Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa
File:                     74d043bc-e479-3a7a-9a76-aacaabb89db4.roa (raw, json)
Hash identifier:          1pLPBMCb9mi5wG4lxdetVGIjXISxh3KQryvsoRvIVcc=
Subject key identifier:   C7:77:8E:9D:AE:37:77:2B:E0:0E:15:39:5E:7E:EE:CD:4B:EC:BB:C5
Certificate issuer:       /CN=39695c91-50ed-402c-b896-6056bbde88df
Certificate serial:       010D0C9F4328584A1F90165F2A34FB6A67492D00
Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     14445
IP address blocks:        23.136.184.0/24 maxlen: 24
                          23.170.241.0/24 maxlen: 24
                          23.170.242.0/24 maxlen: 24
                          23.170.244.0/24 maxlen: 24
                          23.170.248.0/24 maxlen: 24
                          23.170.250.0/24 maxlen: 24
                          23.170.251.0/24 maxlen: 24
                          23.170.252.0/24 maxlen: 24
                          23.170.253.0/24 maxlen: 24
                          23.170.255.0/24 maxlen: 24
                          45.42.178.0/24 maxlen: 24
                          45.42.179.0/24 maxlen: 24
                          216.73.148.0/24 maxlen: 24
                          216.73.151.0/24 maxlen: 24
                          2606:18c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:16:5f:2a:34:fb:6a:67:49:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=6ea2ecc4-bba0-4535-b2ae-73a9bab930a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0b:e6:78:78:12:1d:04:5e:8f:bb:29:2f:e0:
                    46:b8:4c:45:9d:24:12:6e:bc:c3:c5:b2:86:11:28:
                    c5:1b:32:ca:c2:03:1e:c9:91:b7:0c:af:e0:1b:12:
                    8d:40:c3:8c:ff:9a:42:1d:7a:26:45:c4:5d:58:a1:
                    28:da:29:11:ae:14:1d:b3:9c:45:de:be:16:04:11:
                    7b:33:18:9b:54:88:a9:ec:3e:46:91:c5:82:da:89:
                    00:ba:4a:82:ae:11:58:00:ec:6c:8a:f5:f0:3b:6c:
                    f9:a3:3e:e1:a9:7b:f3:85:05:47:44:35:b3:ef:f9:
                    b4:85:66:fd:4a:5d:88:10:69:5c:a6:a3:bc:98:31:
                    bf:09:e4:37:43:93:4b:e9:f6:c6:8e:9a:f5:44:0d:
                    0b:76:1b:8b:55:5d:f6:3b:19:25:8a:d7:47:c7:13:
                    df:1a:7d:06:22:41:54:4f:9d:3b:5a:7f:83:0c:f8:
                    11:e4:35:a9:2e:4f:d2:89:f8:39:22:9d:7f:eb:bc:
                    01:87:42:74:79:fd:33:f3:58:be:b5:ce:de:19:3d:
                    39:50:e8:ce:ab:bc:50:ab:35:3e:06:4c:dd:f6:7e:
                    66:14:f6:60:4d:f5:e2:8a:4e:2e:c9:ea:f2:4e:ce:
                    45:fb:61:1d:ca:7b:6a:b6:8a:a4:e5:13:a7:4b:b4:
                    89:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:77:8E:9D:AE:37:77:2B:E0:0E:15:39:5E:7E:EE:CD:4B:EC:BB:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/74d043bc-e479-3a7a-9a76-aacaabb89db4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.184.0/24
                  23.170.241.0-23.170.242.255
                  23.170.244.0/24
