Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/0e698dde-35f7-3fac-830f-bf28ba0b1509.roa
File:                     0e698dde-35f7-3fac-830f-bf28ba0b1509.roa (download)
Hash identifier:          WBshYnIf9tDwQkRk0ar9nnSfeMFoM5X4Aj1L0LG8D34=
Subject key identifier:   4A:9A:96:B0:0C:AB:D1:23:05:CD:BC:35:0A:26:84:D1:0A:E7:9C:07
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328576D51CC73C042CFC16EDBD81814
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/0e698dde-35f7-3fac-830f-bf28ba0b1509.roa
ROA valid until:          Sep 25 04:00:00 2028 GMT
asID:                     20473
IP address blocks:
    1: 216.128.128.0/18 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:db:d8:18:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep 25 04:00:00 2018 GMT
            Not After : Sep 25 04:00:00 2028 GMT
        Subject: CN=1982686e-4103-4f83-b7c9-d39cee81ef5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:7c:e9:57:ab:78:e2:7c:7f:95:49:5b:cf:
                    4c:b9:27:8f:b4:78:5c:4b:56:54:be:6b:f8:b1:cd:
                    27:f3:8b:c6:25:9b:97:2e:d3:1a:56:19:5b:8f:62:
                    ec:c2:d2:54:04:3c:de:b3:43:7b:3e:a5:46:6d:36:
                    28:dc:4d:d9:2b:dd:a1:2f:50:18:1e:00:72:59:80:
                    8c:20:27:2c:3f:a3:e1:b7:e0:93:51:42:03:e1:a8:
                    38:53:05:c2:2d:87:aa:9b:3f:55:1d:37:7c:07:43:
                    b9:b2:b3:9e:1c:42:84:ef:df:77:67:8d:35:87:87:
                    db:26:18:53:86:39:ff:35:f8:d8:3f:9b:27:f0:53:
                    b6:f5:b3:f5:96:00:8d:98:9c:b5:c4:a9:6f:11:da:
                    40:0f:61:11:89:7a:d0:ff:84:3c:16:a9:18:73:0a:
                    9c:e2:d5:da:53:6c:d7:23:a0:55:02:dd:40:5f:da:
                    ec:c3:38:7b:0c:e2:77:83:63:42:02:50:b9:6d:a4:
                    27:4a:2b:6d:45:8c:e2:ac:37:01:33:36:ca:49:41:
                    22:e6:a1:aa:46:a4:c9:4b:fd:ec:5a:89:7d:b6:10:
                    f2:40:b4:43:6a:bf:ee:6f:6d:f7:b5:c6:b9:92:c6:
                    f6:0e:e1:73:09:2f:e6:3a:c0:7f:f9:14:b6:94:5a:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4A:9A:96:B0:0C:AB:D1:23:05:CD:BC:35:0A:26:84:D1:0A:E7:9C:07
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/0e698dde-35f7-3fac-830f-bf28ba0b1509.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier: 
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.128.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c9:2d:1e:8d:dc:d7:e2:8a:50:0e:a7:f9:82:f3:9e:8b:d5:
         ad:3b:c5:b3:18:7a:89:0c:1e:b1:c8:32:98:1a:88:72:2f:3a:
         85:a4:5d:e2:f2:b9:61:95:25:02:00:c8:33:f7:55:d8:e6:4a:
         43:b6:66:89:c4:82:fe:cc:07:d1:18:e7:4b:21:ce:b5:db:bc:
         c9:99:be:84:f2:7f:98:6b:2d:f4:57:7e:53:1f:7e:e7:23:0d:
         c7:f2:93:96:d8:72:f3:34:70:0a:47:37:2d:18:bc:53:3a:94:
         5f:d3:13:b8:7b:54:dd:7c:9b:d3:6e:3d:6c:4e:17:4b:47:cc:
         d4:17:34:4c:98:60:f5:11:c1:92:86:a5:f2:df:df:66:d0:8b:
         f0:a4:1d:57:37:7b:b0:34:89:c9:3c:e6:b2:78:f0:57:28:23:
         fd:a7:01:eb:c7:7e:a1:bd:3e:b1:d6:5e:47:5c:8c:b8:2a:5f:
         82:f5:3b:f8:04:29:13:6e:72:4f:bc:07:42:e2:ff:a8:0d:05:
         35:7b:fa:62:da:cd:04:47:fc:25:59:4f:11:2f:c1:68:84:9c:
         12:7c:a2:ef:7e:93:99:6d:b0:bc:28:80:f7:a1:ea:b9:fa:90:
         9d:12:08:91:3b:98:44:14:34:73:ee:49:76:1a:d2:dd:57:4e:
         63:f0:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 02:12:09 2022 by rpki-client.