Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/e309594d-59a3-3f0d-a940-1dcf0d4f2a70.roa
File:                     e309594d-59a3-3f0d-a940-1dcf0d4f2a70.roa (download)
Hash identifier:          MJwnO4KwYGBJ3om5H2nwZR3JYFKkl7zxjaj8HEdW0xk=
Subject key identifier:   9A:A8:26:B5:CB:11:D8:68:E3:75:EF:74:91:1A:F8:5A:67:8C:D2:C4
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328576D51CC73C042CFC16784AFBDF8
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/e309594d-59a3-3f0d-a940-1dcf0d4f2a70.roa
ROA valid until:          Dec 01 05:00:00 2027 GMT
asID:                     20473
IP address blocks:
    1: 155.138.128.0/17 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:84:af:bd:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Dec  6 05:00:00 2018 GMT
            Not After : Dec  1 05:00:00 2027 GMT
        Subject: CN=a7eab091-d6b2-4a88-9cf9-30dc5ab8dfc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:20:15:6c:4c:b5:31:9d:84:60:01:86:34:
                    34:94:e9:76:f7:be:38:25:a7:d1:0b:fd:a3:44:01:
                    f1:ea:0d:28:98:6b:08:cd:6c:22:78:ff:50:9e:e8:
                    a9:61:08:7d:d8:de:46:af:93:fe:1c:30:11:51:d3:
                    22:1a:81:3e:1b:6a:b3:dd:da:b1:f1:69:ed:04:b8:
                    8f:32:11:ae:7e:9e:8d:96:96:d8:31:e7:e5:a2:8c:
                    da:33:72:84:7e:f9:b5:9f:2f:f3:8e:af:7e:46:1f:
                    cf:8e:bc:47:30:d6:9c:da:08:8e:22:31:a7:08:2d:
                    8c:80:7c:42:54:fe:b8:2c:d9:50:a4:92:33:2e:1b:
                    4c:c9:85:6f:8d:d1:d3:89:69:68:1b:4b:19:18:1f:
                    9e:20:dd:63:1e:74:f5:af:54:a4:b4:ac:76:7f:bc:
                    e9:a1:b7:f4:69:af:ef:ae:73:17:e5:55:1a:13:17:
                    d7:19:af:81:35:29:ad:c3:ff:5e:bb:0b:e4:0a:1e:
                    a4:01:fe:1f:0d:00:28:99:f5:a7:e0:51:da:68:69:
                    2e:62:6c:18:e6:01:cb:ad:89:cf:d9:3d:f1:a5:a3:
                    85:ad:39:7b:b4:6c:43:67:7a:20:fe:87:32:e9:78:
                    1a:48:63:e6:7b:9f:3c:27:f3:3f:80:bb:3f:52:1c:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9A:A8:26:B5:CB:11:D8:68:E3:75:EF:74:91:1A:F8:5A:67:8C:D2:C4
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/e309594d-59a3-3f0d-a940-1dcf0d4f2a70.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier: 
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.138.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c1:72:9e:c8:b0:e5:54:b4:59:ca:3a:42:f6:73:e3:94:3f:
         94:e3:c0:24:d3:59:3b:84:97:63:3f:12:75:e5:34:90:ff:90:
         5e:d1:dd:24:9c:1f:86:83:ed:f1:47:28:8a:47:d6:3f:5f:1b:
         c7:9e:4a:11:46:da:1b:0e:23:88:5c:29:9c:b9:0a:f4:3e:26:
         b8:9b:1b:45:55:a5:54:fd:a6:32:f5:0f:87:8f:50:d7:5a:10:
         11:06:de:df:7b:03:44:77:f2:4a:c8:44:f4:87:82:82:20:6f:
         c2:fd:15:04:e7:9f:c0:81:c6:e2:c9:93:8c:0b:8a:dc:71:f7:
         e0:1a:f0:25:cb:2f:bc:a9:18:44:7f:cc:aa:00:eb:cf:fe:f6:
         04:83:59:0b:13:7e:a3:0f:64:e7:a8:57:d3:55:5b:81:a8:9c:
         bb:79:db:33:0e:ec:b0:ac:3d:aa:79:0f:07:5e:48:b1:56:12:
         9c:a1:29:36:66:ae:a4:fe:31:10:96:81:a7:88:d1:17:8f:cf:
         48:86:54:69:52:cb:89:99:46:9d:9c:c8:0e:09:91:28:ad:26:
         73:d5:77:f9:26:1f:a6:f1:f1:91:42:fa:45:6f:df:81:01:16:
         69:da:04:58:6e:3e:92:ce:54:48:08:fc:ff:26:fe:e3:cd:27:
         95:28:cc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 01:31:56 2022 by rpki-client.