Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 41062c80-8b6f-3c75-a8a2-68411d410a81.roa
File:                     41062c80-8b6f-3c75-a8a2-68411d410a81.roa (download)
Hash identifier:          00iJMS7gq59+vR6wEVLCGNiJThs0rSp12uTCyaC4SLM=
Subject key identifier:   93:78:D5:00:C8:DD:55:30:F5:62:AA:F9:4C:31:D3:30:54:42:7C:26
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F81AF7CE1
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/41062c80-8b6f-3c75-a8a2-68411d410a81.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 128.242.0.0/16 maxlen: 16

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:81:af:7c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=26081543-688f-4609-aa10-1c92de6a77c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b3:f2:22:f2:3a:80:cd:a9:ac:c1:d4:2e:e1:
                    fd:55:a2:53:ef:c3:28:bf:8e:f4:a0:38:8a:42:79:
                    be:4c:9e:86:84:37:23:7a:c8:93:c6:06:fa:9e:73:
                    3a:b8:29:5a:5f:62:92:77:9d:03:41:13:97:d4:51:
                    99:97:0d:a4:24:2a:fe:e9:72:f0:22:9b:8b:ee:98:
                    00:ac:1a:b4:5e:de:29:39:4a:f6:19:9c:89:20:35:
                    69:23:1c:22:1e:cc:f9:b9:c9:48:ad:b6:ef:36:8c:
                    ea:e9:22:a9:83:e6:0e:39:cd:da:64:6a:aa:3f:15:
                    c7:23:3d:a7:d9:3a:19:8b:e6:12:6a:56:75:24:bd:
                    4e:91:09:70:25:48:88:b5:c0:32:49:eb:e3:24:9d:
                    3c:38:2e:5f:75:e4:cd:7b:06:e4:04:0a:98:a0:e4:
                    af:a4:75:c3:01:81:83:0e:73:99:45:0b:c4:c8:29:
                    1b:6e:ec:3d:f4:d7:f6:7c:6b:68:ec:b0:97:2d:3a:
                    71:df:a7:0d:7a:95:8d:eb:56:92:57:5f:aa:ea:24:
                    b4:ba:5c:50:02:d2:0c:4b:76:74:16:66:1a:a9:0a:
                    9c:9c:94:d1:55:b5:70:22:7b:a8:c3:7f:a7:e8:f7:
                    13:c5:bd:1b:78:15:9f:b8:6c:5c:9c:74:2a:80:44:
                    67:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                93:78:D5:00:C8:DD:55:30:F5:62:AA:F9:4C:31:D3:30:54:42:7C:26
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/41062c80-8b6f-3c75-a8a2-68411d410a81.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.242.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:0d:dd:79:7f:e4:03:fe:61:1f:4f:76:87:9f:38:fd:50:ba:
         d5:5a:ed:4b:8f:96:f1:b7:7b:39:b2:44:13:b7:b8:8e:97:a6:
         d8:63:a9:4a:ba:04:53:38:64:54:75:c6:9f:25:c4:7d:7f:62:
         c7:7c:aa:47:02:72:67:5b:b8:20:87:d8:ab:c7:dc:c7:ee:d0:
         a5:83:a2:f7:a1:02:43:6a:91:76:a3:4b:c4:5c:28:90:e3:ec:
         a7:f4:46:57:ae:33:5a:e3:e4:41:01:be:2b:65:77:66:b6:c3:
         89:c5:8e:b3:f0:05:e6:b9:ce:66:53:21:6a:a9:24:3a:3d:0a:
         b0:e7:16:35:58:40:8e:53:21:b4:0c:24:88:88:ee:e1:97:83:
         7c:83:35:fe:77:42:aa:d0:5a:7f:e9:65:33:d7:9d:27:f2:7b:
         14:95:72:e6:f4:9e:00:ff:fe:88:62:ec:f6:24:f7:e2:8e:f6:
         3e:0d:de:d4:e8:4e:fa:24:38:90:bc:2f:40:9d:b2:d3:4d:fd:
         1c:81:69:ee:0a:73:71:2f:86:84:4f:6c:53:53:be:9e:29:ff:
         44:fa:84:e7:2c:47:96:31:69:10:ca:17:f1:67:26:48:13:03:
         96:67:41:09:61:2b:01:7d:02:bc:f4:8a:37:46:78:08:3b:81:
         ac:f4:8a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 07:09:46 2022 by rpki-client.