Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/365e545a-5257-320c-a967-27b00deaefe9.roa
File:                     365e545a-5257-320c-a967-27b00deaefe9.roa (download)
Hash identifier:          7Rf5GfATgnQZUyOzBXqEIGZmOv6SY2CPFlTrjYtPGWE=
Subject key identifier:   22:B6:1B:D0:E9:07:3F:21:07:C9:86:45:63:54:53:47:79:F2:78:C8
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DBCED5327
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/365e545a-5257-320c-a967-27b00deaefe9.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 2001:418:8:8300::/56 maxlen: 64
    2: 2001:418:d400::/38 maxlen: 64

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:bc:ed:53:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=4595beb6-1982-45b7-9d30-f4e720e2cbc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:b4:e8:8c:70:10:4c:d2:e3:b9:cd:43:7b:
                    93:40:5f:c0:b0:0b:a1:3b:67:04:af:e0:11:f5:8c:
                    a0:97:25:e9:0e:27:2a:de:56:aa:ff:3b:9b:8e:b1:
                    da:bd:a4:00:42:d2:3d:f8:8f:ea:f0:65:ea:c9:65:
                    84:0e:23:f5:e0:91:92:5e:fa:d6:ad:c6:63:a6:6d:
                    bf:90:b1:b0:fc:20:e3:94:74:09:c1:2b:4a:49:5e:
                    d9:bb:a4:6d:20:26:5b:58:4e:01:d0:ed:85:75:1e:
                    fd:fd:f4:29:45:8e:16:11:0d:3a:2b:67:a0:ed:5a:
                    36:45:4d:27:67:61:ea:a6:bb:ae:fa:04:52:eb:4d:
                    15:8f:2c:0c:2d:a7:7c:98:e0:f0:ef:5f:17:af:ce:
                    4f:aa:48:4c:f4:48:f6:d6:50:58:fe:5c:7d:2d:cb:
                    76:72:c8:b9:aa:b0:ff:1c:6a:0d:19:5c:25:e6:9e:
                    4a:c0:bf:1e:32:5b:71:b9:69:4a:22:6f:93:ba:1b:
                    69:41:9a:bf:cd:39:1b:33:bd:1d:2c:21:ec:80:ae:
                    10:a9:84:6f:36:78:3e:91:43:1d:5b:3c:49:9c:c5:
                    53:fb:63:6c:1e:bc:48:91:b1:70:4a:d7:fe:05:9d:
                    d6:b5:bd:60:72:b0:6e:ce:bd:37:89:b3:bd:60:44:
                    2f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                22:B6:1B:D0:E9:07:3F:21:07:C9:86:45:63:54:53:47:79:F2:78:C8
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/365e545a-5257-320c-a967-27b00deaefe9.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:8:8300::/56
                  2001:418:d400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:74:43:0b:62:76:3f:e3:ad:05:2c:1c:18:f5:0e:da:07:5c:
         3d:9f:e1:0e:1d:1b:96:ea:70:d3:58:29:3c:21:61:1f:1f:0e:
         15:9d:19:12:9e:f5:d9:b1:80:69:24:cb:e0:f1:64:c6:70:14:
         fc:12:f5:49:e4:0c:9f:2e:4d:e5:4a:d5:04:9f:ad:41:f6:11:
         5e:dd:e4:f1:1d:31:79:a7:04:a2:08:52:c6:c6:aa:db:11:43:
         c7:f4:8d:ef:4b:ea:8a:22:91:4d:ed:d7:bd:b2:76:49:2b:8b:
         9a:d0:90:41:53:a7:c1:5a:73:c0:02:44:34:99:fc:a3:73:77:
         ff:fa:7a:c9:22:1c:01:e7:0f:f9:54:64:a9:43:d1:bc:de:a7:
         39:81:a9:45:c2:b8:6a:77:26:55:c3:b6:a2:fb:09:3d:b3:60:
         b9:95:d8:76:eb:88:34:1c:56:66:48:36:e8:0d:ce:ae:fa:97:
         8d:7f:0a:46:b8:d8:82:d6:a4:d2:d3:02:3c:cf:20:bf:0c:be:
         76:3c:00:0f:d7:5b:66:0e:27:8b:ef:3f:ab:1d:7d:b6:5d:4b:
         ee:a8:2f:a9:e1:19:2e:1b:c4:87:38:b6:83:e9:62:fc:f7:95:
         41:87:29:d7:40:fc:28:00:a6:3c:bf:75:ed:44:5e:38:01:81:
         3a:b3:5f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 20:40:22 2022 by rpki-client.