Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 25e16bc9-8166-3474-a527-252beca3ffa2.roa
File:                     25e16bc9-8166-3474-a527-252beca3ffa2.roa (download)
Hash identifier:          uL8Q7PYHHPXvwrX9pumEc2F/oj0cc29hJBfKYoo4PpM=
Subject key identifier:   E9:BA:F0:D0:82:58:B8:0B:3C:90:F2:BC:4C:04:E2:FF:2A:A2:A0:68
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FA13E7C27
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/25e16bc9-8166-3474-a527-252beca3ffa2.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 129.250.112.176/29 maxlen: 29
    2: 129.250.112.168/29 maxlen: 29
    3: 129.250.112.160/29 maxlen: 29
    4: 129.250.112.152/29 maxlen: 29
    5: 129.250.112.144/29 maxlen: 29
    6: 129.250.112.136/29 maxlen: 29
    7: 129.250.112.128/29 maxlen: 29
    8: 129.250.112.120/29 maxlen: 29
    9: 129.250.112.112/29 maxlen: 29
   10: 129.250.112.104/29 maxlen: 29
   11: 129.250.112.0/29 maxlen: 29
   12: 129.250.112.8/29 maxlen: 29
   13: 129.250.112.16/29 maxlen: 29
   14: 129.250.112.24/29 maxlen: 29
   15: 129.250.112.32/29 maxlen: 29
   16: 129.250.112.40/29 maxlen: 29
   17: 129.250.112.48/29 maxlen: 29
   18: 129.250.112.56/29 maxlen: 29
   19: 129.250.112.64/29 maxlen: 29
   20: 129.250.112.80/29 maxlen: 29
   21: 129.250.112.88/29 maxlen: 29
   22: 129.250.112.96/29 maxlen: 29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:a1:3e:7c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=04d7dd02-c9de-47bb-ace4-09fa5903e19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ea:16:78:bf:1d:47:7c:5e:8e:ac:d9:25:2c:
                    28:94:79:e8:21:aa:59:71:07:2c:09:d3:0c:01:22:
                    9b:6d:da:2a:76:eb:b3:3e:e1:29:3e:0c:1f:a8:9c:
                    4b:15:fa:f8:9a:f8:be:ae:00:15:2f:47:35:6f:e0:
                    b8:f8:7d:26:cd:27:c2:a6:f4:26:b1:67:29:6a:43:
                    b1:ae:39:d7:67:5f:bb:0a:48:eb:85:af:36:35:bf:
                    77:df:52:6f:ac:7d:f3:36:58:1d:7f:a0:6e:0b:63:
                    c8:8f:cc:34:a8:57:45:76:98:f2:a5:22:cb:49:09:
                    e5:e3:0f:66:de:fd:ab:f8:bf:0d:6c:f2:d0:20:45:
                    36:dd:b4:8b:02:e4:f8:34:3a:be:09:1b:98:a1:f1:
                    c2:50:c3:a8:97:9b:34:37:b1:01:ba:ae:c1:b9:9a:
                    de:28:b2:8a:b0:a9:be:e1:34:95:f9:78:b4:37:69:
                    81:75:83:5b:58:7a:72:40:3a:97:fa:15:85:2e:78:
                    6c:50:15:70:e0:28:cf:0b:c5:05:2f:bd:58:29:c7:
                    22:bd:1a:c4:13:65:cd:6c:5f:e0:d8:04:86:7c:72:
                    d1:bc:d1:48:e0:97:94:d8:f0:ff:de:3c:82:c1:31:
                    47:d0:e6:5a:40:cc:7d:4a:3b:ec:fd:34:e2:eb:fc:
                    a3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E9:BA:F0:D0:82:58:B8:0B:3C:90:F2:BC:4C:04:E2:FF:2A:A2:A0:68
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/25e16bc9-8166-3474-a527-252beca3ffa2.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.112.0-129.250.112.71
                  129.250.112.80-129.250.112.183

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:08:19:ac:e7:5a:06:12:26:e8:ba:f3:03:03:de:04:6a:ca:
         92:58:b6:71:0d:70:9c:e2:91:88:94:48:98:b4:f7:22:6e:6c:
         ce:71:97:ce:1d:d9:10:38:0a:01:75:1c:52:54:20:5f:c9:d2:
         c6:3c:98:dc:93:15:c1:b4:fc:2b:eb:b4:a5:2b:e9:bd:b1:eb:
         bd:cb:94:b4:e9:08:dc:94:35:4f:c7:5d:9e:20:4e:a2:d3:34:
         46:31:f9:5e:49:ee:60:28:e9:4c:a5:d4:5e:48:03:b1:5c:d9:
         5b:26:fd:74:3d:03:aa:13:15:a6:1c:45:02:f6:09:a9:fc:a0:
         74:9c:ca:00:34:99:59:69:36:b8:85:8b:67:ac:88:5f:5d:82:
         42:ea:b5:dc:f5:d0:7f:78:84:e0:bf:fc:b4:4d:78:5b:ae:a5:
         65:8d:9a:e3:d3:68:ae:fc:99:8a:e3:34:41:2d:99:1f:de:71:
         d4:44:3c:30:84:b6:a6:83:33:94:08:2f:c6:13:a7:9b:c3:aa:
         93:fb:76:4e:62:4c:c5:f7:ec:5d:e2:34:40:08:a0:bc:48:b2:
         df:70:80:5e:98:ac:f6:29:a6:5d:3f:ae:f5:7f:9e:31:3c:d9:
         f1:d7:c5:58:95:ba:b3:c9:b6:fc:07:0a:44:54:9c:7f:2c:f4:
         61:61:8c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 1 22:55:45 2022 by rpki-client.