Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa
File:                     988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa (raw, json)
Hash identifier:          Obt/7SuYKnx4l9Xr4IrxnLg0tBFPWoWS9Evd7fW/kO4=
Subject key identifier:   F8:2E:79:99:3A:E0:D9:9F:9D:81:6A:B0:F2:5F:42:F3:2C:F8:D3:FA
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F43285844EA9FEE0A3D043B52BBFDA100
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa
Signing time:             Sat 17 Feb 2024 02:00:27 +0000
ROA not before:           Sat 17 Feb 2024 02:00:27 +0000
ROA not after:            Fri 17 May 2024 01:00:27 +0000
asID:                     14445
IP address blocks:        23.170.245.0/24 maxlen: 24
                          23.170.243.0/24 maxlen: 24
                          23.170.247.0/24 maxlen: 24
                          23.170.246.0/24 maxlen: 24
                          23.170.254.0/24 maxlen: 24
                          23.170.249.0/24 maxlen: 24
                          23.170.240.0/24 maxlen: 24
                          216.73.150.0/24 maxlen: 24
                          216.73.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Mar 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ea:9f:ee:0a:3d:04:3b:52:bb:fd:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Feb 17 02:00:27 2024 GMT
            Not After : May 17 01:00:27 2024 GMT
        Subject: CN=f4461ccd-9ffb-4ac0-8d0e-9331e34a7f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:85:fd:56:5b:33:bc:68:5c:02:74:c0:25:
                    f5:7d:4d:00:fc:86:54:aa:0c:96:0f:8a:66:1a:22:
                    3b:13:f0:fd:0d:6f:fe:d7:b0:11:94:49:be:b2:cb:
                    fd:c3:3b:8c:2f:b9:25:f5:84:af:70:56:de:a4:fb:
                    2b:51:e5:21:2d:c7:90:57:b0:c7:07:79:11:dc:81:
                    18:b1:da:26:c5:88:37:85:31:c4:02:bd:0a:13:99:
                    c5:e2:10:a8:80:61:fb:2e:4c:2c:e5:e6:0f:f6:9a:
                    8a:5b:88:15:33:6a:3c:15:82:bb:9d:1f:4e:6c:8a:
                    a5:b7:e0:ce:dc:bc:ff:85:79:f2:69:9a:db:f8:b3:
                    a4:e9:85:8a:00:8d:09:20:3e:e1:4c:35:bf:8a:0c:
                    06:09:63:27:ba:74:d0:c8:ee:d6:58:ec:7b:3a:c2:
                    b6:83:c1:81:02:4a:1c:d2:bb:ed:15:f1:6b:dd:3e:
                    71:21:28:71:7c:17:da:9e:fa:e7:6c:83:94:ba:37:
                    e0:f2:2f:b2:28:e4:7b:27:4b:03:63:11:67:b8:fa:
                    e5:53:9f:69:fe:e9:89:01:4f:22:71:c1:c3:42:d1:
                    95:0c:51:2a:7f:87:d7:23:be:3d:66:27:f1:06:bf:
                    85:4e:83:c3:bf:41:e6:fb:4e:ce:a0:c9:fb:5a:5b:
                    35:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2E:79:99:3A:E0:D9:9F:9D:81:6A:B0:F2:5F:42:F3:2C:F8:D3:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.240.0/24
                  23.170.243.0/24
                  23.170.245.0-23.170.247.255
                  23.170.249.0/24
                  23.170.254.0/24
                  216.73.149.0-216.73.150.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:bb:96:2f:4b:7e:1b:c6:d6:4a:21:4d:90:39:23:cb:cf:c4:
         5d:e9:ec:35:46:7f:5f:a7:75:8c:ab:a8:f6:db:96:22:f1:a1:
         b7:fa:4a:50:59:46:01:2f:b0:d1:bd:75:ef:29:ce:62:f3:8f:
         69:f6:90:50:07:74:30:c5:40:02:58:89:a9:8e:13:20:23:17:
         93:35:bd:2f:2f:4b:e1:ad:a8:da:7e:90:26:be:57:16:72:be:
         e4:c2:bf:85:5d:5f:c6:99:cf:37:5f:c6:9d:67:0b:a5:1c:ab:
         20:dc:27:3c:39:5f:0c:5e:5f:59:b5:5d:7f:b3:2f:94:6e:c9:
         a8:f5:1d:6f:15:68:f5:eb:af:63:f6:cf:5a:d7:f8:4d:7a:77:
         d3:1f:a9:64:41:fe:a0:70:2b:64:aa:0e:0d:61:26:a8:01:7e:
         85:3f:46:c4:f5:d1:50:ec:c0:99:18:ae:6d:21:d3:ac:66:93:
         83:f9:1c:1b:42:6d:5c:4d:0a:1e:81:26:f1:ba:52:57:1c:e1:
         85:16:36:79:9c:6b:b3:92:35:f3:76:97:9c:0f:7c:31:13:f3:
         37:a4:83:c0:da:35:68:a2:d6:b2:5f:40:14:2c:53:eb:1a:72:
         cc:23:aa:c7:63:b5:f4:d9:e8:98:ba:d2:18:4a:2d:76:db:cc:
         8e:72:41:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 03:07:15 2024 by rpki-client on console-fra.rpki-client.org