Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa
File:                     74d043bc-e479-3a7a-9a76-aacaabb89db4.roa (raw, json)
Hash identifier:          N1XIy7rysKKrbLAbGgwDPyo11PE0RydVAsL5vBDqupw=
Subject key identifier:   4D:0A:8E:82:AB:F6:46:06:6D:23:F8:6F:A8:73:55:4F:43:81:04:A8
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F432858485F9ADE76EA377C43B5F76400
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa
Signing time:             Mon 30 Dec 2024 02:00:39 +0000
ROA not before:           Mon 30 Dec 2024 02:00:39 +0000
ROA not after:            Sun 30 Mar 2025 01:00:39 +0000
asID:                     14445
IP address blocks:        23.136.184.0/24 maxlen: 24
                          23.170.241.0/24 maxlen: 24
                          23.170.242.0/24 maxlen: 24
                          23.170.244.0/24 maxlen: 24
                          23.170.248.0/24 maxlen: 24
                          23.170.250.0/24 maxlen: 24
                          23.170.251.0/24 maxlen: 24
                          23.170.252.0/24 maxlen: 24
                          23.170.253.0/24 maxlen: 24
                          23.170.255.0/24 maxlen: 24
                          45.42.178.0/24 maxlen: 24
                          45.42.179.0/24 maxlen: 24
                          216.73.148.0/24 maxlen: 24
                          216.73.151.0/24 maxlen: 24
                          2606:18c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Mar 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5f:9a:de:76:ea:37:7c:43:b5:f7:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Dec 30 02:00:39 2024 GMT
            Not After : Mar 30 01:00:39 2025 GMT
        Subject: CN=760938b9-26d9-48d5-9fb1-cc70692cd211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:84:0d:10:6c:f4:63:aa:ae:5d:ef:90:c7:9d:
                    f0:37:eb:4b:01:0f:e0:0d:cb:84:d1:35:4c:54:32:
                    cd:72:d3:f2:1e:fe:ce:05:f1:77:b2:f7:d4:7c:ff:
                    be:96:e7:8d:c7:1d:56:ee:fb:1d:eb:c3:1d:16:ca:
                    17:0c:45:87:81:1e:7b:90:b1:54:c9:29:56:9d:99:
                    37:66:c4:07:ef:b4:c6:ed:d0:6d:86:8b:68:94:26:
                    fe:23:72:61:57:74:52:a1:8c:04:df:c2:e1:d5:4f:
                    58:0b:0b:d0:97:e2:bf:4b:a3:2e:aa:c5:d5:ac:75:
                    eb:0d:f6:63:e1:ab:66:61:a7:ae:34:41:84:53:af:
                    d7:cc:c2:bd:fc:55:0b:2a:f3:03:46:d9:1b:cd:39:
                    fe:74:4c:f5:f4:1c:c0:f5:90:a1:35:11:5c:03:3e:
                    d6:fc:5d:54:c9:da:17:16:28:dc:f9:7d:48:a1:6e:
                    2e:02:08:32:e1:32:9a:d0:a3:c3:62:bd:b5:ee:bb:
                    3c:d8:0b:6d:1b:2f:31:d9:54:bb:b1:fa:b6:33:2a:
                    9d:62:27:43:5b:73:72:5c:c3:13:8e:fd:c5:d8:16:
                    40:61:8c:b2:3c:53:8b:c7:f9:68:df:cc:f4:af:f5:
                    49:70:68:e7:07:2c:6d:9b:f2:e1:82:cf:0b:f3:df:
                    96:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0A:8E:82:AB:F6:46:06:6D:23:F8:6F:A8:73:55:4F:43:81:04:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.184.0/24
                  23.170.241.0-23.170.242.255
                  23.170.244.0/24
                  23.170.248.0/24
                  23.170.250.0-23.170.253.255
                  23.170.255.0/24
                  45.42.178.0/23
                  216.73.148.0/24
                  216.73.151.0/24
                IPv6:
                  2606:18c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:1a:e4:3b:58:c1:c9:5c:bb:4e:d0:aa:7b:61:cf:9d:ea:34:
         e9:76:fe:e7:82:c6:1a:50:93:87:3a:72:88:e8:5f:6d:8f:3b:
         f1:7d:c8:e6:21:da:87:75:f7:f9:ed:33:8b:6b:84:36:5e:da:
         54:d0:82:d6:bb:b0:04:78:0d:78:b9:21:5c:4a:c6:73:0a:a7:
         03:52:ca:ac:89:81:9b:6f:70:f6:61:0b:9c:fb:eb:3f:78:67:
         6d:14:0b:d5:81:5b:de:cf:c6:5f:a8:7c:26:3b:73:9c:8b:ef:
         be:38:1f:c8:55:bf:58:eb:ae:8f:da:a5:ce:6d:2e:34:ff:26:
         8b:71:1a:36:ab:ea:3b:29:24:8b:88:22:43:66:0e:d7:21:93:
         42:b2:d4:ab:75:73:1c:67:e7:32:f5:e7:76:02:bc:40:e6:7e:
         a8:e3:26:8d:32:f4:83:be:c5:a5:6c:bf:4f:31:92:00:cc:d3:
         dc:c2:7a:72:05:d2:a4:88:28:03:c4:d6:db:cf:2f:04:a3:44:
         5d:89:b6:f6:eb:f2:92:b1:45:cb:e0:82:78:6c:33:3a:52:29:
         98:8f:17:b0:bc:e0:5f:ac:7b:f9:a0:75:dd:8c:c9:ab:9a:fe:
         fd:79:dc:f2:33:0e:fc:cd:08:b7:f5:1d:7b:b0:c1:ef:85:48:
         1e:6e:e2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 18 21:00:47 2025 by rpki-client