Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa
File:                     988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa (raw, json)
Hash identifier:          tkMsEy5z7FmWPKu3VUNf4oma1SV+BvDGOCE9t1Xds/Q=
Subject key identifier:   2C:2C:64:8E:65:A8:E7:B1:99:29:B9:60:C2:FE:A9:2C:85:20:EE:9F
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328584789EBF3FB397FC43AD4DEB300
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     14445
IP address blocks:        23.170.240.0/24 maxlen: 24
                          23.170.243.0/24 maxlen: 24
                          23.170.245.0/24 maxlen: 24
                          23.170.246.0/24 maxlen: 24
                          23.170.247.0/24 maxlen: 24
                          23.170.249.0/24 maxlen: 24
                          23.170.254.0/24 maxlen: 24
                          216.73.149.0/24 maxlen: 24
                          216.73.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:f3:fb:39:7f:c4:3a:d4:de:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=6135cce1-be14-4a72-a20e-acb5f3ed12e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:f6:3e:dd:2c:3f:b6:7b:46:ee:ec:8d:81:
                    af:fa:14:da:4a:ef:c9:1d:cc:a2:d7:b8:9c:dc:03:
                    b7:88:96:1d:b0:24:d2:3e:12:66:18:63:8e:67:3d:
                    46:99:6e:28:1f:ca:35:77:32:63:10:53:39:be:16:
                    27:f6:35:dd:6e:3d:4e:c2:8c:e4:c5:c8:bb:f5:e7:
                    42:3e:7f:e8:ea:09:75:ab:f0:fb:0e:ab:1f:56:7b:
                    47:94:5b:8d:2b:7e:ac:1f:93:99:78:09:8a:be:d8:
                    22:63:ef:17:da:09:ed:29:bb:9e:03:b4:94:f0:24:
                    f5:9c:21:96:02:cc:21:8b:38:1c:bc:ee:da:83:48:
                    0a:b9:24:ef:b7:33:d2:82:08:40:7f:3f:98:37:40:
                    c1:6b:5a:cd:35:a0:fc:1b:a7:4e:10:31:5e:4a:2e:
                    64:8c:aa:82:a9:0a:f3:7d:4b:c7:a9:af:8f:ac:ac:
                    df:23:f4:5f:95:41:69:8f:e7:ba:0c:a4:f2:a6:ad:
                    8f:16:9d:fd:ba:f9:7d:ed:49:62:69:c0:cb:0d:fd:
                    ec:43:06:36:8a:9d:db:d1:8c:e4:b4:38:ac:7d:c8:
                    70:85:d9:23:cd:9e:06:b8:1e:e4:8f:12:55:d5:30:
                    65:de:f1:2a:8f:59:ed:07:b2:25:60:bd:8f:36:1f:
                    36:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2C:64:8E:65:A8:E7:B1:99:29:B9:60:C2:FE:A9:2C:85:20:EE:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.240.0/24
                  23.170.243.0/24
                  23.170.245.0-23.170.247.255
                  23.170.249.0/24
                  23.170.254.0/24
                  216.73.149.0-216.73.150.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ce:de:d6:40:4e:a8:4f:a4:71:08:fa:85:fa:63:d3:4a:6b:
         fc:6d:ec:c1:6c:a8:d7:5d:0f:bd:44:4a:9c:68:22:93:70:cf:
         62:e7:f2:6d:50:e1:7c:96:2d:fa:1c:3d:9b:50:ed:7f:c6:46:
         bb:83:a9:95:43:eb:35:cb:a5:0e:f7:de:ec:81:82:82:94:60:
         c4:6a:d0:30:8e:7d:52:25:50:57:a4:45:59:02:a8:84:8c:e1:
         da:99:bd:d4:e3:44:b7:fc:15:9f:e1:41:66:e6:78:a4:da:36:
         11:ef:4a:44:2d:78:d0:d7:10:a3:08:dd:2a:b6:a4:60:eb:ff:
         c9:c3:5c:51:ca:5e:d9:c3:d5:4e:ab:3b:7d:d2:26:89:d9:31:
         e1:6a:ae:61:ca:de:0b:21:42:ee:93:eb:71:36:bd:3d:00:1e:
         26:d3:c3:8d:77:77:c2:47:20:48:bf:3e:10:26:f5:43:80:4c:
         e1:6b:22:9f:b2:70:ac:3a:e5:39:7c:4c:61:eb:20:09:35:25:
         f7:00:f9:c8:83:91:7b:7c:a5:38:48:7c:8f:4e:c2:b4:6f:90:
         c4:c2:c7:a8:a0:9a:35:bb:68:25:ab:21:97:4d:e9:a1:84:dc:
         ae:2a:e2:a3:46:5d:30:d9:62:ba:ab:65:97:77:f5:2f:ec:06:
         f1:c3:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:37 2024 by rpki-client on console-fra.rpki-client.org