Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 169c86f2-c98b-3f39-8d4d-72b1e1c76493.roa
File:                     169c86f2-c98b-3f39-8d4d-72b1e1c76493.roa (download)
Hash identifier:          JzAH75w+q2pUaUCe62TW1eHO/rpr+ONMwnWhUma0dn0=
Subject key identifier:   04:4E:FB:DA:34:5A:B1:2A:93:ED:5F:32:F3:A6:51:3D:5A:D0:20:8E
Certificate serial:       010D0C9F4328583DB431F37A52F754DD43527680
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/169c86f2-c98b-3f39-8d4d-72b1e1c76493.roa
ROA valid until:          Jul 29 04:00:00 2027 GMT
asID:                     2914
IP address blocks:
    1: 2001:418:0:7000::/64 maxlen: 64
    2: 2001:418:3ff:4::/64 maxlen: 64
    3: 2001:418:3ff:5::/64 maxlen: 64
    4: 2001:418:3ff:8::/64 maxlen: 64
    5: 2001:418:1456:b0a::/64 maxlen: 64
    6: 2001:418:1456:b15::/64 maxlen: 64
    7: 2001:418:1456:b16::/64 maxlen: 64
    8: 2001:418:3801::/64 maxlen: 64

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b4:31:f3:7a:52:f7:54:dd:43:52:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 11:26:02 2018 GMT
            Not After : Jul 29 04:00:00 2027 GMT
        Subject: CN=223e2aa8-b964-42d7-ac37-875144f3b0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:46:b5:f1:1c:e2:58:86:84:d6:a3:25:3f:
                    89:ff:77:1d:32:86:e3:cc:88:a0:98:8d:26:04:58:
                    a8:f5:0d:52:93:29:ec:5d:93:6d:76:da:4b:cd:3a:
                    de:8a:51:09:8a:a0:e8:b2:3b:3a:47:e9:5c:56:04:
                    28:3f:e6:5e:8f:87:eb:71:d7:f4:1c:9b:3b:a7:88:
                    f2:9d:88:06:c2:2f:5d:f2:91:24:a0:b3:e4:c6:5b:
                    64:c5:44:c1:00:90:47:f1:75:db:a5:cd:32:86:70:
                    82:ff:3e:bc:3d:21:1d:fd:ca:7d:29:a6:ac:80:3a:
                    c3:9e:64:3b:ab:f0:02:8e:60:e0:5c:58:78:8e:06:
                    d3:10:aa:9d:cc:3e:c2:b0:ea:c1:e4:7a:9b:fa:5d:
                    fc:41:d7:99:3c:13:8e:aa:8b:e7:98:5e:01:6a:48:
                    dd:46:94:b9:ba:49:20:14:04:73:57:19:7b:a4:2c:
                    03:1b:c7:ad:eb:92:bb:a5:51:a4:19:6a:a8:28:63:
                    fc:fe:c0:a9:16:b5:4e:b8:ab:3c:16:1c:b7:ee:18:
                    9f:0a:50:ea:d6:1f:52:15:44:26:dc:48:9e:3c:9d:
                    eb:c9:62:b8:43:c8:44:7d:9f:80:21:7e:ed:e5:62:
                    78:e7:29:58:46:2c:16:63:5e:84:56:10:b6:ec:9f:
                    3e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                04:4E:FB:DA:34:5A:B1:2A:93:ED:5F:32:F3:A6:51:3D:5A:D0:20:8E
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/169c86f2-c98b-3f39-8d4d-72b1e1c76493.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:0:7000::/64
                  2001:418:3ff:4::/63
                  2001:418:3ff:8::/64
                  2001:418:1456:b0a::/64
                  2001:418:1456:b15::-2001:418:1456:b16:ffff:ffff:ffff:ffff
                  2001:418:3801::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:12:71:0f:b6:d0:6b:bd:7a:b2:d2:50:85:ae:ee:6d:c0:de:
         c3:23:3b:05:01:89:69:16:ea:4f:41:82:1e:5e:bf:fd:a5:0a:
         06:76:e5:48:34:ed:5c:86:d9:b8:82:70:6a:57:45:79:9f:95:
         c8:a2:12:4b:f8:6e:2f:0e:58:72:ef:37:06:1b:bb:d7:0c:b3:
         c4:66:98:95:95:55:4e:f6:21:25:0a:6d:d0:2f:c7:b1:5d:0b:
         aa:11:0b:64:b2:01:9a:5a:21:c6:8d:48:8e:af:b5:d1:f1:6a:
         7a:34:95:77:76:c8:cd:36:17:97:04:e1:2e:63:96:9b:fc:20:
         e4:13:3e:83:62:b5:f2:d7:42:7d:1c:bb:75:17:d5:a2:3f:46:
         1a:28:c8:94:97:03:67:2e:f8:a1:32:f2:5f:dc:3c:14:d6:f4:
         2f:70:ee:5d:13:7b:35:20:da:a0:ff:ae:ee:c7:3d:f5:91:0a:
         ce:7b:61:aa:93:bb:33:52:89:d9:b6:49:07:8d:07:e5:a8:b5:
         5f:c4:10:29:bf:f9:a5:8c:33:a9:53:ee:4a:20:c7:2e:e6:af:
         96:e5:23:0f:ee:89:e5:51:5a:ba:d4:93:9f:63:c2:23:03:d0:
         d8:2f:30:4c:8b:86:af:1d:38:04:69:1e:82:af:fa:df:27:10:
         b2:7d:50:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:00:05 2022 by rpki-client.