Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa
File:                     988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa (raw, json)
Hash identifier:          IjmsODehasFiuvLJc2OEpd7XOHGMApa+BEYsAe12Ktg=
Subject key identifier:   63:33:BB:2E:AD:09:AC:D6:03:20:F4:CC:0E:FC:FA:0F:16:FE:62:A1
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328584B2066CB498DBEE5D1BCC5F300
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     14445
IP address blocks:        23.170.240.0/24 maxlen: 24
                          23.170.243.0/24 maxlen: 24
                          23.170.246.0/24 maxlen: 24
                          23.170.247.0/24 maxlen: 24
                          23.170.249.0/24 maxlen: 24
                          23.170.254.0/24 maxlen: 24
                          216.73.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:cb:49:8d:be:e5:d1:bc:c5:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=de22f582-155b-40b1-ba1e-0f37f97b9384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:60:67:19:2c:b3:5e:37:69:8c:e3:f5:48:
                    86:ec:de:53:35:f4:ea:bc:ba:85:10:a7:c1:60:b7:
                    b1:db:59:a8:8c:95:e6:ff:fd:47:cd:17:2f:86:0e:
                    97:69:41:ab:73:24:21:e2:a5:b1:e6:5e:37:d9:77:
                    a4:c3:79:e1:dd:3b:bf:36:6c:71:e4:cf:15:75:04:
                    75:56:74:da:3b:79:4d:20:4d:85:b3:61:5a:cc:81:
                    86:e7:e0:8b:71:dc:ae:7e:cf:2b:78:02:ea:d6:a4:
                    0e:ce:39:c8:0a:a2:af:42:b9:61:68:d8:3e:2a:84:
                    69:28:82:28:0c:d0:b1:37:fb:8e:ce:b2:da:74:41:
                    78:02:ff:dd:58:4f:29:5b:e8:07:f3:40:e5:30:d0:
                    b7:9c:47:17:f4:60:14:76:fb:89:a6:e6:e1:7d:19:
                    19:a5:47:4e:5c:42:27:15:d3:76:7b:6e:28:da:20:
                    9f:6d:33:79:61:f9:31:63:92:1b:2e:04:7d:b1:3c:
                    87:24:a6:fc:f2:e4:09:99:0e:ef:81:05:63:68:1c:
                    02:e6:83:d8:a9:53:95:37:2a:1b:db:d8:90:ac:af:
                    5f:7d:64:92:85:c9:04:7d:25:8d:58:44:50:f6:cf:
                    2f:34:b2:13:08:6b:d9:ef:a8:71:2f:c6:60:28:49:
                    96:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:33:BB:2E:AD:09:AC:D6:03:20:F4:CC:0E:FC:FA:0F:16:FE:62:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.240.0/24
                  23.170.243.0/24
                  23.170.246.0/23
                  23.170.249.0/24
                  23.170.254.0/24
                  216.73.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1a:4d:52:e6:56:43:23:e7:8c:21:cd:fa:05:1e:a7:48:57:
         d5:2e:f0:30:b8:db:d4:bd:eb:c7:bf:b5:11:a4:d0:74:35:f7:
         39:ad:62:02:ca:8e:d4:32:1f:74:f3:86:2a:4e:a9:f0:a0:09:
         aa:19:dd:d0:ca:7e:29:fd:5b:a3:4c:af:22:aa:08:28:d6:fc:
         03:90:4e:f4:e4:5e:59:9f:65:f2:7d:02:ff:19:52:67:0b:cd:
         8f:65:5f:61:73:51:26:ac:03:ad:ce:54:06:f1:36:84:55:fe:
         f8:ec:54:d8:cb:16:cf:54:89:fc:4b:25:ea:d4:04:ae:49:86:
         61:67:f7:eb:02:8f:6d:49:6a:63:a2:ac:3a:bb:f3:4a:c7:de:
         6d:23:ac:a2:12:ff:4e:cf:e7:8a:cd:fa:7c:35:49:b8:a0:81:
         2d:82:3e:90:5e:c9:b1:85:40:33:25:a8:ad:70:b3:16:69:bb:
         90:d0:8a:75:82:13:52:5d:dc:ed:d3:c9:00:93:bd:36:3a:c5:
         b8:79:2d:7b:4e:5d:87:50:49:4f:79:23:75:94:ff:42:e9:ae:
         bd:73:73:77:e6:80:8c:8b:d1:08:c7:16:ab:5c:8e:70:27:a7:
         68:53:37:c9:e2:3c:7a:34:36:f3:42:6b:b4:9e:20:a5:ca:63:
         9b:6c:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:10:23 2025 by rpki-client