Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28ae365d-9607-3851-a40d-ec9dccd3799f.roa
File:                     28ae365d-9607-3851-a40d-ec9dccd3799f.roa (download)
Hash identifier:          cPiZg8+P/YaV4+OPtDzVt7JdLTAl0HZ6IJhnJmHnQK4=
Subject key identifier:   AB:0F:42:F6:F7:7F:B6:32:24:4F:E5:3F:AF:38:64:1E:98:E9:BD:BE
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F8744E2F8
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28ae365d-9607-3851-a40d-ec9dccd3799f.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 130.94.19.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:87:44:e2:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=7229c1dd-1f74-4faa-886d-08706bb041be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e4:55:34:fb:d9:ef:16:47:9a:90:77:cd:cf:
                    2c:9d:c1:8b:1a:3a:4f:b6:7a:7f:80:46:c0:67:02:
                    c4:43:17:7e:ac:07:44:65:54:71:fd:ae:ed:fa:60:
                    ce:2e:25:5b:74:c2:af:f1:22:5e:32:d5:4b:06:bd:
                    52:46:81:b2:33:17:9e:a7:80:6a:c9:f7:1b:e5:dd:
                    9d:34:1e:ea:f6:f6:f0:2f:f6:44:d1:f6:94:06:1b:
                    84:b0:ae:a7:14:51:9c:02:56:2c:61:22:ed:a7:d4:
                    25:d3:d9:cb:c8:e6:7d:34:29:49:49:87:7a:77:a3:
                    1f:e8:20:9f:8a:5b:cc:7a:a6:f1:97:9b:13:21:2b:
                    48:44:1f:25:3b:f0:3e:30:b1:29:d9:1e:e6:80:ce:
                    94:da:1b:86:f9:ec:f6:e2:7c:e6:96:2c:66:7d:43:
                    9c:95:0d:9c:d1:b6:41:21:eb:4a:f1:c2:31:86:7b:
                    ec:c1:0d:5a:90:47:69:57:7a:aa:57:12:cd:d7:cc:
                    33:88:27:a6:3b:ce:fb:92:e4:70:32:9b:62:94:2e:
                    c9:46:cf:95:cf:f2:68:ef:35:aa:43:b6:65:b7:74:
                    47:b8:13:45:68:e5:8b:c7:c3:ba:5d:fe:50:23:fa:
                    d9:ee:a3:51:af:72:8e:3f:09:35:d9:d3:03:4d:3f:
                    33:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AB:0F:42:F6:F7:7F:B6:32:24:4F:E5:3F:AF:38:64:1E:98:E9:BD:BE
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/28ae365d-9607-3851-a40d-ec9dccd3799f.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.94.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:4a:a0:0c:25:b5:1e:4d:7b:c8:bf:96:57:f9:e7:f6:df:80:
         7d:b6:b4:b7:9e:d9:bc:e0:28:96:6c:73:92:a8:40:3d:1e:1c:
         f8:42:1f:20:98:ca:49:dc:cc:70:25:4f:63:72:eb:c5:dd:3f:
         cc:97:ce:59:fa:fb:4d:c8:de:b9:64:33:d7:41:5c:05:8d:05:
         ce:31:5c:d3:b8:3b:e8:e6:b8:0b:51:5b:e4:09:9f:6f:59:1f:
         c4:ae:e0:1d:b7:e4:1a:2f:d9:04:b6:b0:d3:75:c4:63:b3:6c:
         a9:c8:b8:88:e2:d0:c8:1e:ea:5a:37:02:52:b1:02:96:7b:2c:
         06:73:de:95:fb:36:e5:fe:c1:f1:c5:19:98:66:81:1a:03:e0:
         dd:4c:22:f5:4d:6f:41:4b:f0:23:87:e2:2e:e9:3d:ce:a2:22:
         82:5d:aa:91:f2:f2:0d:30:b2:a9:39:2a:07:fb:17:f5:0e:36:
         81:4d:1a:7d:db:43:17:45:c9:60:68:c2:40:bb:bb:03:9c:78:
         21:e6:a1:e7:43:e6:83:4d:8d:f0:a7:a6:d9:05:c1:0b:a8:bb:
         6a:57:b6:6e:2a:aa:22:43:4e:de:88:6d:37:a2:48:6d:28:a6:
         e0:2e:ea:37:af:9c:d8:10:38:c5:da:7e:41:22:17:b1:bd:c9:
         86:23:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 19:20:23 2022 by rpki-client.