Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa
File:                     a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa (download)
Hash identifier:          ReGrC+Qjv22LExKkXADwp04v+wXEYwSTF0dDIliYLYs=
Subject key identifier:   50:7C:7E:F0:5F:C8:FA:80:88:7F:A2:58:B7:19:00:7F:39:44:C7:43
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328583A46105CEC5244B8E963A42780
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa
ROA valid until:          Sep 18 04:00:00 2026 GMT
asID:                     20473
IP address blocks:
    1: 8.9.8.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:46:10:5c:ec:52:44:b8:e9:63:a4:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Sep 18 04:00:00 2026 GMT
        Subject: CN=307b0218-2962-4514-a7ff-8351ba2ee06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:53:32:fe:08:20:39:ac:1d:e4:95:e5:1d:32:
                    fc:65:74:63:af:26:d7:c8:2f:00:f7:35:98:80:98:
                    33:cd:13:a7:7d:ef:00:ef:4e:fc:47:74:a5:8d:0e:
                    29:ba:b1:35:94:e7:45:e5:49:de:8c:86:6b:45:7a:
                    0b:50:02:56:6d:36:bc:30:ca:4e:b9:e6:97:a5:3e:
                    bd:db:85:6b:ab:19:cc:a8:2a:bd:c2:ea:31:55:21:
                    ab:18:1a:d2:95:a6:3c:ca:b3:5b:f0:5d:0c:87:32:
                    f6:3f:ea:16:c3:7e:da:da:ca:d6:bd:af:b9:a2:9b:
                    2c:56:87:4d:8f:5f:37:8c:fb:2b:77:b2:07:2b:9c:
                    be:b2:fe:e0:2f:ad:68:f6:46:4c:d3:b7:ba:b6:3f:
                    1c:3e:32:29:1c:cd:6d:dc:ef:75:5b:33:a3:8b:d7:
                    d9:a6:5b:2a:d6:56:53:2b:0b:c6:5f:94:7b:f7:bc:
                    0e:f2:1e:6e:4d:82:66:49:7f:a6:b5:df:6e:03:e7:
                    0a:d6:c5:6f:ca:38:01:d0:5e:0f:79:89:b1:d4:6e:
                    d1:2e:15:a3:b3:f0:ea:32:c7:cf:43:74:89:dd:93:
                    01:cb:4a:65:77:59:13:36:fd:89:ac:81:42:26:75:
                    78:4f:01:f2:6c:d7:58:ff:15:d8:8b:8e:3c:24:70:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                50:7C:7E:F0:5F:C8:FA:80:88:7F:A2:58:B7:19:00:7F:39:44:C7:43
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a0ec188d-bb67-3d7c-bbff-eda5c4669c3f.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier: 
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.9.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:23:da:04:23:a0:df:2c:31:24:f0:2d:95:6f:b8:47:1f:d2:
         9c:f5:85:c3:1c:77:fe:bb:9d:2e:93:47:24:00:b4:6b:56:60:
         46:99:58:fe:ab:04:a0:a7:4f:ea:ac:37:4e:42:8c:55:b7:73:
         13:40:b4:8d:2a:fb:d2:03:6a:f7:09:b3:cf:25:cf:ef:db:f6:
         47:e8:b1:3c:9a:c2:da:16:a1:4a:f8:b8:a6:34:4a:cc:2d:71:
         7a:96:ca:b8:8d:7d:a5:80:82:d2:18:94:4c:9f:9a:a8:8f:14:
         0d:cf:6b:89:5e:5d:3f:db:a6:98:f2:05:60:9d:fa:18:f9:30:
         c8:50:08:a2:f0:85:35:95:07:67:99:23:65:12:27:a2:fb:5a:
         09:5a:bc:8a:d2:f4:68:b4:73:c3:84:d8:1f:f2:cd:5b:4d:a2:
         c0:a4:1b:36:55:0d:b5:3a:ed:85:55:3f:92:9b:a3:5a:60:10:
         a4:c6:83:3b:72:52:2e:48:63:55:00:23:fe:23:3a:4d:26:17:
         f3:03:af:81:bb:89:98:08:63:38:c8:13:3d:0a:e0:54:bb:7a:
         e8:5c:78:7f:82:6a:f2:a3:d0:ab:8e:1e:ae:9d:24:cb:7a:fb:
         4b:98:7e:46:38:a1:be:05:54:99:11:97:fc:eb:7f:83:6d:17:
         df:ca:ad:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 02:11:13 2022 by rpki-client.