Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0c02e050-abcd-3ecd-9f6f-47c19d75f834.roa
File:                     0c02e050-abcd-3ecd-9f6f-47c19d75f834.roa (download)
Hash identifier:          fDZUWzhHo1AfNEjVXbef6Ta3lpBe9zJWv8zH0Svj8Nc=
Subject key identifier:   FF:82:14:9C:B8:A8:3A:D2:1F:55:12:12:A2:B4:EA:39:91:5C:8A:75
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC166424F902E
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0c02e050-abcd-3ecd-9f6f-47c19d75f834.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 128.242.192.0/19 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:4f:90:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=95717359-e3d5-4cf2-ab29-e000bc34ddbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:06:55:2b:9f:4a:80:94:e2:3a:fa:d5:a6:
                    d3:68:d9:de:cc:4c:a6:3b:b6:4d:38:da:b6:5a:e1:
                    56:d4:cb:6f:ec:8e:ff:0f:70:41:ed:b7:c3:e2:95:
                    de:de:f1:99:8c:b9:40:8a:f6:05:f8:a5:95:1b:ce:
                    f6:33:ed:b6:90:de:67:b9:d9:73:ed:d6:04:3b:a0:
                    78:e9:10:eb:48:e7:b9:20:8f:d6:d0:1a:c9:e4:41:
                    f2:e7:ce:7a:70:73:90:d2:bc:3d:b2:72:cc:d7:d0:
                    de:b4:6c:9d:01:bf:84:6c:fb:87:9b:f7:ee:21:9b:
                    1f:29:0e:7a:58:0f:02:28:dc:9e:08:92:20:ad:d9:
                    6c:5c:48:2a:b3:d3:e7:44:1b:d0:24:1d:ef:b7:a3:
                    1b:1c:fa:94:8e:1a:d9:b4:8c:f3:88:e7:d4:4e:fb:
                    36:75:8e:00:e2:46:9a:86:07:3d:d0:b8:69:01:8c:
                    b4:5c:53:77:87:c5:d5:24:ac:35:a6:a1:9f:78:15:
                    2d:59:94:94:38:5b:66:bd:d5:3c:ca:ab:34:7a:08:
                    6c:1b:75:37:f9:78:17:9c:e8:3a:06:05:ea:57:b3:
                    74:7c:b0:a2:0a:3f:d2:f3:08:d2:64:34:76:0f:b6:
                    0d:13:6a:08:ed:e0:df:81:2a:92:9e:d3:21:9e:8b:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FF:82:14:9C:B8:A8:3A:D2:1F:55:12:12:A2:B4:EA:39:91:5C:8A:75
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0c02e050-abcd-3ecd-9f6f-47c19d75f834.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.242.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5f:0d:d4:2f:2e:1a:e9:bd:e4:c3:70:e9:45:6e:e7:1f:4d:
         99:ed:e9:c1:5f:db:a3:6e:7d:b7:36:b0:e6:3d:e4:e5:75:b2:
         36:2a:6a:5e:00:5f:aa:9b:6d:42:df:f9:0a:0e:6c:8f:45:12:
         ab:69:fa:54:bd:2d:21:34:aa:8b:80:5f:39:62:8d:06:27:aa:
         c4:7e:63:7b:34:55:ac:e8:a9:d2:1f:70:f0:57:f5:d1:f0:cf:
         a3:c9:71:90:db:84:38:3d:b0:d6:6b:c0:95:0e:4b:ee:48:2f:
         f2:91:77:88:f6:80:b7:5a:0f:cc:ee:e8:11:8a:e4:dd:c7:7a:
         a4:d2:ce:94:82:ff:74:a1:ce:09:70:0d:9e:fb:56:24:57:9f:
         66:c4:62:66:4e:16:22:f8:5d:a9:12:50:74:b6:b2:f7:22:2f:
         ec:60:3b:4a:99:2f:4a:c0:4d:b2:62:73:62:c2:8e:5d:42:f2:
         a4:de:46:44:7f:66:a7:ed:b2:6c:97:ca:11:b6:2f:3f:82:35:
         b0:53:31:8b:8b:92:a1:cd:2d:27:77:9b:63:a4:d6:00:de:dd:
         52:00:e3:0a:60:1d:ab:ed:99:92:c8:07:55:65:04:43:f0:b8:
         9c:b3:9a:b5:6f:b8:21:0f:88:25:a5:79:6b:62:df:1f:17:75:
         3a:71:6a:ed
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZkJPkC4wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODEwMDQwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDk1
NzE3MzU5LWUzZDUtNGNmMi1hYjI5LWUwMDBiYzM0ZGRiYzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOPaBlUrn0qAlOI6+tWm02jZ3sxMpju2TTjatlrh
VtTLb+yO/w9wQe23w+KV3t7xmYy5QIr2BfillRvO9jPttpDeZ7nZc+3WBDugeOkQ
60jnuSCP1tAayeRB8ufOenBzkNK8PbJyzNfQ3rRsnQG/hGz7h5v37iGbHykOelgP
AijcngiSIK3ZbFxIKrPT50Qb0CQd77ejGxz6lI4a2bSM84jn1E77NnWOAOJGmoYH
PdC4aQGMtFxTd4fF1SSsNaahn3gVLVmUlDhbZr3VPMqrNHoIbBt1N/l4F5zoOgYF
6lezdHywogo/0vMI0mQ0dg+2DRNqCO3g34Eqkp7TIZ6LIoUCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBT/ghScuKg60h9VEhKitOo5kVyKdTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzBjMDJlMDUwLWFiY2QtM2Vj
ZC05ZjZmLTQ3YzE5ZDc1ZjgzNC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBYDywDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAml8N1C8uGum95MNw6UVu5x9Nme3pwV/bo259tzaw5j3k5XWyNipqXgBfqptt
Qt/5Cg5sj0USq2n6VL0tITSqi4BfOWKNBieqxH5jezRVrOip0h9w8Ff10fDPo8lx
kNuEOD2w1mvAlQ5L7kgv8pF3iPaAt1oPzO7oEYrk3cd6pNLOlIL/dKHOCXANnvtW
JFefZsRiZk4WIvhdqRJQdLay9yIv7GA7SpkvSsBNsmJzYsKOXULypN5GRH9mp+2y
bJfKEbYvP4I1sFMxi4uSoc0tJ3ebY6TWAN7dUgDjCmAdq+2ZksgHVWUEQ/C4nLOa
tW+4IQ+IJaV5a2LfHxd1OnFq7Q==
-----END CERTIFICATE-----
Generated at Thu Dec 8 18:40:08 2022 by rpki-client.