Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a4206752-0dba-3ef6-bdb7-b3ea31340050.roa
File:                     a4206752-0dba-3ef6-bdb7-b3ea31340050.roa (download)
Hash identifier:          8u9zZpz76YpcXxJz066bYibiUAzX08SWc1CF/fD2P8Y=
Subject key identifier:   CD:F9:17:1B:2D:36:1F:21:70:B2:D2:F6:7D:38:44:AC:BF:F5:2D:F0
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F43285839841DE59B55725360B7FC7A80
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a4206752-0dba-3ef6-bdb7-b3ea31340050.roa
ROA valid until:          Jul 11 04:00:00 2023 GMT
asID:                     20473
IP address blocks:
    1: 67.219.96.0/20 maxlen: 24
    2: 70.34.192.0/19 maxlen: 24
    3: 70.34.240.0/20 maxlen: 24
    4: 208.72.152.0/22 maxlen: 24
    5: 208.76.220.0/22 maxlen: 24
    6: 208.83.232.0/21 maxlen: 24
    7: 216.238.64.0/18 maxlen: 24
    8: 208.85.16.0/21 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:84:1d:e5:9b:55:72:53:60:b7:fc:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep 25 04:00:00 2018 GMT
            Not After : Jul 11 04:00:00 2023 GMT
        Subject: CN=a72f8879-d6eb-4665-9546-8a6a9308f654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:42:2e:e6:f6:dd:ed:0e:34:98:4c:39:b7:a7:
                    e3:b4:bb:47:a1:1a:94:77:65:3c:ef:dd:10:21:2b:
                    2b:bc:5b:3f:2d:94:2d:6c:a2:d4:b2:b4:ff:b4:4f:
                    cd:31:cf:26:c6:59:59:f9:f2:80:88:63:a8:5e:8f:
                    04:df:5c:fb:e2:5a:db:85:97:27:68:03:8c:09:17:
                    da:2e:a6:69:06:82:e6:18:3c:84:4e:47:ba:06:ef:
                    e7:00:83:94:7f:0d:64:1f:53:05:a7:67:aa:73:65:
                    91:76:33:f2:fe:35:b4:2f:3f:0c:e0:fa:43:d5:74:
                    1d:9e:7e:87:ed:e8:62:ee:d7:1f:b6:41:e1:95:27:
                    1a:27:5e:8d:80:f1:db:a6:8a:3b:0d:65:85:7d:ff:
                    80:0d:8d:a5:01:9c:d2:dc:ff:34:74:60:5c:2f:56:
                    e7:6b:3c:29:a9:a8:b5:21:7f:4a:e0:a8:cf:46:a1:
                    6a:7c:ef:65:2d:12:08:ec:37:45:60:29:90:ea:fb:
                    4d:5c:80:4a:fa:ed:64:80:de:01:d9:b2:c7:f4:2c:
                    bd:08:fb:0e:75:88:44:f9:6d:33:1f:50:33:f2:fa:
                    e3:50:c2:8c:3f:dc:81:0e:ea:5c:be:0d:ff:69:27:
                    8d:03:9d:95:5d:62:6f:c4:42:17:9c:01:4d:27:ed:
                    13:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CD:F9:17:1B:2D:36:1F:21:70:B2:D2:F6:7D:38:44:AC:BF:F5:2D:F0
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a4206752-0dba-3ef6-bdb7-b3ea31340050.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier: 
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.96.0/20
                  70.34.192.0/19
                  70.34.240.0/20
                  208.72.152.0/22
                  208.76.220.0/22
                  208.83.232.0/21
                  208.85.16.0/21
                  216.238.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f6:e0:c6:c8:43:4b:3f:2f:fa:d9:48:5e:2a:be:8c:00:0b:
         9c:40:f2:9c:fb:b6:de:3b:78:c2:5c:c4:82:07:8d:11:e7:13:
         c6:e2:b2:e0:84:33:ad:e4:07:06:a8:9e:cd:57:0e:57:7f:f6:
         62:d6:7e:1f:52:a4:50:4d:93:a8:6a:2d:32:86:22:92:a9:79:
         9b:09:24:db:03:b6:3a:0a:60:8c:17:ac:40:b7:d6:4d:74:f7:
         d3:1e:88:32:67:7a:30:d9:ed:1e:36:b5:80:e0:92:aa:fe:08:
         4d:ec:f7:09:64:63:67:2d:a3:85:d1:b1:d4:cf:4b:b3:1e:89:
         7d:29:32:e3:c1:f1:0b:cd:ab:12:c3:44:62:0c:45:cb:dd:7e:
         c2:78:cd:7e:9c:29:a9:b1:50:89:69:ea:f3:a1:29:61:22:b2:
         4e:5d:d8:c9:47:7f:85:e6:ee:b1:08:23:0f:16:f8:f3:20:2b:
         46:29:4c:56:35:9e:73:ac:82:6a:4c:a2:c6:10:ad:b1:05:d4:
         cd:ca:8d:4c:21:88:eb:a5:4a:8d:10:19:0f:1e:1b:90:44:2d:
         62:d1:99:88:ab:dd:ba:3e:35:46:74:6a:4c:c5:6e:25:5b:b9:
         0d:b3:4e:7d:5f:ad:63:0c:83:7c:7b:b5:b3:08:f8:35:4d:20:
         b2:80:85:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 01:31:57 2022 by rpki-client.