Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 4452b92d-ba30-350d-8987-61befd7ef032.roa
File:                     4452b92d-ba30-350d-8987-61befd7ef032.roa (download)
Hash identifier:          e1xlWmGhxXVPQCzbEOTQYAggAbdTNar1539QeiXZCQk=
Subject key identifier:   FA:43:7E:F0:2B:6B:D5:0D:AB:1C:67:8A:DD:58:40:6D:D7:CF:BC:03
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F81FFD664
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4452b92d-ba30-350d-8987-61befd7ef032.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 205.146.0.0/16 maxlen: 16

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:81:ff:d6:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=63eb6656-1124-4abd-915c-d3fde76f8630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:87:a2:5d:52:e6:2b:bc:77:33:16:57:cb:
                    0d:3e:d7:09:00:98:d1:e5:9d:82:86:90:49:cf:45:
                    4c:4a:4c:77:17:1f:4d:10:e0:ec:7b:9b:2c:92:cb:
                    d4:1e:37:36:fc:fd:79:eb:f4:cd:2b:2a:10:69:9b:
                    29:10:d6:fc:5c:84:c3:2d:fa:bd:9c:d1:23:fe:bd:
                    8a:37:b8:f1:d9:f4:57:df:30:65:a1:df:0a:df:4f:
                    1f:47:f9:83:f7:91:3e:84:76:39:e6:3d:73:dd:4d:
                    7c:46:12:8a:31:30:07:cf:81:0c:92:7e:5f:9a:28:
                    98:be:14:0d:36:4b:a2:90:6c:6b:a0:08:80:ff:5a:
                    89:b6:ea:ed:27:2d:6f:3f:f1:53:34:37:33:cb:36:
                    c1:44:0c:7e:3a:31:0d:ad:40:fc:a3:4b:9f:c9:1f:
                    f1:3a:de:b0:1b:48:b5:a6:17:68:db:76:1f:b9:f1:
                    ca:ac:25:9c:d2:60:e2:f7:34:37:68:1c:1d:97:12:
                    34:dc:b4:18:95:a6:54:ad:aa:e4:54:59:0b:c2:6f:
                    8f:98:a7:6b:0e:11:ed:82:75:24:b9:d9:bf:a7:00:
                    27:79:68:2a:10:90:37:ea:aa:d0:ba:7c:a2:92:0a:
                    95:91:35:ba:c0:67:cb:d3:31:e3:1f:c6:72:9d:6d:
                    27:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FA:43:7E:F0:2B:6B:D5:0D:AB:1C:67:8A:DD:58:40:6D:D7:CF:BC:03
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4452b92d-ba30-350d-8987-61befd7ef032.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.146.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:c6:db:f3:d7:b8:22:79:cb:15:f4:be:66:c0:53:70:87:43:
         83:54:67:0b:71:a3:e7:0f:0b:23:89:58:78:f2:8e:f1:2a:d6:
         56:23:8e:c3:f0:18:17:91:b9:ac:72:a9:6c:3f:d4:36:01:89:
         13:2f:52:76:ef:4f:5b:c8:2d:56:00:94:1b:fe:8d:de:e8:be:
         0b:b5:c5:c7:af:11:72:d8:5c:a8:95:74:31:21:43:b0:b0:43:
         3c:6f:92:29:83:69:27:12:9e:cc:74:23:10:0a:f0:22:0d:96:
         38:9e:b6:52:51:a9:ea:bb:94:7e:19:1c:ed:47:c5:0c:58:71:
         b5:d5:e8:cf:28:c3:74:13:3f:68:f5:e0:dc:26:f4:5d:d6:aa:
         98:ca:d2:1b:fa:0a:9c:76:c6:d0:03:01:1d:14:b6:d1:a7:16:
         ad:0a:8e:70:4e:70:89:eb:0b:11:d0:cf:54:91:2e:39:61:e2:
         1c:dd:0d:55:92:0e:fc:68:ae:6e:5b:6b:2f:2e:8c:6f:62:50:
         6f:59:a7:cc:98:a4:f3:97:0e:da:b5:8c:92:9e:bc:38:2b:56:
         9c:6f:5d:5c:93:3f:75:af:dc:1d:dc:67:3b:cd:90:08:9e:62:
         30:9b:61:c8:51:8f:6e:a6:b0:1c:8a:1f:b0:29:1a:a4:71:61:
         34:88:ce:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:00:06 2022 by rpki-client.