Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0cbc735-f423-33ef-b1d4-ee4cca279f0d.roa
File:                     a0cbc735-f423-33ef-b1d4-ee4cca279f0d.roa (download)
Hash identifier:          2NO8jcsRzgcoDFOqp4hWtfLADWy33KfAhwOscqaQzSg=
Subject key identifier:   08:50:DD:C8:9D:44:F2:B6:34:FE:56:CE:89:CB:FE:7D:1A:C7:E6:52
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328583A4619CE5FCF7BA01746513180
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0cbc735-f423-33ef-b1d4-ee4cca279f0d.roa
ROA valid until:          Sep 18 04:00:00 2026 GMT
asID:                     20473
IP address blocks:
    1: 8.12.16.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:46:19:ce:5f:cf:7b:a0:17:46:51:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Sep 18 04:00:00 2026 GMT
        Subject: CN=7b653894-6024-450e-a709-9580b1c2a8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1e:7d:65:84:bf:cd:f5:8c:b8:5e:a4:3e:f0:
                    13:d3:12:94:07:a8:e8:de:c5:8a:57:88:36:df:af:
                    3a:3f:c8:27:40:73:59:d3:4a:30:1c:6a:a3:33:7f:
                    a2:c0:e4:8b:ec:f2:7c:6f:41:51:65:30:9e:dd:b8:
                    d9:6b:71:81:2f:88:e5:65:cf:23:1b:47:50:24:ec:
                    21:02:d7:1a:76:d4:c7:9b:62:4a:ae:8a:89:da:9b:
                    76:38:37:85:22:f3:cd:59:f3:5b:d1:63:ae:d1:4f:
                    75:65:da:20:47:d7:d2:1f:38:5e:4a:fd:b3:76:93:
                    50:e6:15:c7:dd:9f:c2:e8:be:eb:60:96:22:b4:bc:
                    ec:38:9f:e0:6f:44:bc:1b:50:46:3b:b3:74:84:c9:
                    e9:8b:87:b4:54:42:0c:84:cd:14:29:da:ab:fb:97:
                    05:e5:8d:56:10:e4:c0:9d:a1:86:b4:1e:eb:f0:06:
                    70:35:71:9d:ea:ff:d9:b2:0f:5f:f8:10:2b:30:b8:
                    19:37:6d:5e:bb:3e:23:08:c2:85:c1:c1:04:56:b5:
                    c3:ef:ca:fb:b9:ed:a8:2b:68:d8:c6:5b:1b:fc:00:
                    d0:f4:ac:a9:84:8d:14:8a:97:61:22:9d:71:52:b9:
                    5f:b2:29:61:b1:05:f8:f9:7c:e9:7b:6b:89:c8:8a:
                    3c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                08:50:DD:C8:9D:44:F2:B6:34:FE:56:CE:89:CB:FE:7D:1A:C7:E6:52
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0cbc735-f423-33ef-b1d4-ee4cca279f0d.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier: 
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.12.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:d0:d7:7b:b6:f5:bf:18:42:c7:64:4c:a2:bc:4e:d2:04:ce:
         49:6c:df:cc:72:d4:98:b0:03:ed:6c:e7:1c:3f:74:8e:19:57:
         cd:f3:8a:79:db:d5:d9:98:81:cb:e4:11:7a:c7:27:97:3f:3f:
         14:95:65:bb:16:bd:59:e1:58:53:29:58:2c:15:27:d2:09:45:
         67:07:37:5c:df:78:e6:9a:01:dc:9f:68:92:29:6d:a1:71:b5:
         24:b9:9f:10:4e:5f:20:cb:fb:e0:69:87:0d:e5:6c:01:98:fb:
         14:79:d2:21:04:26:a6:24:24:76:d3:ce:d9:bb:00:71:e9:13:
         92:0d:08:fc:5a:1f:be:84:ad:85:08:14:8d:1c:5a:ee:ce:48:
         da:ea:30:4f:8c:9b:64:5c:6a:63:6f:93:30:f1:9f:bb:78:97:
         fb:44:3c:aa:59:d9:b1:84:8b:e5:d9:cf:60:7b:f8:6a:23:67:
         2b:b4:25:68:cb:4f:cf:03:d5:93:5c:6b:a2:a4:0b:0f:9f:59:
         77:96:69:6f:8e:ea:ca:5b:fa:4e:26:dd:af:ff:09:fd:69:09:
         78:6f:8d:2e:eb:24:f9:e6:aa:98:0f:36:5f:71:3a:e2:a3:15:
         42:88:f6:4b:64:5d:f3:d6:fe:8a:48:58:ae:d7:15:8a:af:9d:
         5a:61:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 02:10:59 2022 by rpki-client.