Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa
File:                     d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa (download)
Hash identifier:          YyHcrb+aU2Ctj1sENbsgvVFeG4JkwvvLKFq4CtZPk50=
Subject key identifier:   07:01:43:89:EC:83:AB:C6:74:49:12:01:B0:65:4F:56:DE:E3:A9:20
Certificate issuer:       /CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Certificate serial:       010D0C9F4328583E18FFCAF86C8173591D987330
Authority key identifier: 20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa
ROA valid until:          Aug 29 04:00:00 2024 GMT
asID:                     399686
IP address blocks:
    1: 172.111.0.0/22 maxlen: 24
    2: 172.111.0.0/24 maxlen: 24
    3: 172.111.1.0/24 maxlen: 24
    4: 172.111.2.0/24 maxlen: 24
    5: 172.111.3.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:18:ff:ca:f8:6c:81:73:59:1d:98:73:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d9b16a-e15f-46c2-a578-0677307787a3
        Validity
            Not Before: May 27 15:30:05 2022 GMT
            Not After : Aug 29 04:00:00 2024 GMT
        Subject: CN=4b1704e7-fd1c-47ea-9be2-974d99905a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:22:65:9d:22:05:87:b2:44:f1:d0:62:05:bb:
                    62:85:4e:27:aa:b3:66:7d:7a:11:08:2c:31:3d:d5:
                    29:8c:60:0d:aa:e8:fd:03:c8:c1:aa:da:50:c3:90:
                    5c:9b:8a:6b:8c:c8:63:39:48:c6:d9:ce:5f:ae:58:
                    a9:d6:ca:d0:2f:68:96:5b:21:92:89:44:4f:24:ad:
                    a1:80:0a:26:d2:5e:fb:ed:20:69:2d:22:a6:2e:71:
                    ec:2e:8b:cb:aa:6b:82:b7:96:22:91:34:eb:a7:52:
                    49:13:af:66:96:ec:11:53:18:59:dd:83:f1:b3:e1:
                    00:c5:1e:2d:d7:41:60:63:3c:9a:74:0c:27:64:52:
                    b3:06:e7:7d:7c:ab:88:2c:95:d2:55:eb:83:8d:c7:
                    82:ea:b9:1e:f3:cf:8c:b7:8e:9b:77:93:ff:00:ed:
                    13:2d:fc:ac:97:ab:dd:a8:45:fd:27:e2:66:2e:13:
                    52:ec:75:26:d8:43:ba:e0:c4:47:7c:6d:f0:1a:56:
                    29:ac:e0:0c:45:d4:6f:4b:e6:e3:00:6c:bd:9b:75:
                    01:f6:36:14:be:31:d6:c4:5f:90:a4:a2:77:1e:c4:
                    6e:6b:5c:87:d8:b8:2f:89:2e:09:d0:cd:13:b7:95:
                    54:f9:17:23:7f:5a:ab:41:25:57:59:45:48:1d:d4:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                07:01:43:89:EC:83:AB:C6:74:49:12:01:B0:65:4F:56:DE:E3:A9:20
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/d7ee4e5c-8655-36de-ac53-c9d9c92083b1.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl

            X509v3 Authority Key Identifier: 
                keyid:20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:bb:cd:37:a8:a5:9b:52:aa:4a:3e:5b:12:50:ff:5a:20:9e:
         2b:83:b4:81:a3:bc:93:35:e6:9c:cf:71:b9:23:c2:69:12:3f:
         d2:e3:0d:a0:65:56:f2:a1:3b:87:73:d6:4e:43:bf:de:d6:fa:
         1f:0c:3a:d2:24:53:8f:43:70:84:ed:01:de:b1:75:d0:c8:60:
         ce:21:f2:d3:fd:0d:ae:ff:14:68:97:8b:0f:aa:2c:1e:44:0c:
         99:ee:2e:82:96:26:df:07:8b:0e:40:97:1b:c2:ce:2e:88:e1:
         e6:83:99:2f:74:eb:ba:6a:c8:d7:fc:ba:3c:20:90:13:77:d7:
         6c:5e:34:02:07:c6:31:69:3e:1d:a9:d2:d3:09:bc:aa:ea:2e:
         69:b9:68:de:3f:68:57:a8:d8:10:85:01:d5:d2:19:4d:6a:bd:
         40:0e:a0:ae:c3:aa:24:8f:92:e4:07:81:6f:70:b2:af:06:d9:
         51:11:59:55:d2:97:96:14:12:6f:da:a4:45:45:00:2e:77:cb:
         72:3c:30:c8:cc:8b:d3:a7:b7:eb:de:32:2f:47:7a:f5:ca:b0:
         bd:9b:37:2a:49:4d:df:c6:6b:ed:9e:76:31:82:46:6d:a9:b1:
         35:61:a2:9e:e9:c9:d8:f4:8c:b4:f3:46:00:06:02:35:4f:b8:
         cc:64:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 03:43:23 2022 by rpki-client.