Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa
File:                     32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa (download)
Hash identifier:          w90xZmg6I3H2UVgmfOnOnTBoedJXyTxIfytqPXQ1Grk=
Subject key identifier:   25:83:C7:73:12:B6:F1:D3:C8:0B:17:30:1C:9E:E9:6D:F5:2B:AF:64
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328583A46154B2006FDBF846D015580
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa
ROA valid until:          Sep 18 04:00:00 2026 GMT
asID:                     20473
IP address blocks:
    1: 8.9.30.0/23 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:46:15:4b:20:06:fd:bf:84:6d:01:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Sep 18 04:00:00 2026 GMT
        Subject: CN=6cbc2bf1-8661-4c16-9ceb-a038c76e2fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:dc:06:95:66:a4:7a:06:62:fe:14:b2:ea:
                    da:f1:f9:39:c0:80:28:f1:21:10:b9:b0:18:b6:96:
                    44:a7:91:73:f9:74:b6:a5:1c:c8:3c:fd:37:9c:03:
                    b3:7d:01:84:d5:b4:5d:ae:a2:bf:ce:69:45:0e:94:
                    03:c2:b4:f4:3d:84:69:26:f0:2f:fc:f9:6d:85:15:
                    68:56:5d:41:cd:b7:00:89:4d:00:df:f6:84:c8:02:
                    21:ac:08:90:4a:08:26:d2:90:96:d0:6c:17:76:a7:
                    c2:2a:1d:c4:55:db:e1:c3:99:ea:12:8f:ad:45:58:
                    9f:98:29:8f:2a:21:f9:e2:8b:8f:ff:49:4a:ad:6f:
                    f5:c9:1f:e9:7c:a9:c7:38:c2:ed:56:7e:26:ab:48:
                    8e:c3:d5:ff:03:a9:bd:ac:46:c5:e4:2d:84:a0:51:
                    c6:bd:ab:cf:8b:49:6a:31:b6:e3:08:de:b3:bd:e7:
                    c5:48:14:af:c1:e7:74:bb:9c:0b:6c:67:f2:5e:ea:
                    24:e2:4f:48:71:7a:5a:62:ae:11:c7:bf:f6:11:c1:
                    11:f2:93:60:22:85:4f:07:f9:a4:57:7e:8a:97:22:
                    c4:19:71:1a:7f:c8:53:03:d5:e4:c0:1d:34:e1:6a:
                    5d:da:95:88:eb:86:8d:fd:09:49:2f:50:1c:bc:3c:
                    af:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                25:83:C7:73:12:B6:F1:D3:C8:0B:17:30:1C:9E:E9:6D:F5:2B:AF:64
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/32bad782-d59d-36d3-943d-cf1d16fc0bd3.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier: 
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.9.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b1:ba:a7:1f:b1:b7:c0:fa:55:72:9d:7a:87:f3:08:76:c5:
         3b:14:70:e2:96:b5:f5:f2:22:09:b4:5d:c4:9b:ab:67:59:4c:
         71:fb:5e:88:81:0a:7f:04:a8:07:ec:83:9b:35:60:8a:64:f0:
         55:7b:02:87:cf:f5:2e:95:55:23:5f:24:e6:b0:f3:64:f3:13:
         98:ee:34:9f:f0:19:d0:d4:67:45:11:35:49:24:30:9a:36:c0:
         77:84:c7:bd:37:95:db:cc:c4:33:c3:4d:6e:83:66:c6:64:70:
         c8:1e:b1:ef:71:96:bc:0b:ef:02:32:db:3c:8d:41:bd:76:2c:
         45:84:d1:92:ab:06:8d:99:f6:f7:53:15:14:ce:b4:6d:7f:1d:
         6c:c3:74:4b:3d:eb:f4:0f:2f:5e:2c:85:e1:bc:df:3a:e9:32:
         bb:c9:9c:bf:44:94:19:68:6e:9e:b2:fd:fd:6f:10:2f:ba:c9:
         c7:b7:7b:6f:6b:ee:e5:f8:14:c1:f6:08:46:84:9d:ce:57:9c:
         e0:a4:de:cb:88:9d:19:58:90:cc:60:f9:98:26:9e:30:ad:5c:
         a0:4b:c2:d7:31:9b:8f:71:b6:2a:9f:a8:f0:6e:7a:73:12:af:
         6c:d2:6c:28:e1:46:4d:a8:03:5c:9b:d5:2c:55:f0:6b:c1:b7:
         14:64:82:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 02:11:13 2022 by rpki-client.