Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa
File:                     988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa (raw, json)
Hash identifier:          uf6OoE8dsEkc21NWy4quYRuF+n0GXNaUOVt8cZ9GgOM=
Subject key identifier:   63:77:64:86:23:B0:00:EF:BA:DD:A3:AC:82:ED:0E:9E:99:68:C7:E0
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328584A29555E548C2A95BFE62CD080
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     14445
IP address blocks:        23.170.240.0/24 maxlen: 24
                          23.170.243.0/24 maxlen: 24
                          23.170.245.0/24 maxlen: 24
                          23.170.246.0/24 maxlen: 24
                          23.170.247.0/24 maxlen: 24
                          23.170.249.0/24 maxlen: 24
                          23.170.254.0/24 maxlen: 24
                          216.73.149.0/24 maxlen: 24
                          216.73.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:5e:54:8c:2a:95:bf:e6:2c:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=babede4d-7873-404f-8282-9701b45818dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c7:8c:09:8a:24:46:2c:70:f5:cb:d0:c8:fd:
                    9c:63:68:11:3d:5b:eb:8d:2f:c2:3a:e3:08:df:5c:
                    f7:58:82:f3:b8:df:57:9d:02:96:bc:69:e7:7a:7e:
                    fc:de:8d:3c:f0:8e:dd:27:d1:65:19:aa:97:ff:e6:
                    c3:8a:fd:a8:e0:55:6e:95:8f:7d:bb:a0:17:44:e1:
                    bb:56:8e:e2:b2:a3:d9:db:c4:17:7d:a0:e6:13:1b:
                    d9:19:8e:40:12:2f:d9:56:1d:2b:79:79:eb:40:84:
                    40:5f:e2:55:8c:5d:24:47:ea:25:81:6a:c5:7a:85:
                    3a:84:5a:30:54:e3:4e:be:b2:4d:3c:78:1d:fb:10:
                    a8:ca:b5:13:26:60:1a:5a:4b:27:2e:1e:c1:b5:dd:
                    eb:c4:7a:31:5b:12:c7:7e:08:af:00:3a:aa:64:c6:
                    55:51:9b:47:3a:6c:0d:eb:3e:a8:8b:3d:4a:75:6b:
                    b6:41:0a:9e:8c:87:6a:e6:6e:6e:f8:86:b0:bd:3e:
                    ff:34:e5:cf:3a:c4:cf:f7:f6:6d:c8:e4:6f:63:b0:
                    ef:8a:de:f2:15:75:30:1b:1b:8f:d2:fb:d5:81:f7:
                    48:f1:c9:8e:66:7a:8f:94:24:c8:b3:1f:c6:ed:d3:
                    c6:0d:67:00:43:11:cd:b0:39:35:0e:f0:b5:ef:3e:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:77:64:86:23:B0:00:EF:BA:DD:A3:AC:82:ED:0E:9E:99:68:C7:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/988c0fc0-b9f1-3cc4-b777-66895e015f2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.240.0/24
                  23.170.243.0/24
                  23.170.245.0-23.170.247.255
                  23.170.249.0/24
                  23.170.254.0/24
                  216.73.149.0-216.73.150.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:a9:da:f2:56:3d:8e:48:e5:d7:f7:e9:66:4a:1e:52:80:00:
         44:cc:b6:70:e2:62:5c:0f:e3:70:b5:ff:34:47:2f:19:c1:5e:
         89:2d:b0:3f:77:2e:9c:46:c4:6e:b8:7e:14:28:c7:a5:b3:2c:
         a5:7c:1e:58:65:94:f6:ab:ea:02:b9:a6:26:06:86:54:29:12:
         ac:e0:55:e6:e6:ec:8a:80:35:14:62:81:06:f6:2c:04:ac:21:
         75:2b:ad:06:39:cf:72:43:37:29:e6:7a:1a:f1:16:32:fd:c9:
         d0:33:e1:69:cc:21:1b:84:60:8b:6f:f1:e2:8e:6a:df:e7:d3:
         3a:44:cb:f8:f9:31:55:4d:e1:cf:63:02:23:05:aa:39:3a:8b:
         52:26:84:50:58:42:61:60:6e:21:5a:9a:47:b1:2a:f4:75:5b:
         7c:9d:3f:73:40:79:44:33:14:9c:09:a2:7d:8f:d7:07:e0:d2:
         04:3d:ea:47:29:d7:4d:f0:ed:3d:88:d1:8a:5e:8c:a6:84:43:
         8b:d9:86:36:b6:1a:96:4c:de:75:2b:d7:87:db:e1:1a:c6:3d:
         86:71:8f:d6:51:c0:7a:fd:71:54:c2:19:bc:a7:96:a9:87:4c:
         41:77:13:61:e9:98:7b:dc:ec:d7:69:6e:78:27:9e:ab:da:4e:
         01:79:a0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:18:59 2025 by rpki-client