Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/3d87e764-6ebd-3b46-879a-c50c7cfdc1c2.roa
File:                     3d87e764-6ebd-3b46-879a-c50c7cfdc1c2.roa (download)
Hash identifier:          Hp+G0q7WwaWbAf6xZwHr+YUSVuIPZGvyHbP4L8Vn9S0=
Subject key identifier:   75:CB:4A:F9:2E:DC:70:AF:F6:88:81:92:D4:8D:1A:AC:A5:AF:71:F9
Certificate issuer:       /CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Certificate serial:       010D0C9F4328583E1DDE06E5D55A280BD7630880
Authority key identifier: 20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/3d87e764-6ebd-3b46-879a-c50c7cfdc1c2.roa
ROA valid until:          Aug 29 04:00:00 2024 GMT
asID:                     399686
IP address blocks:
    1: 2606:62c0:1000::/36 maxlen: 36
    2: 2606:62c0:2000::/36 maxlen: 36
    3: 2606:62c0:3000::/36 maxlen: 36
    4: 2606:62c0:7000::/36 maxlen: 36
    5: 2606:62c0:8000::/36 maxlen: 36

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1d:de:06:e5:d5:5a:28:0b:d7:63:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d9b16a-e15f-46c2-a578-0677307787a3
        Validity
            Not Before: May 27 15:30:05 2022 GMT
            Not After : Aug 29 04:00:00 2024 GMT
        Subject: CN=d8b02a7d-e3ec-4841-a15b-de62a524fef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f7:11:8b:d5:ad:22:07:c5:55:3d:29:aa:83:
                    b0:af:47:ff:08:90:7b:f0:57:d9:1f:62:cf:9e:c5:
                    b5:96:6e:23:64:06:05:98:8d:08:62:33:e1:56:41:
                    93:ed:7f:4f:b8:ef:d2:87:64:44:09:0f:bd:e1:40:
                    27:07:bc:5d:e9:a4:8e:42:30:98:a8:22:ab:72:1f:
                    64:3f:e5:18:b8:44:da:f0:b7:78:80:69:47:78:2a:
                    47:ec:df:15:d5:da:ea:c7:79:ae:45:da:13:ff:5d:
                    bd:34:67:e3:00:04:6c:52:39:ca:cf:f8:ae:cd:83:
                    d4:a2:b9:ec:64:05:6d:45:df:c2:20:ed:f3:c6:a5:
                    1a:1a:c0:58:db:5c:18:0e:1d:13:9f:e8:05:bf:60:
                    1b:f9:dd:cd:c4:68:ac:cc:46:09:0f:0e:33:78:91:
                    4c:c9:c5:fd:0f:56:e5:f7:8e:95:30:47:dc:5c:c8:
                    e5:27:b6:c2:82:c0:17:aa:7f:5e:e7:66:97:55:d1:
                    35:b5:ee:5a:9f:ff:97:ae:fb:b0:10:ff:0b:33:01:
                    5f:f7:d2:56:ed:49:1c:50:da:09:fa:e1:74:03:44:
                    6c:b3:e2:5a:a6:78:e4:c4:87:4a:ca:41:e2:96:43:
                    5f:2f:5b:80:eb:bf:0e:1a:e5:5b:32:4a:9b:89:4a:
                    a0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                75:CB:4A:F9:2E:DC:70:AF:F6:88:81:92:D4:8D:1A:AC:A5:AF:71:F9
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/3d87e764-6ebd-3b46-879a-c50c7cfdc1c2.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl

            X509v3 Authority Key Identifier: 
                keyid:20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:62c0:1000::-2606:62c0:3fff:ffff:ffff:ffff:ffff:ffff
