Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/11322554-a6e4-3484-9b70-20dc92a20b17.roa
File:                     11322554-a6e4-3484-9b70-20dc92a20b17.roa (download)
Hash identifier:          jYwg+Pi1Bj2RJmNSSFSl4wMTb7XhSd/+wbL7/5REfEY=
Subject key identifier:   C5:FA:68:74:D0:77:B3:B9:5B:01:87:00:34:1F:F7:4C:CF:48:B9:38
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328576D51CC73C042CFC16A02B76D46
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/11322554-a6e4-3484-9b70-20dc92a20b17.roa
ROA valid until:          Sep 25 04:00:00 2028 GMT
asID:                     20473
IP address blocks:
    1: 136.244.64.0/18 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:02:b7:6d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep 25 04:00:00 2018 GMT
            Not After : Sep 25 04:00:00 2028 GMT
        Subject: CN=3564aced-14b1-4729-8654-d7958cc91e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1b:2c:7d:da:45:26:e0:66:5a:26:ee:0e:bb:
                    06:48:d3:4d:d2:25:94:d6:c6:2b:a9:8b:8b:77:ab:
                    aa:6d:a5:1c:06:25:69:4a:53:43:12:55:43:98:80:
                    01:e0:e9:2e:ec:8c:d8:0a:e0:60:d7:f7:b4:ed:5b:
                    a6:45:56:ca:37:dd:bd:0d:12:da:d1:65:7c:0c:66:
                    b8:3f:79:ea:b1:e3:3e:76:52:17:f6:63:c8:fa:47:
                    21:1e:fb:39:00:84:99:d1:df:10:e3:77:2a:c2:6a:
                    d8:4d:2a:01:ce:95:91:e7:a4:55:c3:28:61:d3:0e:
                    8f:7a:47:b8:71:a0:23:aa:de:4a:87:bf:11:00:bb:
                    40:9e:a8:dd:7a:7a:d3:fa:ae:f1:94:d4:3b:ba:a4:
                    12:14:a3:1f:93:3a:29:06:7b:f0:24:83:16:ae:57:
                    24:25:9f:fb:42:24:e9:d6:31:70:29:55:79:73:3b:
                    c9:bc:1c:5e:c3:57:9c:56:02:89:67:fd:de:b5:2a:
                    9d:c3:8f:a8:e1:ef:f7:85:27:e5:8c:33:56:bd:b9:
                    2e:29:2a:70:f2:2f:cf:89:bc:36:52:6d:e6:36:3a:
                    31:63:55:ec:8d:ce:09:b7:d5:ff:ba:f1:6a:e5:94:
                    18:6c:f2:0c:71:51:bf:ee:d9:b7:8c:49:17:56:04:
                    e6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C5:FA:68:74:D0:77:B3:B9:5B:01:87:00:34:1F:F7:4C:CF:48:B9:38
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/11322554-a6e4-3484-9b70-20dc92a20b17.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier: 
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.244.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:82:d5:2c:6c:79:ec:ab:c2:94:9c:9b:11:a3:64:fd:2e:3e:
         d7:d5:4e:d9:3c:94:73:f3:aa:7b:d9:d1:99:87:62:60:68:cf:
         46:1f:86:ad:36:11:f3:42:3f:4f:f1:f9:a5:16:e4:fb:e1:8b:
         bf:85:7f:43:7d:5c:44:0a:5d:54:dd:3c:a6:bd:13:dd:c3:41:
         ea:c2:4e:58:3c:4a:7f:bf:bd:40:18:b2:f4:cb:11:e2:ac:c3:
         78:d1:c1:2c:be:45:1a:e1:12:11:7a:26:29:65:cd:86:37:51:
         d4:36:85:ad:82:d9:3c:c8:97:b6:d9:de:e3:ed:a4:41:72:b1:
         5c:5f:01:14:ef:61:1b:da:cc:8c:3e:d2:79:ec:ef:1a:7f:ca:
         05:07:ad:92:c5:e8:a2:b9:da:0b:6d:e6:ad:b6:4a:55:e2:4a:
         88:af:9a:ac:b7:89:21:3b:c6:c9:34:76:91:1a:38:7d:12:5c:
         e2:75:22:0b:a6:31:84:ce:cf:73:61:57:cd:da:b2:c6:aa:99:
         b4:bf:1f:42:df:ec:82:62:db:38:f2:31:1e:fd:58:e0:5b:bd:
         b4:81:b9:d2:20:99:6e:f6:69:80:ac:6a:12:33:fc:db:c6:a0:
         e6:8e:2d:6a:83:63:cb:dd:12:c8:67:d4:c2:b3:32:eb:04:38:
         9a:e6:c8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 02:12:06 2022 by rpki-client.