Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/1530734b-f3c8-3e86-ab10-539978b823b6.roa
File:                     1530734b-f3c8-3e86-ab10-539978b823b6.roa (raw, json)
Hash identifier:          3k0IZ9Bxg8++2yqtqZ9B0Rj/nrsNqZShSeEy3gKwlzI=
Subject key identifier:   98:F4:91:21:F6:F3:23:D0:30:50:5C:C9:E1:DD:1C:2A:2C:9A:DC:7C
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F432858498769BD04DE9EFE52E4AA3480
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/1530734b-f3c8-3e86-ab10-539978b823b6.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     40934
IP address blocks:        23.249.58.0/24 maxlen: 24
                          23.249.60.0/24 maxlen: 24
                          23.249.61.0/24 maxlen: 24
                          66.35.31.0/24 maxlen: 24
                          69.48.236.0/24 maxlen: 24
                          69.48.237.0/24 maxlen: 24
                          69.48.239.0/24 maxlen: 24
                          96.45.38.0/24 maxlen: 24
                          96.45.42.0/24 maxlen: 24
                          96.45.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:bd:04:de:9e:fe:52:e4:aa:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=eb2e40e2-869b-4066-a52c-729fa90e520a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d1:83:bb:b1:27:6f:06:2d:b1:ac:ca:57:da:
                    39:96:95:e8:94:b4:b4:fc:02:b5:4e:c3:15:4f:da:
                    43:0a:97:aa:c1:9f:c6:b2:f4:c2:71:01:28:95:90:
                    3f:08:b8:ad:56:02:24:ee:83:7b:f2:50:53:c2:d1:
                    0f:b4:04:df:87:9f:2b:86:d4:c0:3c:b0:be:15:31:
                    2b:b4:a9:a2:3d:f5:e5:87:e3:81:31:a0:a3:c5:04:
                    13:c3:68:dc:08:45:3c:fd:b3:f6:32:7e:4a:f8:76:
                    b5:ea:5f:87:a4:d4:fe:bf:6e:6f:9f:0b:5f:0f:1b:
                    fd:b2:4a:98:d6:bf:c9:13:71:47:12:cf:6a:9a:e6:
                    bd:57:d1:3d:a9:c1:f5:e4:ce:36:35:8d:02:4b:5e:
                    ab:40:84:4a:9d:72:a4:1d:e4:0a:95:dd:be:84:b3:
                    2e:de:7d:68:9a:18:ea:56:b0:e4:10:9d:85:09:45:
                    fe:78:4d:61:e2:90:80:b9:5d:55:e6:01:55:ab:61:
                    6f:d2:3a:08:22:3d:da:e0:4b:47:70:06:2c:57:c4:
                    31:b4:dc:93:4b:c5:82:2a:a9:06:1e:dd:49:04:4c:
                    5b:6c:88:9a:3c:81:32:b8:a4:3e:d7:e1:e9:61:b7:
                    26:e2:69:df:d4:79:b2:fa:55:11:3a:c3:e3:07:de:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F4:91:21:F6:F3:23:D0:30:50:5C:C9:E1:DD:1C:2A:2C:9A:DC:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/1530734b-f3c8-3e86-ab10-539978b823b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.249.58.0/24
                  23.249.60.0/23
                  66.35.31.0/24
                  69.48.236.0/23
                  69.48.239.0/24
                  96.45.38.0/24
                  96.45.42.0/24
                  96.45.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:8d:03:d4:c1:b2:5d:13:b0:00:d4:0c:d0:28:a6:72:e8:c6:
         f8:a6:3a:79:59:11:34:4a:5d:94:52:cd:fc:6a:ee:a5:d1:ff:
         93:1f:74:8a:c1:e1:30:d3:a6:5f:6d:ec:4b:9c:38:22:03:10:
         16:4d:01:df:0d:ef:2e:39:dd:ad:7d:e6:7e:93:b8:57:da:46:
         9a:6f:bb:f8:53:d7:12:73:90:20:a3:b3:21:95:7f:f0:26:2b:
         15:bf:b2:07:f4:98:4c:b8:cc:eb:42:70:61:e5:bb:a0:1e:fb:
         c3:0a:5d:18:8a:e5:20:cc:1a:4b:4b:68:b0:d9:0e:25:ab:94:
         13:af:dc:48:b2:6e:38:f4:ca:96:3e:a5:d0:9d:a5:f8:c2:ae:
         89:be:d9:af:63:89:2f:1e:8c:f6:0f:08:84:1f:b4:13:38:ce:
         9f:0b:46:b4:66:9e:59:97:47:be:40:96:8f:2b:60:ad:3e:49:
         7e:d1:27:01:de:2c:5c:a5:59:07:e9:3f:6e:5f:c3:6b:5c:15:
         05:7c:c1:f0:6d:b6:34:20:95:ff:7e:27:36:7e:10:86:7b:55:
         8c:67:b9:da:9b:a0:0d:63:69:de:11:4d:b7:23:94:de:25:67:
         bb:8f:d9:d6:64:e1:01:33:33:5c:db:2a:54:0e:3f:22:21:79:
         c4:84:93:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:15:48 2025 by rpki-client