Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/bdf78772-0235-3bbf-9b1a-567183b01463.roa
File:                     bdf78772-0235-3bbf-9b1a-567183b01463.roa (download)
Hash identifier:          p5pUKtpSX0X4PLwUZ+RdDGZXNowyYFirsf6lQ5Gjpj0=
Subject key identifier:   C3:B2:BB:1E:9A:3B:E2:42:9B:92:64:B7:61:63:05:50:3D:BD:19:C9
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328576D51CC73C042CFC16640C9028B
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/bdf78772-0235-3bbf-9b1a-567183b01463.roa
ROA valid until:          Sep 25 04:00:00 2028 GMT
asID:                     20473
IP address blocks:
    1: 107.191.32.0/19 maxlen: 24
    2: 108.61.0.0/16 maxlen: 24
    3: 140.82.0.0/18 maxlen: 24
    4: 144.202.0.0/17 maxlen: 24
    5: 149.28.8.0/21 maxlen: 24
    6: 149.28.16.0/20 maxlen: 24
    7: 149.28.32.0/19 maxlen: 24
    8: 149.28.64.0/18 maxlen: 24
    9: 149.28.128.0/17 maxlen: 24
   10: 149.248.0.0/18 maxlen: 24
   11: 173.199.64.0/18 maxlen: 24
   12: 198.13.32.0/19 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:40:c9:02:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep 25 04:00:00 2018 GMT
            Not After : Sep 25 04:00:00 2028 GMT
        Subject: CN=51ed9e08-0e2a-4c5c-8f3a-07cef866e4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2a:73:07:4e:f9:a1:fa:6a:cd:dc:08:8f:6e:
                    22:37:06:15:fb:62:d1:da:09:75:4c:27:5d:e8:dd:
                    4e:39:60:97:ef:99:3c:6b:ba:99:63:f8:ee:9d:50:
                    77:d6:62:92:01:44:2c:77:d9:9f:a6:c3:20:7d:5b:
                    24:4c:d9:81:1b:03:56:e8:8e:fc:c5:83:a6:7b:63:
                    15:fb:e3:11:a9:27:62:3c:5f:df:8d:10:ac:57:ac:
                    28:38:26:b5:10:ea:31:33:df:3b:b0:48:5d:4f:14:
                    b9:fb:39:c9:77:01:f8:98:18:a7:9f:f0:dc:20:a8:
                    e7:0d:09:52:d9:ba:c8:3a:9b:cb:d9:20:81:03:5f:
                    00:1f:cb:4c:75:a0:ef:d9:40:76:2f:37:59:0f:b0:
                    26:91:1b:3d:f7:8c:59:2c:55:3d:69:06:96:20:bf:
                    36:51:d3:ca:94:5c:02:87:85:51:00:62:2c:3b:b0:
                    4e:cf:51:8f:df:45:6f:f9:bd:60:cc:87:5c:ad:b3:
                    b1:4d:4b:26:11:55:0a:cc:2d:ea:9f:a8:66:19:e2:
                    7b:08:e5:b2:a3:21:df:6a:ce:45:b0:7a:48:08:7e:
                    04:41:0c:d8:56:3f:dc:37:26:e4:30:d9:22:34:9d:
                    93:40:b4:7e:c1:3e:61:80:e4:bd:a5:30:e5:a8:49:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C3:B2:BB:1E:9A:3B:E2:42:9B:92:64:B7:61:63:05:50:3D:BD:19:C9
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/bdf78772-0235-3bbf-9b1a-567183b01463.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier: 
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.32.0/19
                  108.61.0.0/16
                  140.82.0.0/18
                  144.202.0.0/17
                  149.28.8.0-149.28.255.255
                  149.248.0.0/18
                  173.199.64.0/18
                  198.13.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d0:2d:99:5f:7f:7f:5d:8f:49:c3:01:08:75:28:79:f0:63:
         de:23:8f:e4:77:81:5e:b6:de:59:ec:0b:12:70:da:d2:de:3d:
         5d:a4:82:57:49:9c:fb:aa:48:1d:23:9b:b2:29:4c:59:09:96:
         08:08:a4:c7:55:45:58:f0:9c:d3:cb:49:65:84:3d:2b:64:22:
         9f:82:d9:4c:bf:a6:e1:f6:3b:46:bf:cd:55:ad:68:44:10:46:
         66:89:51:70:a5:85:95:11:2f:44:7c:88:ba:cc:dd:b4:c0:a3:
         a7:cf:be:cf:12:09:22:62:f5:d1:8d:e5:ee:65:b7:e7:44:de:
         02:a2:c3:4c:d5:2f:a7:20:57:b0:8b:3b:08:72:01:fe:0c:73:
         c1:90:1f:11:7b:27:c5:0f:20:69:0e:ab:1a:6a:df:c9:c5:12:
         05:6c:a0:63:fc:1f:10:ff:fc:42:d5:bd:61:8e:f0:ae:e8:82:
         fc:04:9c:21:ac:0f:0f:83:db:ff:36:22:ee:44:05:84:5e:10:
         84:96:1c:ba:65:a9:34:8e:1f:d2:d5:c9:16:8e:2f:34:ac:ac:
         76:4e:30:4a:16:c6:8e:cc:17:59:0d:37:33:3e:8c:a5:fa:e7:
         6a:a0:aa:cd:72:1d:de:f3:9d:b9:43:38:43:6b:e8:3d:b7:d3:
         61:e3:3f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 02:12:09 2022 by rpki-client.