                  23.170.248.0/24
                  23.170.250.0-23.170.253.255
                  23.170.255.0/24
                  45.42.178.0/23
                  216.73.148.0/24
                  216.73.151.0/24
                IPv6:
                  2606:18c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:1c:5a:8f:98:54:82:95:8d:e9:4f:f9:04:37:e6:23:db:10:
         bb:1c:5d:1d:eb:12:d2:ee:24:41:e0:17:43:03:97:58:96:d9:
         44:83:78:e5:89:b8:e8:9c:be:5d:5b:67:e4:de:b0:c5:99:db:
         41:49:42:80:d0:95:fe:a9:de:cb:da:46:72:30:99:f6:8f:c1:
         12:3d:c2:7d:d9:60:b9:10:bf:a0:ff:73:e9:33:db:b4:3d:ba:
         12:81:34:6b:34:9b:44:14:be:de:b0:f6:01:f4:29:c5:5d:e8:
         24:80:c8:53:6e:c1:ae:cb:29:4b:0b:1a:04:54:c5:83:31:99:
         73:46:26:df:01:99:cb:4e:fd:7b:41:af:86:fb:86:5a:75:24:
         1a:a8:48:7e:9f:09:a7:93:d9:60:7f:15:ac:a2:1f:18:53:86:
         c0:cd:4b:a1:39:d6:65:91:5d:8c:68:a0:a9:4d:00:ed:9f:a2:
         76:e1:a4:75:ff:2a:48:66:aa:70:5a:2e:c1:cc:1c:70:3a:ed:
         b9:00:9c:67:94:81:52:2e:a9:9a:9d:ae:5a:e1:d6:01:9b:7a:
         0e:6b:33:3e:19:ce:13:c8:47:86:0b:77:59:ed:63:09:c9:f5:
         92:68:a1:47:7c:e2:2b:cf:ff:cb:a9:2d:f7:a5:cf:d3:83:57:
         04:17:c6:b1
-----BEGIN CERTIFICATE-----
MIIGkjCCBXqgAwIBAgIUAQ0Mn0MoWEofkBZfKjT7amdJLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4
OGRmMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk
NmVhMmVjYzQtYmJhMC00NTM1LWIyYWUtNzNhOWJhYjkzMGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wvmeHgSHQRej7spL+BGuExFnSQSbrzDxbKG
ESjFGzLKwgMeyZG3DK/gGxKNQMOM/5pCHXomRcRdWKEo2ikRrhQds5xF3r4WBBF7
MxibVIip7D5GkcWC2okAukqCrhFYAOxsivXwO2z5oz7hqXvzhQVHRDWz7/m0hWb9
Sl2IEGlcpqO8mDG/CeQ3Q5NL6fbGjpr1RA0LdhuLVV32OxklitdHxxPfGn0GIkFU
T507Wn+DDPgR5DWpLk/Sifg5Ip1/67wBh0J0ef0z81i+tc7eGT05UOjOq7xQqzU+
Bkzd9n5mFPZgTfXiik4uyeryTs5F+2Edyntqtoqk5ROnS7SJfwIDAQABo4IDpDCC
A6AwHQYDVR0OBBYEFMd3jp2uN3cr4A4VOV5+7s1L7LvFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5
NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvNzRkMDQzYmMtZTQ3OS0z
YTdhLTlhNzYtYWFjYWFiYjg5ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4
OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl
ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2
YmJkZTg4ZGYuY2VyMG4GCCsGAQUFBwEHAQH/BF8wXTBMBAIAATBGAwQAF4i4MAwD
BAAXqvEDBAAXqvIDBAAXqvQDBAAXqvgwDAMEAReq+gMEAReq/AMEABeq/wMEAS0q
sgMEANhJlAMEANhJlzANBAIAAjAHAwUAJgYYwDBUBgNVHSABAf8ESjBIMEYGCCsG
AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291
cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQClHFqPmFSClY3p
T/kEN+Yj2xC7HF0d6xLS7iRB4BdDA5dYltlEg3jlibjonL5dW2fk3rDFmdtBSUKA
0JX+qd7L2kZyMJn2j8ESPcJ92WC5EL+g/3PpM9u0PboSgTRrNJtEFL7esPYB9CnF
XegkgMhTbsGuyylLCxoEVMWDMZlzRibfAZnLTv17Qa+G+4ZadSQaqEh+nwmnk9lg
fxWsoh8YU4bAzUuhOdZlkV2MaKCpTQDtn6J24aR1/ypIZqpwWi7BzBxwOu25AJxn
lIFSLqmana5a4dYBm3oOazM+Gc4TyEeGC3dZ7WMJyfWSaKFHfOIrz//LqS33pc/T
g1cEF8ax
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:39:33 2025 by rpki-client