Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d5cf332-8403-3d7d-b9a3-bcdeacdee2e8.roa
File:                     1d5cf332-8403-3d7d-b9a3-bcdeacdee2e8.roa (download)
Hash identifier:          +M5f/rWohk/EEwqTgiAjVJxQf+BaLVKzDdafI2CSHrw=
Subject key identifier:   39:8E:63:A6:1F:16:88:72:D9:8D:EB:3F:5E:85:33:A5:5D:03:67:70
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285839626BCC977817DD1DE13BAA00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d5cf332-8403-3d7d-b9a3-bcdeacdee2e8.roa
ROA valid until:          Jun 29 04:00:00 2023 GMT
asID:                     2914
IP address blocks:
    1: 129.250.32.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:62:6b:cc:97:78:17:dd:1d:e1:3b:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jun 29 04:00:00 2023 GMT
        Subject: CN=02f0f672-452c-4fcc-901c-bacd8693d387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5f:82:a7:cc:da:4e:d0:a9:63:76:54:ff:25:
                    cf:78:0d:1a:0d:b6:93:ca:38:ce:b4:39:4c:f3:bb:
                    0e:07:96:ca:91:f1:ab:68:48:2e:5c:5d:a4:29:80:
                    79:e1:ed:c0:d4:b6:de:a0:f8:2a:bc:89:df:c2:61:
                    ae:2c:7c:16:dc:76:d2:1e:b2:60:c6:67:85:d7:d2:
                    9b:20:28:62:4c:99:29:e5:8b:d0:c8:38:9d:a7:c7:
                    12:6e:b3:18:c9:7f:d1:13:ac:c1:bf:e4:5d:0b:89:
                    bf:cd:a0:90:e1:73:72:ad:de:7f:21:7a:de:96:03:
                    5f:e9:57:66:e7:e0:01:46:f7:2b:9b:e7:20:48:9b:
                    8a:d8:29:8f:91:a5:53:4d:b7:fa:bb:d2:11:a6:f8:
                    e3:b5:a9:7d:9c:9e:eb:64:0d:41:51:6d:77:11:53:
                    85:64:71:8c:7e:bc:f7:e2:ab:b3:f4:7e:d5:c3:16:
                    a1:70:0f:90:f4:44:9b:9d:15:8c:9e:8a:41:78:52:
                    0a:8b:25:4a:e4:32:32:86:ba:4b:c9:40:9c:65:b7:
                    50:5d:7b:89:28:06:79:66:4a:1a:a9:bf:34:e6:36:
                    de:0e:e5:de:21:a8:43:4b:d6:68:2a:5b:72:d4:3d:
                    83:c1:83:b0:de:46:ca:4a:b8:0f:91:6b:5c:36:2d:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                39:8E:63:A6:1F:16:88:72:D9:8D:EB:3F:5E:85:33:A5:5D:03:67:70
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1d5cf332-8403-3d7d-b9a3-bcdeacdee2e8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:17:83:55:0d:50:72:de:f3:61:9c:11:4f:62:d2:95:1a:
         63:66:61:30:3e:83:54:ea:dd:11:d7:e8:68:53:a3:d1:67:0c:
         23:9b:a5:08:e7:24:d1:c6:0e:45:26:fd:99:23:2a:20:14:63:
         6e:2c:6d:00:06:c1:d7:26:22:61:60:c1:d1:7c:36:79:15:d0:
         8c:57:3b:a0:05:41:2e:51:c5:bc:72:ce:c7:0f:27:ad:91:e4:
         c8:64:b2:96:29:55:3e:57:45:e8:05:f0:70:23:5a:59:7f:e0:
         ca:a7:ab:42:4a:a7:6f:73:1a:43:2f:19:7e:53:df:f2:22:71:
         19:e2:a6:3b:4a:20:b6:39:18:43:b5:b2:7d:b9:1e:e7:51:1c:
         a4:ba:56:e2:04:75:fa:7e:d4:0f:6c:55:6d:61:d1:a1:2e:11:
         cb:78:b7:e3:ea:3f:a8:dd:0b:4f:2a:df:71:e6:38:c0:20:f7:
         d4:d9:32:f5:2f:a7:79:a5:a5:17:01:de:2d:cd:e4:a8:dd:d1:
         a2:e3:be:5e:31:82:1d:26:36:2c:91:bd:1f:1d:5a:60:f6:f4:
         a6:0d:56:95:b8:e2:fd:28:a7:bd:d9:b0:fa:2e:be:b1:7d:c5:
         ed:7f:37:19:18:f1:3d:e4:b8:b8:ae:1f:0e:fd:26:6a:dc:21:
         b9:c7:e7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 20:40:35 2022 by rpki-client.