Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/fae39f2a-9d73-30f9-9bc9-339ad5de0f43.roa
File:                     fae39f2a-9d73-30f9-9bc9-339ad5de0f43.roa (download)
Hash identifier:          mprh/YNQ1SgqOYnzOHTP7ES0wy4A+Dbg5AUY4QoGwGQ=
Subject key identifier:   BF:EE:39:5D:B6:6B:A0:2B:71:E1:CA:A3:A8:BB:66:8D:1B:2C:C9:B0
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328576D51CC73C042CFC16659212089
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/fae39f2a-9d73-30f9-9bc9-339ad5de0f43.roa
ROA valid until:          Sep 25 04:00:00 2028 GMT
asID:                     20473
IP address blocks:
    1: 207.148.0.0/19 maxlen: 24
    2: 207.246.64.0/18 maxlen: 24
    3: 208.167.224.0/19 maxlen: 24
    4: 209.222.0.0/19 maxlen: 24
    5: 216.155.128.0/19 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:59:21:20:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep 25 04:00:00 2018 GMT
            Not After : Sep 25 04:00:00 2028 GMT
        Subject: CN=f7ce6aba-fc4b-440f-b1f2-a46de5a5f6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:5d:a5:58:f0:bb:09:2f:56:52:df:ba:35:
                    a2:fd:09:61:ff:93:d1:a2:7c:87:fc:ae:4a:49:c3:
                    87:98:0a:6b:bf:1b:46:02:8e:14:51:e4:cc:0b:6e:
                    6f:20:1f:11:db:53:a0:b2:67:4d:5b:42:93:27:89:
                    86:45:0f:f9:22:cb:8e:5e:53:d1:08:ef:e2:7a:31:
                    36:77:08:5a:f4:4d:ef:16:93:2f:73:9a:0c:dd:d7:
                    5e:fe:d4:70:17:65:b7:22:ed:3a:bc:4e:b2:fc:7e:
                    66:f0:ad:03:9b:bb:cd:00:39:07:21:9d:3c:27:7b:
                    2a:5e:6c:a6:14:5d:8c:3d:3f:73:b5:8e:31:0d:d3:
                    5e:81:dc:36:3f:0e:a0:2a:31:72:93:fa:d1:a1:e7:
                    0f:ee:4d:fb:98:46:71:db:94:80:b4:dc:54:41:8f:
                    6e:c5:7f:3a:67:5f:a3:79:fe:f0:86:d8:a2:01:50:
                    69:49:91:db:f0:b8:ca:24:43:4e:5e:ca:ea:5a:0a:
                    f7:4f:4c:d2:08:ad:d2:30:35:d1:97:59:fc:cd:0a:
                    6f:29:39:e8:0b:78:8f:00:47:44:70:d8:92:c8:97:
                    c3:4d:2d:bc:0e:01:72:20:90:57:70:e7:77:ba:86:
                    d8:f8:c3:9e:eb:d7:b5:eb:96:68:ce:08:cc:88:92:
                    05:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BF:EE:39:5D:B6:6B:A0:2B:71:E1:CA:A3:A8:BB:66:8D:1B:2C:C9:B0
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/fae39f2a-9d73-30f9-9bc9-339ad5de0f43.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier: 
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.148.0.0/19
                  207.246.64.0/18
                  208.167.224.0/19
                  209.222.0.0/19
                  216.155.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:29:9c:3b:a9:02:30:8c:4f:3f:1e:7e:2c:35:31:a8:85:01:
