Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/34eafa6e-11a8-3c3b-a3e7-7e5a9402a347.roa
File:                     34eafa6e-11a8-3c3b-a3e7-7e5a9402a347.roa (download)
Hash identifier:          mL+rDDn+qTW4yYEhVfDMqYi4VCFz7o6eUaWEbxv1cpI=
Subject key identifier:   6D:04:39:96:D1:65:89:9D:BE:51:48:DD:1A:9E:BB:4D:65:6A:90:0F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16496F2B44B
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/34eafa6e-11a8-3c3b-a3e7-7e5a9402a347.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 192.41.219.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:96:f2:b4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=bf0fd600-d845-462c-9fe7-f2a8f2e8802c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4f:1b:ae:f1:25:dc:c7:94:b4:b2:c1:af:42:
                    f4:12:5c:0c:90:6e:bc:63:75:37:7c:13:a9:14:98:
                    b2:2c:1a:ac:4c:c0:b3:0b:5c:64:23:50:01:44:64:
                    14:1b:4c:c0:8e:50:38:70:73:2d:4e:cc:f4:65:5d:
                    ea:20:58:b2:55:0a:85:71:f2:a8:25:64:e7:9a:c4:
                    27:a6:6e:24:a3:d7:9e:c3:7c:20:54:e4:0f:98:14:
                    8b:3c:43:72:fc:bf:d2:93:e0:db:29:fa:30:d7:a0:
                    c2:03:ef:03:18:8c:19:25:4d:f7:6b:78:42:44:81:
                    2c:9c:5e:e5:b3:c9:59:68:60:7d:7e:91:22:d9:e2:
                    fe:4e:4f:6a:4d:a9:3e:57:f0:ab:f5:c2:a8:5b:50:
                    5d:af:67:64:14:18:6f:fe:cf:8b:01:4a:b6:6b:62:
                    ee:c1:63:1f:e4:57:3d:81:82:b2:61:a9:0a:2c:17:
                    b9:d6:c2:61:0b:c3:c2:9c:75:9c:f3:4b:44:40:f2:
                    a5:65:94:90:ca:26:b0:3e:4d:f9:36:78:a3:94:cb:
                    03:99:93:71:53:df:44:55:65:09:50:a1:ce:ee:b2:
                    6a:b7:8c:fa:8a:49:c5:89:69:2e:1e:20:9d:e4:d8:
                    6a:9e:85:38:93:c3:2b:7d:e4:b3:a9:67:75:03:e8:
                    d9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                6D:04:39:96:D1:65:89:9D:BE:51:48:DD:1A:9E:BB:4D:65:6A:90:0F
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/34eafa6e-11a8-3c3b-a3e7-7e5a9402a347.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:e6:10:17:3d:41:b1:80:f2:3d:7f:29:4e:2a:80:fc:35:4e:
         17:65:b8:c6:f4:04:12:44:ae:eb:59:e3:47:e6:79:75:e2:ab:
         93:10:c4:9e:33:41:88:fe:db:d0:84:20:2b:bf:14:d4:0d:2e:
         5c:c7:6a:ef:4e:b0:c5:98:c9:aa:f3:3d:66:e3:97:3f:6a:76:
         8b:b2:c7:2d:69:78:04:38:c5:96:54:22:20:d6:47:be:67:c6:
         a1:47:e2:91:45:49:da:70:2b:2d:eb:54:5a:62:ab:6d:63:57:
         75:09:e4:38:cc:c1:84:da:ed:83:fd:43:23:b9:23:c4:9d:2d:
         9f:e3:cb:de:19:e8:af:db:be:0c:13:38:aa:88:5b:02:6f:50:
         29:0b:78:7d:b1:21:09:fb:c5:0e:4c:e6:e6:5d:ae:bf:7e:8f:
         ae:11:36:9d:d9:03:ca:12:ee:69:10:22:8a:23:19:17:21:7a:
         2d:1e:d7:49:eb:3d:bf:05:e1:b6:f9:31:7a:24:30:87:28:98:
         f9:cc:5c:e6:bc:16:45:d8:d4:3b:bc:92:e9:9a:8e:45:ea:22:
         26:63:63:9d:7b:3a:29:b1:ad:5d:f7:92:a3:36:67:33:5a:99:
         93:10:91:3a:a6:ae:0e:1b:b5:20:cc:c7:45:c5:a7:e8:16:7b:
         d5:71:c7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 18:40:08 2022 by rpki-client.