Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 1c7d1b69-7150-3602-a5cf-0cd3769d4cb4.roa
File:                     1c7d1b69-7150-3602-a5cf-0cd3769d4cb4.roa (download)
Hash identifier:          sy4cmuQQQqH9jKhqhgUPlsjrq+IRfXLltzsDqHHXttI=
Subject key identifier:   11:B3:36:4E:B1:21:32:95:4B:56:5F:06:F5:3D:3A:71:12:58:EB:37
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DD5AD81F4
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1c7d1b69-7150-3602-a5cf-0cd3769d4cb4.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 199.240.0.0/16 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:d5:ad:81:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=96e0cfe7-5a07-40da-8e61-65e755544cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:5e:e6:61:b3:2c:e3:de:03:4c:13:29:53:
                    27:d2:ac:93:05:9b:75:95:61:5e:40:12:cc:f3:01:
                    db:2c:6e:3c:92:41:a8:d4:af:0f:e1:3a:41:7a:3f:
                    1f:e9:7a:c9:83:c9:4f:13:86:cc:14:6c:cf:ae:83:
                    23:c4:ec:79:19:90:a0:1e:be:ad:68:33:ab:9e:58:
                    21:54:b6:5f:37:9d:aa:f1:9e:23:c7:9c:4d:13:ed:
                    1f:28:1a:83:65:b6:99:4b:b8:63:a7:25:51:8d:3c:
                    b7:c4:a1:e8:ba:14:fb:ad:32:01:10:c7:42:69:49:
                    7c:c4:6b:c0:e6:b4:fc:5e:ac:0c:1a:e3:4f:d6:14:
                    6f:1c:9d:cb:24:a8:f6:ef:7e:56:f8:2b:bd:b2:66:
                    09:71:59:ed:20:ad:ec:e7:e1:30:31:7e:41:64:22:
                    9e:65:fa:ab:6f:61:e5:af:a3:8f:de:e8:7b:b9:27:
                    3e:81:47:56:8b:ee:e1:07:68:ed:98:e3:65:52:2d:
                    d2:9d:bf:04:fa:20:bd:60:82:d5:b8:ca:9b:78:43:
                    93:c9:e5:ba:d6:c0:0f:a0:47:fe:f1:8f:79:45:d0:
                    76:52:e2:6b:12:d6:eb:ea:16:3e:c7:29:cd:bc:4a:
                    70:8d:75:45:0d:bf:54:b8:13:fe:3b:dd:18:d8:3d:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                11:B3:36:4E:B1:21:32:95:4B:56:5F:06:F5:3D:3A:71:12:58:EB:37
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1c7d1b69-7150-3602-a5cf-0cd3769d4cb4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.240.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:67:e5:28:cb:69:16:0d:3b:f7:95:d8:f1:dc:a9:c8:b7:2e:
         a3:99:5a:be:a9:c8:23:7b:6d:5f:02:8a:4e:3f:59:a9:74:c1:
         13:b0:75:3d:08:b3:95:e5:d4:06:50:ae:0b:66:2f:3f:82:10:
         39:05:b5:ba:dd:60:3e:96:10:bf:49:e9:4f:26:60:b8:e3:99:
         f3:d9:7a:b7:b2:ca:15:5b:96:15:7f:f9:0c:2f:eb:9c:fe:8c:
         b7:12:8e:cc:67:4f:76:42:11:d1:5f:8d:e8:ae:54:fd:bd:3d:
         49:a5:11:6a:c1:59:89:f4:f6:17:a8:3d:b2:15:b9:27:b1:e4:
         23:63:12:a5:8f:f0:18:d5:b5:cc:5b:07:32:01:2c:d2:a8:94:
         8a:8c:69:49:dd:58:1c:cd:3f:ba:bd:e3:58:5d:a7:97:d8:45:
         7c:3c:57:e1:c8:63:75:c9:e3:fe:4d:64:74:1e:2a:de:7d:28:
         25:e4:83:d9:47:3f:ae:c9:07:ec:67:21:c2:47:e9:32:9b:7d:
         96:fe:85:01:d0:1b:b3:3c:1f:31:57:46:c8:d8:12:7c:8f:b4:
         27:96:9d:67:bb:25:74:8c:56:98:6b:8d:21:7e:14:d0:cd:92:
         0e:af:b0:25:9a:11:a0:8d:b9:6d:68:64:a5:22:53:fb:12:30:
         86:1d:04:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 1 22:55:45 2022 by rpki-client.