         9b:03:e3:c6:8e:e3:03:03:4a:21:f8:da:06:fa:bb:ac:c4:8e:
         2d:2f:f4:05:eb:dd:d3:c5:0a:37:88:5a:18:25:10:2a:b9:bb:
         24:a0:40:51:cf:b7:dc:7c:72:d2:07:d6:6f:d3:6a:c9:58:28:
         cf:6f:07:4a:94:9e:11:25:3a:8d:d9:a1:a6:b1:88:01:69:7c:
         8b:d2:29:69:de:cd:c2:b4:ee:73:65:04:79:63:5e:db:1f:5a:
         0c:46:a2:fc:cc:56:1b:c8:7a:93:c3:0d:d2:56:ee:7e:6f:19:
         b4:b9:38:bb:80:05:6a:ae:44:cf:8c:d9:91:e2:ee:f3:b3:eb:
         5f:ba:10:37:bd:9b:f6:ea:46:c9:7c:50:0a:c1:66:61:77:09:
         a8:64:c0:e8:fa:6b:d8:24:ad:75:69:68:9e:0d:97:06:00:7c:
         7f:db:b5:2a:31:ca:c8:dc:22:ff:b9:04:84:12:d0:47:e8:83:
         b3:76:cf:1f:84:9e:72:a4:e2:b7:26:68:c0:59:f6:73:49:35:
         40:c1:b7:b7:a6:be:24:f7:03:fe:e8:28:9c:23:8d:2b:76:3c:
         8a:04:fd:d1:57:1e:e6:ff:cd:1e:d1:49:24:f5:94:6a:15:3b:
         f9:5f:81:22
-----BEGIN CERTIFICATE-----
MIIGVzCCBUGgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZlkhIIkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDYzODE3NzM2LTdlNWUtNDc0MC04ZWUxLWFjNmYyMzE3ZjA4
ZDAeFw0xODA5MjUwNDAwMDBaFw0yODA5MjUwNDAwMDBaMC8xLTArBgNVBAMTJGY3
Y2U2YWJhLWZjNGItNDQwZi1iMWYyLWE0NmRlNWE1ZjZhZjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJlXXaVY8LsJL1ZS37o1ov0JYf+T0aJ8h/yuSknD
h5gKa78bRgKOFFHkzAtubyAfEdtToLJnTVtCkyeJhkUP+SLLjl5T0Qjv4noxNncI
WvRN7xaTL3OaDN3XXv7UcBdltyLtOrxOsvx+ZvCtA5u7zQA5ByGdPCd7Kl5sphRd
jD0/c7WOMQ3TXoHcNj8OoCoxcpP60aHnD+5N+5hGcduUgLTcVEGPbsV/Omdfo3n+
8IbYogFQaUmR2/C4yiRDTl7K6loK909M0git0jA10ZdZ/M0Kbyk56At4jwBHRHDY
ksiXw00tvA4BciCQV3Dnd7qG2PjDnuvXteuWaM4IzIiSBYkCAwEAAaOCA20wggNp
MB0GA1UdDgQWBBS/7jldtmugK3HhyqOou2aNGyzJsDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3
MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIzMTdmMDhkL2ZhZTM5ZjJhLTlkNzMtMzBm
OS05YmM5LTMzOWFkNWRlMGY0My5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzYzODE3NzM2LTdlNWUtNDc0MC04ZWUx
LWFjNmYyMzE3ZjA4ZC82MzgxNzczNi03ZTVlLTQ3NDAtOGVlMS1hYzZmMjMxN2Yw
OGQuY3JsMB8GA1UdIwQYMBaAFLX0/4HL4KAm9RI1p7NEc9CJT/x3MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvNjM4MTc3MzYtN2U1ZS00NzQwLThlZTEtYWM2ZjIz
MTdmMDhkLmNlcjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEBc+UAAMEBs/2
QAMEBdCn4AMEBdHeAAMEBdibgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOCAQEAbCmcO6kCMIxPPx5+LDUxqIUBmwPj
xo7jAwNKIfjaBvq7rMSOLS/0Bevd08UKN4haGCUQKrm7JKBAUc+33Hxy0gfWb9Nq
yVgoz28HSpSeESU6jdmhprGIAWl8i9Ipad7NwrTuc2UEeWNe2x9aDEai/MxWG8h6
k8MN0lbufm8ZtLk4u4AFaq5Ez4zZkeLu87PrX7oQN72b9upGyXxQCsFmYXcJqGTA
6Ppr2CStdWlong2XBgB8f9u1KjHKyNwi/7kEhBLQR+iDs3bPH4SecqTityZowFn2
c0k1QMG3t6a+JPcD/ugonCONK3Y8igT90Vce5v/NHtFJJPWUahU7+V+BIg==
-----END CERTIFICATE-----
Generated at Fri Dec 9 02:53:05 2022 by rpki-client.