Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa
File:                     988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa (raw, json)
Hash identifier:          abs9GyufksWwu9r/Ilq8DqWIxJl/ZeXsdOdpByYzqHg=
Subject key identifier:   85:37:19:23:A7:18:25:28:6F:E9:8D:80:74:1B:C2:10:D9:6E:35:DF
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328584949FE8824B70D799E6A82DE00
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     14445
IP address blocks:        23.170.240.0/24 maxlen: 24
                          23.170.243.0/24 maxlen: 24
                          23.170.245.0/24 maxlen: 24
                          23.170.246.0/24 maxlen: 24
                          23.170.247.0/24 maxlen: 24
                          23.170.249.0/24 maxlen: 24
                          23.170.254.0/24 maxlen: 24
                          216.73.149.0/24 maxlen: 24
                          216.73.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:88:24:b7:0d:79:9e:6a:82:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=f83dff19-9b2d-4628-bd6d-df68a240fd29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e7:c1:f6:34:37:cb:26:48:1b:a7:b2:c4:0d:
                    e9:30:65:4e:e4:35:ae:b6:18:6c:77:a2:26:0a:9b:
                    5a:b8:44:37:6a:e6:c1:bc:19:b6:08:b7:2d:2d:c0:
                    59:4e:d5:33:4b:55:24:66:c0:ac:18:2c:81:7c:86:
                    cc:bc:76:08:83:3f:43:bc:07:0f:8e:73:c3:a1:6a:
                    cf:20:31:d4:8d:5c:f7:c6:21:77:95:a3:e5:ce:62:
                    c3:5c:2a:f3:b3:bd:89:c6:e5:d4:2d:be:0a:4c:80:
                    ac:87:b0:36:38:e9:2b:37:34:3f:5d:d7:6b:17:1b:
                    3b:de:c9:57:ab:d7:8f:df:73:9b:2a:90:74:e7:40:
                    f8:85:05:e9:d5:eb:07:ba:bc:f5:0a:ea:12:bc:1d:
                    dc:2e:f2:67:62:83:e8:f5:63:12:0a:d8:f9:47:f9:
                    9e:48:4f:b5:a5:71:31:30:30:07:05:ae:61:5d:29:
                    f9:fd:ba:2d:38:b6:55:40:2c:f5:14:07:e6:52:7a:
                    28:89:18:a0:21:dc:43:d1:9a:8e:08:6b:fc:a0:94:
                    7e:82:db:05:01:3b:31:7e:1f:65:a3:18:e4:a4:3c:
                    04:27:f4:ff:11:53:54:84:10:07:bd:9f:b9:f4:fc:
                    67:66:95:4b:b8:51:25:76:78:c6:8a:2b:16:a0:0f:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:37:19:23:A7:18:25:28:6F:E9:8D:80:74:1B:C2:10:D9:6E:35:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.240.0/24
                  23.170.243.0/24
                  23.170.245.0-23.170.247.255
                  23.170.249.0/24
                  23.170.254.0/24
                  216.73.149.0-216.73.150.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:80:4c:b1:ec:7b:c6:75:2e:a1:b9:c1:16:53:ca:e9:6f:83:
         13:fa:82:7a:e1:41:3e:a1:26:86:53:41:71:44:24:4b:ca:5a:
         d3:ae:52:b6:ef:a2:7a:44:7c:3b:43:51:cf:4c:12:c4:d2:e5:
         bd:10:2c:bf:24:10:0c:7c:be:f0:16:d8:f5:89:3f:2c:e1:a8:
         1b:d1:59:09:a6:fc:09:28:99:9a:4a:92:6a:a8:00:fe:ed:f0:
         12:b5:65:ac:bf:03:8a:6f:ea:cf:98:15:83:3a:9d:6a:07:b0:
         81:a8:14:51:ea:a3:a0:c4:f7:11:48:38:85:b1:1d:c5:e0:c7:
         8d:eb:38:3d:96:97:b3:1e:50:71:44:a4:c8:15:6e:ba:7e:33:
         25:99:db:7f:90:6c:24:4f:a5:3f:a2:ec:e1:aa:72:9a:99:0b:
         09:b8:3c:a7:e6:e8:2e:81:81:29:d9:b1:7e:5d:dd:1c:42:a7:
         88:43:c4:50:28:13:23:c3:e3:ed:57:70:3d:54:91:0d:33:a7:
         63:d8:58:e0:66:6c:ba:1c:87:9f:d9:19:b4:1e:c5:e2:8e:61:
         a4:81:6c:bb:8d:18:41:27:da:a3:fd:e6:80:28:fe:ed:ad:94:
         06:4d:5e:49:9c:a2:a8:88:58:73:c3:1b:53:2a:a8:d7:b3:d6:
         54:16:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:07 2025 by rpki-client