Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8962954f-6a47-3b4d-96eb-ad904226465d.roa
File:                     8962954f-6a47-3b4d-96eb-ad904226465d.roa (raw, json)
Hash identifier:          uHIH3j0OQI16w0vL6YRtdtZ0IE5tlKKFK7onsTZ24HY=
Subject key identifier:   26:32:12:92:37:F5:5C:10:DF:BC:9A:BA:81:24:71:C0:D2:9B:93:7A
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285848424AC65D4B72C695F2F37B00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8962954f-6a47-3b4d-96eb-ad904226465d.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     11572
IP address blocks:        63.214.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:c6:5d:4b:72:c6:95:f2:f3:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=22a8181a-bb1d-4971-b61b-33db7ee4a653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:94:31:44:2d:5f:7f:e6:da:ea:3f:dd:80:de:
                    bc:bb:42:93:fe:3c:d6:11:14:59:2d:3c:50:24:9b:
                    a4:ce:f5:20:8f:b9:f3:ca:50:35:47:0a:d7:8c:ad:
                    09:ce:57:cb:72:48:ae:a5:40:f7:a0:b6:45:69:58:
                    09:74:98:fa:5c:35:66:88:4d:32:96:31:e7:8c:8b:
                    01:bb:a4:4b:b6:6c:28:54:3c:a7:a3:fc:0f:a0:de:
                    36:96:53:98:0a:72:0a:82:fc:d9:b0:d8:3a:11:fa:
                    2c:3b:43:82:bc:ed:f9:d7:2f:b7:de:e6:2a:26:ca:
                    e4:43:f1:a9:cb:9b:53:24:12:b9:b6:17:1b:9c:c3:
                    3d:31:3c:52:ef:28:ff:1a:97:ad:b7:dc:07:65:b0:
                    7a:f8:e5:23:9c:ff:fa:e2:4d:67:d3:70:97:8e:c8:
                    a5:cd:90:26:13:fe:71:fc:74:7e:02:0c:94:99:e9:
                    bb:82:65:e6:78:12:02:bf:eb:5e:b3:61:bf:34:fd:
                    3c:10:6c:29:c4:95:c7:e2:6c:2b:51:5b:94:7e:7c:
                    42:cb:1c:e1:0a:35:6c:bc:44:fc:91:9a:9c:3c:85:
                    4d:d5:6d:c2:e3:df:91:0f:fe:d9:8d:f0:b3:24:22:
                    7c:44:37:01:3e:e8:a2:87:83:e2:9d:36:b8:97:06:
                    a6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:32:12:92:37:F5:5C:10:DF:BC:9A:BA:81:24:71:C0:D2:9B:93:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8962954f-6a47-3b4d-96eb-ad904226465d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.214.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:66:6a:71:b0:70:87:f5:7e:02:cb:b7:09:f7:3d:20:6f:
         bb:30:25:bc:2f:89:c9:9b:dd:e9:eb:54:27:67:c1:f2:7d:87:
         d3:51:7f:57:d2:f2:ae:97:bc:b7:c9:3c:04:c6:75:79:55:de:
         f4:8c:78:5f:56:5f:9c:5e:aa:c3:99:25:7a:d4:20:c3:3b:1b:
         0b:72:b9:57:94:0d:7e:12:f6:af:6c:f0:2e:e3:ba:c3:2c:f4:
         ba:50:ed:3c:cf:ee:0b:79:a1:02:76:ab:6a:cb:24:fa:0a:e8:
         92:6f:cd:0a:5c:bc:d7:9a:b0:05:37:6c:99:70:2c:c1:7b:5c:
         6a:b4:91:36:ef:c5:3d:ad:09:7c:8e:43:3d:ae:40:c2:f3:30:
         19:5f:91:40:74:6c:47:9f:20:0b:1e:93:f5:9f:99:85:4b:e0:
         83:fa:79:14:98:29:1b:6b:f9:05:95:9f:a3:89:66:83:f4:90:
         9e:12:d2:62:f2:13:ed:dd:8b:0b:eb:b5:47:9c:10:f0:d4:d2:
         30:de:72:3b:ac:59:d5:c5:2f:c0:59:6d:bc:9b:80:1e:3d:99:
         ef:b7:d0:d6:24:73:f5:04:fd:ff:54:78:41:34:06:2d:c6:4f:
         da:75:82:2d:69:f1:29:dc:64:e7:8b:73:3f:b8:04:30:7a:41:
         70:2a:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:45 2025 by rpki-client