Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/b4238a40-d4e9-3b62-8b2f-8595a2cbdc38.roa
File:                     b4238a40-d4e9-3b62-8b2f-8595a2cbdc38.roa (download)
Hash identifier:          ip4Md525PrH28S0LYnMkk54TMutVRz/3MUoF0y9cdOo=
Subject key identifier:   A8:06:DA:29:BF:D4:1D:C2:5C:DD:83:5D:E5:40:44:99:F3:AD:00:D9
Certificate issuer:       /CN=0e7c2507-d7b8-4812-a32c-3921f99fe3de
Certificate serial:       010D0C9F4328583E39FBFBDF299899068530D280
Authority key identifier: 59:93:65:72:4B:C7:C1:E2:50:38:21:F7:0E:C8:DA:20:9C:FC:11:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/b4238a40-d4e9-3b62-8b2f-8595a2cbdc38.roa
ROA valid until:          Sep 15 04:00:00 2024 GMT
asID:                     399849
IP address blocks:
    1: 208.99.54.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:39:fb:fb:df:29:98:99:06:85:30:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e7c2507-d7b8-4812-a32c-3921f99fe3de
        Validity
            Not Before: Jun 13 13:23:51 2022 GMT
            Not After : Sep 15 04:00:00 2024 GMT
        Subject: CN=26038bbf-7310-4750-b723-109510784063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:68:0b:de:1d:8d:14:22:95:20:21:67:77:
                    c9:29:64:12:91:bd:eb:c4:cc:d2:c3:e7:17:e8:92:
                    41:f1:0f:60:c8:b0:41:f3:78:c0:34:87:c1:46:44:
                    92:db:b7:e2:2a:58:a6:11:b5:2b:ad:e3:90:8c:ed:
                    11:ab:25:96:1c:45:90:28:6d:ea:ae:a7:3e:ea:ac:
                    e5:8a:55:d7:3a:a7:2e:54:42:f0:9f:9f:73:f5:9e:
                    ef:04:f2:9a:5b:98:15:b9:41:e3:f7:bc:2d:93:75:
                    3e:16:d5:a6:15:6b:59:95:c2:41:55:44:3d:63:21:
                    88:25:33:4c:d9:60:ad:80:fa:6d:24:d1:74:4f:2c:
                    bc:fb:92:7f:56:2f:37:df:28:eb:79:c6:cb:c5:b5:
                    83:7c:a0:bd:5a:1a:ce:12:0f:a1:e3:9e:76:70:90:
                    89:b7:d5:78:c2:92:9e:31:4b:60:fa:a9:4d:0c:90:
                    67:a3:2a:ac:2f:b2:e0:18:df:8b:59:e8:9b:d1:da:
                    e8:f9:0d:ac:48:e8:aa:13:64:84:76:ae:72:a7:2c:
                    75:4b:fd:3c:b1:56:87:86:fa:db:9e:f8:bd:ec:dc:
                    a3:f7:f5:13:f6:46:41:4f:1e:fe:9a:18:f2:73:e4:
                    74:56:ff:81:0d:62:47:ca:b0:c7:aa:6b:81:1b:93:
                    61:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A8:06:DA:29:BF:D4:1D:C2:5C:DD:83:5D:E5:40:44:99:F3:AD:00:D9
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/b4238a40-d4e9-3b62-8b2f-8595a2cbdc38.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de/0e7c2507-d7b8-4812-a32c-3921f99fe3de.crl

            X509v3 Authority Key Identifier: 
                keyid:59:93:65:72:4B:C7:C1:E2:50:38:21:F7:0E:C8:DA:20:9C:FC:11:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0e7c2507-d7b8-4812-a32c-3921f99fe3de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:5a:64:1b:d9:3c:a9:4b:e0:ee:19:c8:87:d0:5a:c2:7a:af:
         48:d0:0c:07:9d:4b:cb:79:95:a9:3f:01:cd:84:1d:1d:f3:97:
         cb:1d:c8:45:3e:10:9c:be:c5:04:68:a4:dc:99:b3:3a:7d:6b:
         5b:60:62:5c:46:b4:7f:69:2c:4b:31:d4:b0:eb:17:1b:75:5c:
         b1:16:59:ed:8f:ec:ce:a1:7f:00:01:52:1f:9c:af:14:6f:57:
         54:79:bc:69:26:ac:7c:28:6f:7a:96:58:11:23:81:74:20:08:
         9e:4c:d2:5b:10:18:61:81:63:76:6e:7c:70:04:62:17:76:36:
         f9:91:79:6d:bd:52:9e:7f:e9:45:b3:95:a6:10:83:6e:d0:a3:
         f8:45:47:3a:ac:01:61:2b:4e:cf:5c:a9:03:90:36:eb:27:a6:
         df:73:e0:ef:65:48:75:f3:37:e2:53:05:8e:53:34:be:a5:5c:
         e9:1a:17:df:12:f3:9e:b1:35:a5:d6:36:50:4b:2f:96:d8:7b:
         89:f3:91:76:7b:f5:36:8b:9a:b2:1e:06:8c:5d:54:8b:9f:4b:
         77:54:4e:1d:8b:d3:e7:c2:65:e9:ca:30:3d:dd:13:83:95:49:
         68:49:c6:d3:db:c3:2f:86:43:66:9d:f0:de:7c:c3:83:65:d4:
         24:bf:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 02:28:36 2022 by rpki-client.