Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/fd004e2d-e3cf-3949-9411-eb3d2ddf85d0.roa
File:                     fd004e2d-e3cf-3949-9411-eb3d2ddf85d0.roa (download)
Hash identifier:          Xqe7tlFnPqzlyn+Myl3j2r6VhVOFMqoZR+Jk/ZA+7DI=
Subject key identifier:   3C:D3:20:20:A4:22:36:C1:A0:CC:0C:B5:9E:F2:4E:2E:69:D5:C8:BB
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328576D51CC73C042CFC1663A3D7950
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/fd004e2d-e3cf-3949-9411-eb3d2ddf85d0.roa
ROA valid until:          Sep 25 04:00:00 2028 GMT
asID:                     20473
IP address blocks:
    1: 104.207.128.0/19 maxlen: 24
    2: 104.156.224.0/19 maxlen: 24
    3: 68.232.160.0/19 maxlen: 24
    4: 66.55.128.0/19 maxlen: 24
    5: 66.42.64.0/18 maxlen: 24
    6: 64.237.32.0/19 maxlen: 24
    7: 104.238.128.0/18 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:3a:3d:79:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep 25 04:00:00 2018 GMT
            Not After : Sep 25 04:00:00 2028 GMT
        Subject: CN=874f8572-604e-4ce0-8be3-55795ed5abd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:28:6c:a4:bc:37:52:77:b8:f8:42:8f:0c:
                    b3:de:de:02:bd:9e:85:83:a1:bf:31:e4:bf:d3:cb:
                    55:ca:1b:30:e5:1c:c7:e8:7b:6a:8e:cd:4f:76:fe:
                    08:e3:30:84:4c:5e:1f:c8:2f:23:32:c0:c7:98:05:
                    12:20:14:93:da:28:71:39:fb:fa:17:06:66:cd:d0:
                    d0:2b:b1:38:70:2f:6c:8c:f9:71:ea:97:94:41:6a:
                    fb:da:e3:ef:30:96:fe:69:db:b0:3d:1a:80:b9:52:
                    df:4c:c7:52:ee:16:56:af:d4:ad:be:31:8f:f6:0c:
                    4c:c9:d2:93:a5:83:fd:96:94:ac:22:eb:48:f1:83:
                    f9:e9:1b:02:5f:a5:e1:4c:9b:9c:67:f7:ef:c0:92:
                    06:8d:ff:84:12:27:0a:b8:47:1c:0e:d2:6f:d0:dc:
                    d0:c8:b1:e4:58:2c:bc:cf:b4:87:ef:d7:12:d0:24:
                    32:ca:18:4f:35:c1:e9:df:cd:d7:67:28:45:ce:a9:
                    33:62:24:40:48:a7:4f:20:06:03:bb:eb:1d:a2:1c:
                    ba:56:57:57:82:fe:9b:db:2f:34:95:1b:5a:86:9d:
                    8b:4a:d9:79:ab:a9:d1:9f:96:9f:73:f3:cf:33:1d:
                    18:23:1d:c7:5b:f3:28:bb:97:99:3a:61:28:4b:1d:
                    6c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3C:D3:20:20:A4:22:36:C1:A0:CC:0C:B5:9E:F2:4E:2E:69:D5:C8:BB
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/fd004e2d-e3cf-3949-9411-eb3d2ddf85d0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier: 
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.32.0/19
                  66.42.64.0/18
                  66.55.128.0/19
                  68.232.160.0/19
                  104.156.224.0/19
                  104.207.128.0/19
                  104.238.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:cf:2b:5e:9f:a0:53:e8:ef:98:92:58:7b:eb:79:e0:8c:71:
         d5:6c:3e:fa:38:55:d8:2c:5c:e2:6c:5f:ce:c9:55:a6:f0:c0:
         d9:6b:3d:e5:c0:c7:b4:e0:b4:47:18:d0:31:19:fd:42:72:22:
         c9:a1:1a:05:e7:a9:cb:4f:68:da:43:0a:3b:e4:f0:0d:cc:76:
         37:13:e8:5c:db:7a:4a:7c:8d:e3:2f:da:f3:9d:ed:2e:f0:2a:
         23:38:76:03:c5:ce:c6:ba:ec:17:70:1f:9c:44:09:d1:ed:56:
         3c:9a:ba:1d:d9:4e:43:69:84:45:97:05:81:b8:48:4c:c3:d7:
         9a:3e:0e:3f:76:e8:1c:a5:92:8e:63:00:c9:72:6c:0c:1b:08:
         96:2a:1c:74:3b:52:b4:71:0c:3b:de:91:e7:08:70:08:99:16:
         8a:55:04:8e:06:a5:45:c8:51:8d:3d:a7:cc:a9:78:6f:5d:11:
         d9:3e:57:4c:ba:08:12:11:c0:76:c0:09:da:82:bf:d0:ee:68:
         70:e1:99:05:89:d9:06:46:67:87:3d:d4:cf:64:da:c8:7c:0c:
         8d:c4:21:a3:c3:18:29:b0:df:59:07:21:39:7c:84:04:f1:2e:
         45:3b:fc:f6:bf:96:21:c3:82:d6:68:b9:c6:de:61:20:fe:b4:
         6f:60:49:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 02:12:09 2022 by rpki-client.