52:8a:1e:7e:eb:ac:98:95:db:
         31:97:87:69:d3:89:f9:83:07:a2:bb:f9:80:98:f8:79:99:b3:
         14:1d:9d:37:a9:db:51:90:3e:3c:87:cb:17:7a:32:71:7e:d8:
         3e:57:f5:c9:e1:ab:57:9a:66:b1:81:97:7b:e7:b4:be:c2:7e:
         70:d4:36:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:35 2025 by rpki-client