                  2606:62c0:7000::-2606:62c0:8fff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b2:8e:04:8a:94:fb:aa:4f:81:1e:cb:83:c2:7c:f6:f6:7b:
         39:0e:7b:1f:77:ef:d5:5b:45:fd:b4:b5:5c:cc:9c:2e:fc:80:
         66:01:82:44:39:bb:ae:54:ac:7d:51:08:90:f0:2b:75:35:66:
         1b:c9:0a:5e:4a:91:4d:55:9e:31:98:63:7f:df:1e:92:87:ca:
         bd:d2:03:1c:8e:39:0c:86:77:f5:ea:5e:5b:6d:8c:1b:65:bf:
         79:88:18:c1:0d:6a:1a:0e:dd:09:e1:c3:b6:6d:e3:a0:11:5c:
         07:1e:c5:60:08:c3:5c:b9:f3:24:16:31:18:33:49:91:72:4a:
         84:eb:d6:dd:c4:3e:3d:8c:a1:fe:86:30:69:44:62:f4:c8:c1:
         01:30:d1:d6:ff:b5:db:d0:3f:61:82:b2:62:36:bc:b1:58:0e:
         2e:42:74:37:61:1c:2d:08:97:97:9b:3c:6e:48:ee:a3:32:55:
         d5:9a:4d:06:90:47:3e:e3:d4:4a:57:c1:e2:d4:56:a6:b1:3e:
         16:e7:99:18:ba:1c:8c:ca:24:b5:21:ea:99:59:7e:0c:30:4f:
         8f:da:cc:fe:24:19:7d:c8:71:6b:17:78:06:92:55:8f:28:e7:
         5e:24:dc:79:48:ac:3b:21:ea:45:f4:74:7a:70:81:3b:8b:07:
         d9:1e:c0:b1
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWD4d3gbl1VooC9djCIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJkOWIxNmEtZTE1Zi00NmMyLWE1NzgtMDY3NzMwNzc4
N2EzMB4XDTIyMDUyNzE1MzAwNVoXDTI0MDgyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDhiMDJhN2QtZTNlYy00ODQxLWExNWItZGU2MmE1MjRmZWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfcRi9WtIgfFVT0pqoOwr0f/CJB78FfZH2LP
nsW1lm4jZAYFmI0IYjPhVkGT7X9PuO/Sh2RECQ+94UAnB7xd6aSOQjCYqCKrch9k
P+UYuETa8Ld4gGlHeCpH7N8V1drqx3muRdoT/129NGfjAARsUjnKz/iuzYPUorns
ZAVtRd/CIO3zxqUaGsBY21wYDh0Tn+gFv2Ab+d3NxGiszEYJDw4zeJFMycX9D1bl
946VMEfcXMjlJ7bCgsAXqn9e52aXVdE1te5an/+XrvuwEP8LMwFf99JW7UkcUNoJ
+uF0A0Rss+JapnjkxIdKykHilkNfL1uA678OGuVbMkqbiUqgmQIDAQABo4IDczCC
A28wHQYDVR0OBBYEFHXLSvku3HCv9oiBktSNGqylr3H5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMmQ5
YjE2YS1lMTVmLTQ2YzItYTU3OC0wNjc3MzA3Nzg3YTMvM2Q4N2U3NjQtNmViZC0z
YjQ2LTg3OWEtYzUwYzdjZmRjMWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjJkOWIxNmEtZTE1Zi00NmMyLWE1
NzgtMDY3NzMwNzc4N2EzL2IyZDliMTZhLWUxNWYtNDZjMi1hNTc4LTA2NzczMDc3
ODdhMy5jcmwwHwYDVR0jBBgwFoAUIEpA4zG5OEM/CEYzRRAWpoSxg2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMmQ5YjE2YS1lMTVmLTQ2YzItYTU3OC0wNjc3
MzA3Nzg3YTMuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkMBADBgQmBmLA
EAMGBiYGYsAAMBADBgQmBmLAcAMGBCYGYsCAMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF+yjgSKlPuqT4Ee
y4PCfPb2ezkOex9379VbRf20tVzMnC78gGYBgkQ5u65UrH1RCJDwK3U1ZhvJCl5K
kU1VnjGYY3/fHpKHyr3SAxyOOQyGd/XqXlttjBtlv3mIGMENahoO3Qnhw7Zt46AR
XAcexWAIw1y58yQWMRgzSZFySoTr1t3EPj2Mof6GMGlEYvTIwQEw0db/tdvQP2GC
smI2vLFYDi5CdDdhHC0Il5ebPG5I7qMyVdWaTQaQRz7j1EpXweLUVqaxPhbnmRi6
HIzKJLUh6plZfgwwT4/azP4kGX3IcWsXeAaSVY8o514k3HlIrDsh6kX0dHpwgTuL
B9kewLE=
-----END CERTIFICATE-----