Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3e2be13c-f18a-3482-ab2d-eaa345097bf8.roa
File:                     3e2be13c-f18a-3482-ab2d-eaa345097bf8.roa (raw, json)
Hash identifier:          NIGMf/h79u1Wpgkjay7qGwnvVnGOKFmSLKM6ELUYddg=
Subject key identifier:   EA:2C:04:78:E2:F4:41:0D:F4:D8:5A:9C:38:6C:41:82:65:09:56:05
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858471BA5AD72D145BF340156CB00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3e2be13c-f18a-3482-ab2d-eaa345097bf8.roa
Signing time:             Thu 05 Sep 2024 01:00:30 +0000
ROA not before:           Thu 05 Sep 2024 01:00:30 +0000
ROA not after:            Wed 04 Dec 2024 02:00:30 +0000
asID:                     0
IP address blocks:        63.215.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:a5:ad:72:d1:45:bf:34:01:56:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep  5 01:00:30 2024 GMT
            Not After : Dec  4 02:00:30 2024 GMT
        Subject: CN=16e5ed4d-e96e-4b4f-8dc3-f98435392f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:05:bc:c4:da:de:7b:ab:75:78:40:5d:f1:
                    16:d1:84:66:cc:3b:dc:14:25:1c:61:d2:18:78:86:
                    54:f8:3c:78:f2:af:dd:4b:c4:08:f0:0f:d2:3c:7d:
                    f2:20:ab:d9:b2:e9:29:17:7c:75:cc:77:7a:f0:6c:
                    8e:cb:9c:80:61:ae:c8:45:df:23:5f:60:bd:dc:bd:
                    15:56:51:34:60:c5:2e:1a:4c:93:06:96:4b:b3:09:
                    82:11:34:0e:98:b5:95:43:0b:9e:e8:12:f8:b4:67:
                    86:63:30:49:57:be:07:bb:55:f7:9d:fc:5c:8c:15:
                    61:5f:f2:19:84:bb:54:6a:f3:10:d5:e3:f8:16:2a:
                    ee:39:43:c7:4c:ab:7d:c4:ed:6c:95:78:63:5a:86:
                    0d:20:eb:48:71:75:fa:34:0c:67:cc:ad:ec:d4:96:
                    8c:9c:36:f7:ef:d4:67:f7:df:1b:f0:1f:70:96:6b:
                    72:ef:77:17:17:61:ee:d9:6e:7f:e6:0d:ee:96:5f:
                    d2:cb:ca:b9:fe:3a:03:c6:e9:64:3e:a4:26:ab:06:
                    12:c8:d4:95:59:64:cd:d4:86:ef:aa:2e:a6:5f:c1:
                    e3:61:0d:b2:ab:c3:4b:05:c8:fa:b4:1d:f4:ba:33:
                    ef:c8:37:88:8a:cd:0b:bf:b3:82:0d:ae:22:2f:c8:
                    33:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2C:04:78:E2:F4:41:0D:F4:D8:5A:9C:38:6C:41:82:65:09:56:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3e2be13c-f18a-3482-ab2d-eaa345097bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.215.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:2a:b6:ed:52:a6:fd:19:37:6c:06:ee:ab:e5:59:07:97:f9:
         5f:33:7a:d0:2b:34:ee:d0:e7:ca:84:df:aa:b1:93:5a:5b:d5:
         f6:d1:00:c3:a3:e0:df:2d:d4:8c:10:5b:47:8d:a8:e7:fd:c2:
         97:78:75:ff:44:1d:cf:2a:a5:c0:a5:cc:ee:f2:90:fc:21:a8:
         f3:73:a3:0e:44:20:9c:66:fa:37:2a:d3:d1:68:5a:ec:8f:76:
         04:67:07:b0:c4:14:46:aa:96:3a:b4:c1:fa:69:f5:d0:d1:8b:
         1a:ec:37:66:f3:bf:f3:7c:93:b5:63:d4:b9:dd:09:e1:a3:7e:
         cc:56:cc:10:83:f5:fd:9a:1e:34:ad:83:ae:a3:31:16:df:71:
         45:9c:b7:80:c8:79:01:cb:12:58:8e:f3:54:53:ff:01:56:17:
         d1:5e:80:ad:ad:94:bc:da:e5:bb:a8:53:09:f0:b4:40:08:49:
         30:2b:09:95:e8:dc:15:b7:7c:02:d5:64:38:af:ad:be:87:6d:
         2f:79:13:d0:99:ca:1b:38:40:cb:6a:85:36:a9:4f:87:63:56:
         9a:fc:58:c9:e5:08:2d:e9:14:8b:23:11:1e:08:aa:da:54:0c:
         71:0a:a8:ef:7b:26:27:d6:12:74:5b:d8:56:e5:34:4c:8d:cd:
         e6:5d:d4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:48:48 2024 by rpki-client on console-ams.rpki-client.org