Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ecb89510-c3c4-3eb6-868d-9523f5066286.roa
File:                     ecb89510-c3c4-3eb6-868d-9523f5066286.roa (raw, json)
Hash identifier:          ORcgGmhYIWaAvpLtHnI57OOjceSYE4Rx9Nrl/irCR+8=
Subject key identifier:   A2:F2:F7:84:96:E5:34:F0:5B:AB:F5:00:50:55:97:97:AB:D9:A3:27
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285844B9C4F8C3B81FDA94BA9ADC40
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ecb89510-c3c4-3eb6-868d-9523f5066286.roa
Signing time:             Tue 30 Jan 2024 14:00:30 +0000
ROA not before:           Tue 30 Jan 2024 14:00:30 +0000
ROA not after:            Mon 29 Apr 2024 13:00:30 +0000
asID:                     20473
IP address blocks:        63.210.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:b9:c4:f8:c3:b8:1f:da:94:ba:9a:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 30 14:00:30 2024 GMT
            Not After : Apr 29 13:00:30 2024 GMT
        Subject: CN=f9eea944-7153-4458-bce3-95f6124e0ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b6:eb:cc:cd:7b:9b:6b:cf:ec:25:f9:a3:37:
                    ca:e8:c6:f8:8e:13:a0:be:5e:6a:30:8c:b8:4b:83:
                    08:57:49:a6:92:f1:db:4d:0b:da:ba:9f:0e:a2:54:
                    8a:ba:a8:8c:e8:cf:f6:70:72:32:b1:63:af:c7:9b:
                    ed:87:4d:51:11:8b:a7:92:3a:e6:99:d9:bd:49:27:
                    b6:3e:cf:dc:b3:f9:b2:1c:9d:6a:8d:fd:a5:de:fe:
                    e7:55:f3:94:12:79:df:1d:42:5f:ee:e4:2f:0e:33:
                    46:e3:54:98:e8:a2:ad:38:9a:e1:24:1a:08:63:98:
                    1d:f6:b7:ba:48:61:6b:e5:51:41:05:dc:b9:59:31:
                    c3:df:c5:a5:35:05:0a:09:6e:ca:6f:71:d1:c6:a2:
                    5f:5d:45:2f:d7:02:cf:d5:3e:c9:37:e3:d1:b3:75:
                    57:0f:1f:72:7f:68:98:37:f7:4a:08:ed:21:50:d1:
                    e3:73:e1:b5:e7:57:10:55:88:07:8a:dd:fb:b9:38:
                    a9:8b:7a:80:a7:d8:0f:ab:3a:7e:9e:d2:c4:2f:a4:
                    74:1f:5c:71:2c:7a:7e:9f:5a:67:e6:b4:8b:bd:e9:
                    d6:04:73:d3:fa:e0:8d:e7:cf:5b:69:b0:cf:52:c9:
                    00:92:35:c0:bf:44:ad:85:1c:eb:d5:47:28:3e:3e:
                    0a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F2:F7:84:96:E5:34:F0:5B:AB:F5:00:50:55:97:97:AB:D9:A3:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ecb89510-c3c4-3eb6-868d-9523f5066286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.210.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:af:8c:e2:c4:ba:7b:95:88:26:3d:6f:c6:d1:26:8c:c6:ea:
         c3:a0:88:30:b8:f3:e7:d0:c1:ee:6f:b2:86:b4:f9:92:8a:09:
         c6:37:5c:af:79:d9:2a:22:5e:b9:97:f2:8f:c2:a5:30:1a:45:
         a5:f0:2e:21:93:e1:66:6a:d9:38:40:50:6a:22:e9:24:95:92:
         68:4a:97:a4:5b:9d:25:a6:24:2e:3f:fc:e3:1d:ee:c9:b9:b9:
         f7:42:21:e6:fb:1b:30:94:13:1a:10:e3:5d:a0:26:b9:e8:95:
         76:06:08:fa:aa:63:ea:6c:f1:40:f1:4d:8f:ec:54:62:9f:84:
         0d:72:27:cb:0c:40:b8:66:7d:84:7a:a7:a4:9e:ca:35:e5:2c:
         58:1a:12:57:2d:1a:8f:52:1d:26:0f:d7:19:85:6d:0d:4b:0c:
         30:bc:3f:b5:3a:98:41:92:1f:b6:19:ef:8f:4c:46:a2:56:e7:
         01:19:f0:ba:db:a7:8d:1a:be:aa:f1:3a:94:a7:95:6a:5e:7e:
         4c:71:d0:b0:91:a9:34:bb:85:a7:14:c8:e1:64:b5:f0:ca:e2:
         b0:c7:fd:2a:f5:b5:b3:c2:f9:63:6a:9f:ba:d9:a4:47:8f:46:
         6f:c3:cb:62:1b:50:81:34:e8:f8:c4:bc:11:1c:50:22:9d:1e:
         f6:da:fb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 13:19:10 2024 by rpki-client on console-ams.rpki-client.org