Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/46ec2374-eb98-3f90-a82a-051ec0756efb.roa
File:                     46ec2374-eb98-3f90-a82a-051ec0756efb.roa (download)
Hash identifier:          w3a2YfyQ5Vx5EeHqaCzDW4lnHhl2YdXL28CMMhoQyHc=
Subject key identifier:   3B:D6:35:79:64:DE:1A:A1:0F:A2:D6:69:F0:70:6E:30:86:53:1D:16
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16497161C76
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/46ec2374-eb98-3f90-a82a-051ec0756efb.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 198.187.252.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:97:16:1c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=03fe4be7-016b-428a-9fd9-a7c80b0eef3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f7:e6:30:2a:15:8e:eb:12:d1:80:b9:93:79:
                    ed:e0:42:23:c6:62:b0:33:14:cd:6b:fa:7c:95:69:
                    33:08:12:1e:20:c0:61:81:40:81:b5:5a:a4:d7:f9:
                    7d:c0:e7:21:85:ef:9f:86:6b:b7:03:c6:66:0d:fe:
                    b3:4d:38:67:e2:12:9b:44:f3:23:20:3f:77:36:82:
                    55:42:21:95:3b:b7:ad:24:83:77:7e:f9:e9:55:09:
                    45:7e:eb:82:9e:ac:c4:ba:26:77:ca:2a:fe:2b:e8:
                    20:a4:50:d5:57:c1:c8:3f:17:51:e9:6c:3c:b8:79:
                    94:f7:fe:a4:68:72:fc:99:e8:b6:2c:2d:dd:66:7a:
                    81:07:04:71:ff:1e:05:fb:47:34:49:1e:a1:47:68:
                    e6:ec:07:1d:a2:1a:77:0b:aa:dd:89:d2:5f:91:f6:
                    5f:3b:4b:8c:21:57:85:e0:93:e5:fa:fc:29:51:4d:
                    3f:fa:12:d8:ce:0f:2d:46:b6:5c:f2:b4:5b:a4:05:
                    09:f9:10:08:3a:3e:d3:b7:9f:92:c6:30:94:3e:c3:
                    2a:af:35:bf:98:d7:3f:eb:05:9b:4b:a0:2b:6c:82:
                    c3:3d:76:22:3a:d9:db:6b:96:8b:38:4c:32:95:5b:
                    f9:d9:3f:59:72:04:e5:f7:ce:33:7d:e2:d7:2c:d8:
                    e2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3B:D6:35:79:64:DE:1A:A1:0F:A2:D6:69:F0:70:6E:30:86:53:1D:16
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/46ec2374-eb98-3f90-a82a-051ec0756efb.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e4:67:a6:8b:16:9d:2b:29:9c:53:43:24:8a:a2:bb:ce:b2:
         19:fd:f0:f7:60:aa:fe:89:61:b9:a9:86:3c:15:1a:c8:fc:57:
         73:ed:6e:21:00:8b:16:4d:3f:da:9e:5a:3e:2f:b9:ed:0f:ad:
         5d:99:9a:6e:59:72:4a:3a:ed:bb:cb:a7:b9:4d:aa:13:49:70:
         24:a2:54:da:8e:2c:01:f7:93:0c:5e:98:9d:a4:7f:0c:e9:2e:
         11:03:e0:f9:1a:61:e5:1a:44:06:f5:84:9a:40:01:af:17:a4:
         85:87:b3:8f:e5:90:84:8f:ac:c8:e1:83:cc:f2:14:ac:5d:7b:
         38:74:6c:a0:21:ce:82:36:a2:72:58:1e:83:5e:bd:c7:86:db:
         29:e1:21:43:39:55:f8:5a:26:2d:02:98:a8:30:1a:23:fe:f8:
         2b:20:c3:dd:6c:a7:37:08:b0:f3:07:dd:60:2c:89:66:cd:56:
         77:02:59:30:44:6e:35:44:2f:cd:9d:cb:93:b8:81:c5:c0:f2:
         a7:d7:be:22:d3:8a:b2:9b:c3:d6:00:8d:76:49:40:ff:c0:2c:
         d6:bf:46:ff:3c:4e:1b:0c:a8:69:be:e6:69:d3:89:f2:e2:28:
         9b:da:5f:7d:8b:fb:b9:cc:f2:bd:46:b1:cc:1a:42:98:15:16:
         e5:ba:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 19:20:23 2022 by rpki-client.