Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/39d4d81e-6e29-39ae-ac5f-d34ef20b5191.roa
File:                     39d4d81e-6e29-39ae-ac5f-d34ef20b5191.roa (raw, json)
Hash identifier:          pjwxYMjsZr5KIiPPLs6zHxL40+U7Muq7GYBHGT6Pl1s=
Subject key identifier:   71:1F:0D:CA:56:ED:84:82:82:0A:9E:14:EB:9F:58:04:4E:24:A7:AF
Certificate issuer:       /CN=fcd81970-919f-4ccd-9c85-01ebf75cf163
Certificate serial:       010D0C9F4328584A3A158190D99E96D196A9F670
Authority key identifier: 15:45:93:8C:DA:F3:BA:38:37:A8:8E:22:2B:BE:0C:E9:2D:E0:5E:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/39d4d81e-6e29-39ae-ac5f-d34ef20b5191.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     986
IP address blocks:        23.142.192.0/24 maxlen: 24
                          23.247.228.0/22 maxlen: 22
                          161.129.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/fcd81970-919f-4ccd-9c85-01ebf75cf163.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/fcd81970-919f-4ccd-9c85-01ebf75cf163.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:81:90:d9:9e:96:d1:96:a9:f6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd81970-919f-4ccd-9c85-01ebf75cf163
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=60a3fb04-ea6b-4118-83d7-7cb3d2223218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:8f:ee:97:6f:01:69:50:73:88:3e:bd:36:
                    fc:7e:db:27:7e:b9:62:9a:76:86:28:76:97:ea:72:
                    bc:5f:fc:41:35:e5:5e:eb:5f:b7:f7:f2:62:e6:23:
                    3a:4b:c1:b8:2d:f7:c0:b9:3f:32:58:9e:2b:2d:45:
                    3d:2f:b4:8e:44:57:4a:9e:c0:72:8e:ca:5f:13:33:
                    f9:b4:ac:9b:f7:d1:6c:2f:c4:ef:5d:3d:02:87:25:
                    aa:12:ba:35:f6:e9:d4:9c:98:57:2a:c2:7e:af:44:
                    93:c5:88:ab:7a:cd:e4:bb:33:bd:b4:ee:56:ef:76:
                    6b:38:f6:58:f5:7d:fd:d7:4a:ba:65:39:a5:37:05:
                    49:f4:6f:2a:e1:17:20:ca:7d:8d:a1:6d:09:cc:b1:
                    2c:70:ef:38:b1:7f:b4:5b:61:ef:28:93:1c:f0:28:
                    f1:f0:ed:91:66:76:63:55:2b:3c:ad:3a:9a:36:46:
                    9d:61:19:36:4c:72:ab:28:a2:a8:b8:b9:bc:e0:7f:
                    76:24:f2:c3:9e:b8:ca:45:bf:7c:62:c1:06:23:3e:
                    2d:6c:68:da:d9:71:ac:e6:0a:78:34:12:54:f3:4e:
                    ac:85:13:04:5a:a2:97:b5:15:7c:d5:a3:d0:38:92:
                    2c:45:1f:62:1e:ea:e2:b0:02:d6:56:e4:36:59:eb:
                    cf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1F:0D:CA:56:ED:84:82:82:0A:9E:14:EB:9F:58:04:4E:24:A7:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/39d4d81e-6e29-39ae-ac5f-d34ef20b5191.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/fcd81970-919f-4ccd-9c85-01ebf75cf163.crl

            X509v3 Authority Key Identifier:
                keyid:15:45:93:8C:DA:F3:BA:38:37:A8:8E:22:2B:BE:0C:E9:2D:E0:5E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.192.0/24
                  23.247.228.0/22
                  161.129.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:21:95:68:99:cd:f1:f3:41:5b:97:9d:2b:d3:c6:b2:89:62:
         8e:f3:49:36:01:4d:51:bf:cf:92:b3:16:c6:c6:ae:fd:16:72:
         5d:1b:95:75:86:e7:ef:af:3c:03:95:04:d9:c1:6f:6d:ed:cb:
         8a:3c:76:01:63:03:db:25:09:df:ce:99:6c:45:6b:c7:87:0a:
         46:b0:21:44:fd:f8:ea:e8:57:d3:82:91:54:bc:3a:44:b8:f6:
         1f:98:d3:2a:8a:8e:45:91:47:1c:ec:7c:d6:46:e5:86:8e:41:
         6a:b2:ae:2e:07:5a:12:20:9a:d2:c8:54:ad:4c:25:9f:f7:46:
         68:68:f8:bd:e3:7b:dc:48:de:db:47:2b:ec:ae:7d:a6:49:45:
         70:5c:b0:4f:b5:ac:0e:e9:09:55:1a:65:f0:09:eb:ac:71:0a:
         f1:4f:0e:8a:d2:d0:b8:df:02:9a:3a:d4:86:90:9b:cd:07:e4:
         63:73:a1:2b:c5:4a:99:46:35:1f:83:9a:0c:90:bc:4d:50:49:
         d5:88:45:d5:e6:d7:6c:d5:5f:7e:b9:74:2d:e8:4f:d1:4b:d1:
         58:6f:46:b0:ab:2d:0e:86:6b:d7:1e:e9:3f:ab:f8:e8:82:56:
         ee:40:c0:f0:40:87:95:be:3c:f7:e3:83:9b:d2:6d:de:2e:4b:
         74:e9:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 02:14:38 2025 by rpki-client