Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 1447b15e-dfdb-3429-af78-89e707c01271.roa
File:                     1447b15e-dfdb-3429-af78-89e707c01271.roa (download)
Hash identifier:          wf07SMRWVzA0/Yg+C6V12fAXj0IeqkzZTE0w10raCNo=
Subject key identifier:   DD:35:A5:76:29:2E:50:8E:C9:50:1B:87:E6:40:F3:11:F2:99:6E:66
Certificate serial:       010D0C9F4328576D51CC73C042CFC1717D836D11
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1447b15e-dfdb-3429-af78-89e707c01271.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 207.197.128.0/17 maxlen: 17

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:7d:83:6d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=661e7f14-a8d5-4763-a314-4f2e9a24375c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:ea:72:01:6c:a9:aa:dd:f2:cc:40:a9:ae:
                    9a:c0:98:d9:ff:4e:3e:b6:1d:91:43:86:5f:61:76:
                    be:90:76:52:50:34:53:3d:5b:4c:45:8e:00:b5:86:
                    f3:98:27:c6:f7:5e:7c:ff:3d:1e:f6:08:f1:37:f7:
                    0b:14:97:b3:0e:b9:73:a3:9b:2b:dd:0f:c7:ff:7f:
                    a8:5b:1b:1c:80:41:3f:bc:87:ec:28:34:17:c0:1c:
                    42:08:9a:80:55:19:bb:64:ce:12:33:79:50:77:75:
                    0a:5b:f1:3c:67:db:2c:08:b3:3f:ef:16:0c:fb:bd:
                    a9:f8:09:f5:43:0d:eb:62:7d:3a:04:42:c0:ba:17:
                    1f:36:0a:85:49:91:0f:4e:73:ed:69:37:59:c8:79:
                    55:b7:cb:45:21:24:a2:b5:ff:2f:6a:e7:aa:b1:08:
                    4e:87:55:87:5d:85:2b:16:5c:1f:37:3d:1b:19:61:
                    05:4b:92:26:3c:17:ee:48:6b:7e:bf:a7:a7:ec:bd:
                    05:23:c0:7b:9a:db:59:5f:d5:94:1e:36:3c:fe:01:
                    68:c4:0f:e9:40:aa:d9:cc:66:0a:c3:0f:ab:ed:5c:
                    61:e5:0c:ac:5d:72:c1:e1:a7:16:24:ed:e8:dd:32:
                    eb:97:f7:b4:69:e5:ab:4f:68:d4:cd:fe:3c:f6:09:
                    94:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DD:35:A5:76:29:2E:50:8E:C9:50:1B:87:E6:40:F3:11:F2:99:6E:66
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1447b15e-dfdb-3429-af78-89e707c01271.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.197.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:71:d6:ac:e2:1f:0f:49:6b:2e:8e:b5:e5:b9:1f:ae:f6:a1:
         bf:ec:34:93:89:61:f0:da:ce:ca:6b:d4:f8:43:fb:8f:5a:66:
         1f:60:b4:1a:9d:00:a9:4e:fb:3b:22:a7:08:97:c9:c7:b1:d4:
         4f:2d:b2:ab:d3:2c:26:b0:7d:57:50:be:27:ef:1d:aa:ad:32:
         e1:88:f1:9c:7f:ee:82:03:6e:13:23:6d:92:74:df:5b:9d:19:
         e1:37:b3:64:06:d9:34:9b:72:56:a2:64:89:f3:41:60:5a:ad:
         fe:da:36:50:73:04:53:6b:58:44:11:43:df:17:7f:6a:c7:a4:
         b5:84:e7:d5:8e:f4:e4:72:cf:76:cf:15:f5:d2:52:3a:ea:e2:
         bb:85:a2:df:a1:1c:20:09:62:ce:26:43:07:4d:ab:30:58:98:
         ac:dc:c8:87:8c:6d:33:60:f9:09:5f:03:f1:48:7d:86:6d:7b:
         e2:c3:6d:e0:b6:57:72:cf:80:cb:93:9b:36:20:c0:66:8f:71:
         8c:51:8c:3e:f4:6a:40:fb:18:3f:b9:77:11:d6:43:83:3d:fc:
         4a:fd:b8:49:16:75:16:65:c8:98:06:0c:fb:5c:4a:ca:72:c8:
         28:b6:a7:06:b1:06:1e:a5:ef:a9:e8:59:9c:d4:31:ba:7c:da:
         d5:e5:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:34:27 2022 by rpki-client.