Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/692417e7-6eff-392f-8306-bb8fa10fd75e.roa
File:                     692417e7-6eff-392f-8306-bb8fa10fd75e.roa (download)
Hash identifier:          ATeJldD+jm+yVvNdgnj6aEv3qPreJqNO7fBR170XYLU=
Subject key identifier:   ED:24:BC:AB:59:53:DA:21:29:53:24:DD:D2:1C:60:A4:73:97:03:8F
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328583988FFFE21B37C161105B17000
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/692417e7-6eff-392f-8306-bb8fa10fd75e.roa
ROA valid until:          Jan 24 05:00:00 2030 GMT
asID:                     1239
IP address blocks:
    1: 63.223.67.0/24 maxlen: 24
    2: 63.223.79.0/24 maxlen: 24
    3: 63.223.80.0/22 maxlen: 24
    4: 63.223.85.0/24 maxlen: 24
    5: 63.223.104.0/23 maxlen: 24
    6: 63.223.113.0/24 maxlen: 24
    7: 63.223.118.0/23 maxlen: 24
    8: 63.223.122.0/24 maxlen: 24
    9: 63.223.125.0/24 maxlen: 24
   10: 63.223.126.0/23 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:88:ff:fe:21:b3:7c:16:11:05:b1:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jan 24 05:00:00 2020 GMT
            Not After : Jan 24 05:00:00 2030 GMT
        Subject: CN=812b2eb1-0dd3-42b7-9d0a-14203b52e1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b5:bd:1e:3f:97:56:51:db:87:e0:2c:c5:ba:
                    1c:a0:47:b0:34:23:d1:dd:0c:fb:26:2e:6c:30:a6:
                    b6:07:36:8e:f0:23:89:75:8e:2c:16:2e:45:e9:c7:
                    58:b4:5a:21:3a:f3:53:80:5c:3f:92:06:6b:15:c9:
                    a3:3d:7d:63:d7:e7:a5:96:6f:ec:90:45:82:3b:ad:
                    cd:3e:c6:3a:59:75:b6:24:be:6e:23:f9:00:f5:84:
                    29:a0:22:64:79:16:bf:28:cc:5c:c9:3e:85:45:d7:
                    93:c9:af:83:4b:24:26:71:00:9a:fe:7c:28:3a:59:
                    8a:ff:c6:d1:0b:49:2c:9c:01:ad:d7:c6:5e:ba:7c:
                    c9:66:cc:6b:32:8d:5d:a6:7e:85:4e:94:21:5e:87:
                    af:bc:ea:30:ea:33:f4:c8:8e:58:f7:eb:b5:f7:d7:
                    1a:61:e8:52:a1:8c:46:b6:0e:ab:3b:42:1b:ea:be:
                    97:4f:ed:92:d6:03:be:dc:ce:78:38:79:85:eb:10:
                    94:7c:d3:5e:75:76:6e:c7:a7:71:78:fc:17:7e:ec:
                    22:4c:89:8e:e6:be:0c:e2:d3:1d:62:8f:52:ee:62:
                    eb:89:83:ed:ba:66:45:c7:e0:2e:40:5d:30:4e:c2:
                    cd:32:39:73:82:ca:48:77:e5:67:87:7b:a6:14:16:
                    76:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                ED:24:BC:AB:59:53:DA:21:29:53:24:DD:D2:1C:60:A4:73:97:03:8F
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/692417e7-6eff-392f-8306-bb8fa10fd75e.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier: 
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.223.67.0/24
                  63.223.79.0-63.223.83.255
                  63.223.85.0/24
                  63.223.104.0/23
                  63.223.113.0/24
                  63.223.118.0/23
                  63.223.122.0/24
                  63.223.125.0-63.223.127.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:5a:39:2f:96:2d:84:15:b6:86:af:30:ba:76:4f:94:a7:e1:
         f3:33:ed:48:e2:b6:fd:9e:1b:04:a8:cc:31:7f:5f:71:72:7a:
         23:e3:05:41:b7:1c:a2:a1:74:79:9d:56:4a:db:5b:83:fa:9f:
         8e:76:01:54:c9:48:76:e0:ed:8e:54:7e:3b:f9:63:a7:bc:a7:
         07:0a:b3:44:51:28:e9:e3:23:4e:fc:76:dc:52:97:39:f3:2a:
         38:ab:e7:2b:8d:87:c3:5d:24:2b:38:f8:33:95:54:34:f8:36:
         46:aa:ef:68:e1:30:1d:25:ff:07:b3:1b:b6:ac:e3:96:9b:23:
         ce:3d:44:71:e7:d6:61:e0:17:7a:43:57:4b:71:f4:8c:53:75:
         20:0d:dd:71:29:55:4f:52:bf:4b:cb:f0:84:88:45:62:62:3b:
         35:27:2b:d5:c4:50:39:3e:e3:07:56:21:cb:3a:97:9d:81:16:
         59:13:e3:5a:d0:84:bd:a2:21:f6:c0:4c:4a:7d:b5:ee:32:a3:
         70:73:a0:06:3f:ae:bb:5b:42:e5:98:d9:71:31:03:93:6b:67:
         c9:22:0c:16:5f:dc:13:3b:fc:8a:2a:a8:cb:1b:6d:a5:6a:78:
         9b:41:71:ae:e5:fb:c1:7e:95:b9:23:db:47:eb:a5:3e:a1:4d:
         d0:31:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 10:28:34 2022 by rpki-client.