Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ecb89510-c3c4-3eb6-868d-9523f5066286.roa
File:                     ecb89510-c3c4-3eb6-868d-9523f5066286.roa (raw, json)
Hash identifier:          CWbjEgMLbH17UpzY+svuX2evZNLVL3oylGLHGW2+m4s=
Subject key identifier:   32:C9:3C:AE:93:ED:21:4A:E8:3F:66:8B:68:5E:47:58:16:9B:30:B9
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285849F71512D16F9B4EA5F85D2280
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ecb89510-c3c4-3eb6-868d-9523f5066286.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     20473
IP address blocks:        63.210.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:12:d1:6f:9b:4e:a5:f8:5d:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=59122e9d-f4bd-47e6-a53b-160cd30673ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:78:0c:3c:93:4c:81:d2:a3:1d:51:73:e4:f9:
                    ac:ef:dc:0e:18:29:15:ed:d6:5c:b7:aa:71:91:f9:
                    fd:e5:66:5f:4f:d6:bd:fb:ee:4d:38:b5:ef:2b:64:
                    20:df:c6:5a:87:bb:63:e4:f8:0e:75:06:6f:c1:dd:
                    6f:6e:b6:b7:be:90:cd:4f:ef:2b:31:18:d9:eb:37:
                    44:37:77:de:3f:ac:16:b4:a1:1c:de:b2:e6:e8:19:
                    5c:bf:de:c3:4a:9e:c5:27:f9:84:c8:8f:88:02:91:
                    53:54:03:10:57:40:81:11:fd:bc:c8:55:ad:91:25:
                    79:34:0d:c9:a5:88:2e:38:ae:4d:9a:2d:eb:b3:47:
                    8f:0a:8f:c0:2d:41:1a:14:a7:ad:ac:3d:cd:0d:ae:
                    a0:c1:8d:d5:f5:05:dd:e3:e9:f2:19:09:c5:a7:bf:
                    94:a9:4b:63:42:17:0d:ac:c1:8b:66:e9:af:ab:94:
                    0c:59:a2:d0:17:01:a4:8b:3d:43:ab:87:14:eb:9c:
                    7f:45:93:92:37:5b:0a:68:33:bc:2d:28:39:8c:14:
                    f2:3f:de:53:ad:2a:88:ed:43:56:07:13:96:ab:4f:
                    3a:50:0e:77:9a:7a:08:94:06:d2:45:24:ab:78:b6:
                    53:cc:13:7d:db:8c:20:a3:43:3a:cf:b4:b8:1d:e6:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C9:3C:AE:93:ED:21:4A:E8:3F:66:8B:68:5E:47:58:16:9B:30:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ecb89510-c3c4-3eb6-868d-9523f5066286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.210.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:af:eb:58:ae:3d:ea:ac:56:d5:db:09:d4:94:10:4a:9f:3a:
         28:ae:d6:5a:83:e5:74:62:94:6a:85:d0:33:cd:12:e1:c6:46:
         3f:7f:c9:e3:46:e2:18:cd:c9:a7:7c:d3:25:d7:88:c8:cc:9e:
         51:e1:97:68:42:61:56:7a:20:32:96:3d:06:9b:ee:6f:13:57:
         a9:86:64:8b:fc:34:a6:07:b8:60:e3:b7:fb:e8:bb:43:35:f1:
         d3:bb:a7:79:f8:26:bf:54:2d:8f:dd:15:6b:74:a5:6c:dc:b7:
         3f:59:25:8f:85:f3:9d:12:d1:29:b3:d8:48:17:fd:6a:56:81:
         f0:9c:b2:b6:85:ad:42:2a:cc:8b:94:d6:22:92:e7:88:47:31:
         5b:5a:1e:46:10:65:6e:c8:8c:0f:f6:86:4d:7c:8a:05:a3:71:
         f2:37:cc:55:41:51:e1:46:91:5b:84:75:e3:d3:d4:41:ac:bd:
         8b:f9:13:92:20:f2:90:b2:07:36:a6:f2:d1:82:1f:f9:c0:f7:
         5a:98:a1:83:4d:aa:f4:e5:20:14:a5:92:59:8e:03:17:e6:9d:
         37:c4:49:bb:a2:ab:71:04:e0:e3:8c:a5:45:a8:9d:f8:8d:38:
         80:68:86:ea:26:ce:6b:55:90:bd:14:dd:63:0f:19:dc:a8:ff:
         68:ee:8c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:48:05 2025 by rpki-client