Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ecb89510-c3c4-3eb6-868d-9523f5066286.roa
File:                     ecb89510-c3c4-3eb6-868d-9523f5066286.roa (download)
Hash identifier:          RXPSVTQrSU2R8TIfVTP6bbHL/bd6zXCLveCJMMNy5Ls=
Subject key identifier:   66:B6:C0:09:5A:B4:00:3F:D3:09:49:F4:5A:75:8D:D5:67:7A:D8:8A
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328583A46303EE2D78B3CE956F35900
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ecb89510-c3c4-3eb6-868d-9523f5066286.roa
ROA valid until:          Sep 18 04:00:00 2026 GMT
asID:                     20473
IP address blocks:
    1: 63.210.148.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:46:30:3e:e2:d7:8b:3c:e9:56:f3:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Sep 18 04:00:00 2026 GMT
        Subject: CN=983f80ae-84d3-4b9b-bff1-5f18a964a3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:11:93:13:23:a9:ab:d4:7e:c0:d9:bc:59:b4:
                    b7:09:98:f7:98:a8:d5:55:18:a3:0f:78:f3:c4:f6:
                    57:7d:d5:cd:86:92:f6:a6:4c:f6:e7:62:a5:4c:e1:
                    f8:6a:c9:7b:fb:ff:2d:ef:02:0d:18:99:96:d1:a0:
                    9c:f2:90:b2:ca:ef:27:8b:f1:a8:21:4e:14:7a:dc:
                    7d:49:81:05:a3:e4:fc:6f:dc:0d:9a:6a:a8:75:8a:
                    8b:ab:e1:69:da:23:69:bc:49:ac:76:35:66:ba:46:
                    d1:6b:41:9f:de:67:22:16:17:33:c1:4e:9d:e2:e6:
                    eb:a7:a0:2a:84:24:a8:f7:84:09:8c:1f:61:ce:b8:
                    63:a9:7f:07:89:3e:e4:7b:4e:d1:4f:0e:81:3c:32:
                    c7:56:4d:dd:cf:0e:f5:dc:cc:c1:99:94:a3:f5:50:
                    65:d4:ff:82:9d:25:5c:ad:41:0f:55:c4:46:7f:b4:
                    17:e2:b2:aa:ef:ad:29:cb:78:3e:06:34:58:2c:92:
                    ff:30:6c:5b:4a:84:a7:68:09:a5:45:7d:2e:a5:5f:
                    a6:6f:56:e4:7a:b3:8e:5e:fe:68:6d:8b:b2:99:07:
                    13:cd:51:db:69:90:72:76:f4:13:90:16:f8:f8:cf:
                    66:59:d6:f4:15:a9:5c:c3:84:1c:79:63:c4:f5:5b:
                    bf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                66:B6:C0:09:5A:B4:00:3F:D3:09:49:F4:5A:75:8D:D5:67:7A:D8:8A
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ecb89510-c3c4-3eb6-868d-9523f5066286.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier: 
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.210.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:a0:44:91:28:5e:5b:e9:b3:35:85:8f:57:1c:26:84:03:d5:
         41:69:cb:59:fe:ef:b9:00:01:70:43:d2:4a:37:03:1e:93:b8:
         6c:1f:20:78:5b:0e:c6:b4:ce:b3:4f:86:aa:d0:e3:17:0a:11:
         4c:ed:aa:ac:d0:fd:07:34:ab:7b:fe:ac:3f:81:5e:49:62:5a:
         cc:5d:81:95:b1:44:03:04:72:93:22:40:45:ed:13:8c:35:18:
         14:4b:9e:d8:2b:66:8d:b2:2b:3c:37:3c:51:7d:91:b0:18:7f:
         25:7a:44:11:ac:c8:1b:13:6d:68:bb:70:e8:fc:58:2f:4d:6e:
         37:61:2d:d8:88:cc:c1:89:22:46:42:85:83:c3:82:34:a2:9f:
         9c:67:85:6a:c2:99:c0:6e:d8:55:6b:04:e3:8e:76:ba:c2:1f:
         bf:33:f8:39:fe:51:d2:03:f9:29:5e:df:fb:11:bb:2f:ac:26:
         2d:7e:00:70:57:11:a4:0e:67:aa:6b:20:35:bc:4b:f1:c8:06:
         47:50:24:6b:0c:c2:3f:73:8c:d7:8c:9d:57:59:f2:de:4d:37:
         e9:5d:93:d3:40:84:7d:73:d5:52:2a:15:1a:6a:a0:8a:8a:68:
         92:c7:a2:9f:4a:1b:97:f0:9a:cc:ce:45:50:7c:3e:c3:86:d0:
         95:f0:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 01:31:02 2022 by rpki-client.