Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa
File:                     a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa (download)
Hash identifier:          qUXeS+jZ0h7UBv/tKRqCWPJMiCuGtMC/8+t/NTD8JHE=
Subject key identifier:   D9:5C:23:2C:88:2D:63:31:51:8D:29:E4:19:BE:1E:28:87:42:78:09
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328583A4778CBC2B990684329B50500
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa
ROA valid until:          Sep 19 04:00:00 2026 GMT
asID:                     20473
IP address blocks:
    1: 64.156.14.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:47:78:cb:c2:b9:90:68:43:29:b5:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 10 05:00:00 2019 GMT
            Not After : Sep 19 04:00:00 2026 GMT
        Subject: CN=71c4286d-c517-4d07-b192-de50084e94d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:52:a2:b8:95:2d:c4:a1:af:2a:3c:19:e6:
                    0b:89:e4:5f:d0:d8:2b:06:c9:75:07:8b:d1:ad:6a:
                    cc:e4:94:04:69:1e:19:01:c5:66:87:9b:05:e4:97:
                    1e:f3:a8:b5:de:87:6c:3f:5e:f4:a7:d1:7c:7f:4f:
                    e8:f8:51:c0:78:69:15:14:ce:2e:fb:95:f9:06:90:
                    57:a6:e8:ee:92:ac:21:26:fb:7c:0d:ba:f4:f1:5f:
                    d3:1e:8b:8f:68:dd:2a:79:98:6b:c3:cf:c9:ed:d9:
                    b6:2a:e5:5d:01:a8:83:41:cb:35:aa:30:e6:c8:4c:
                    2a:e4:34:a1:17:7b:cd:b4:72:49:32:83:b4:c0:fe:
                    97:e1:c1:cd:69:b4:ee:58:08:c5:f3:27:19:8a:62:
                    bb:88:77:57:da:93:31:12:71:39:e9:42:35:f8:22:
                    8e:be:90:d4:c2:4c:6c:b7:c6:d3:57:80:13:15:54:
                    78:b0:ab:aa:ed:ad:87:9b:cf:3b:5e:76:8a:53:9c:
                    6f:4f:19:46:2d:24:ce:29:dd:97:91:28:c3:40:b1:
                    3a:f6:6b:1e:15:5e:5c:1e:86:74:0a:32:2e:12:52:
                    b0:af:c0:e3:bd:eb:5b:ef:7f:cb:d0:f6:d2:bc:0c:
                    6b:44:aa:9f:f0:65:d8:91:30:53:e7:49:9f:f2:08:
                    70:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D9:5C:23:2C:88:2D:63:31:51:8D:29:E4:19:BE:1E:28:87:42:78:09
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/a2af7c81-aa82-3c15-a78f-d69453ae61d1.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier: 
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.156.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:bb:d7:d1:f7:4d:ed:4f:8d:9c:33:f8:68:af:75:dd:e1:f5:
         34:dd:a4:a7:a7:0b:49:fc:00:1a:03:b3:b6:7f:3d:36:f6:18:
         1a:1f:bd:d4:de:fe:c7:94:38:4c:09:10:8d:1c:98:5c:ec:fa:
         9e:75:6b:2a:b6:9a:be:27:11:09:6f:87:58:01:f1:77:43:c7:
         55:f5:17:7c:6c:79:f9:90:f6:a9:39:89:6d:0e:a9:af:57:c4:
         42:b6:51:32:81:b9:91:1a:7d:e7:b8:92:43:9b:d6:b0:a1:34:
         89:9f:02:d5:51:3c:28:69:eb:02:4a:b7:89:d5:15:2a:f8:ea:
         ff:c4:f5:ac:f2:aa:bc:8a:63:4c:f0:f7:9b:6c:77:42:46:22:
         a2:2c:10:c6:2a:7d:ea:06:c7:dc:70:d2:e6:3a:a8:60:a5:8e:
         b9:b6:ec:a0:47:6d:cf:01:64:56:3a:7f:31:00:a4:aa:1f:a7:
         4a:cd:7f:45:df:95:77:3d:3c:e8:0c:e2:13:76:fb:f2:98:d2:
         2c:e1:a4:e0:5e:e1:81:5b:bf:7e:c3:b6:a4:17:39:41:58:7e:
         a3:e7:e4:89:83:83:a3:fa:8d:76:2d:74:74:92:ac:46:24:71:
         a3:47:25:74:27:6f:0e:e4:ad:84:52:22:37:2b:0b:76:e9:81:
         3f:5c:8b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 01:31:02 2022 by rpki-client.