Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 508f3d08-91db-3534-b59e-128966af795a.roa
File:                     508f3d08-91db-3534-b59e-128966af795a.roa (download)
Hash identifier:          vQFJSacEi7IoxRtYZPi3XExzePMZ7lfWXcEj6mn/tQw=
Subject key identifier:   C8:13:C8:12:C2:F2:BC:55:89:A9:B4:F2:7D:EB:96:61:BC:E2:C0:FD
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F8213F4B4
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/508f3d08-91db-3534-b59e-128966af795a.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 207.67.128.0/17 maxlen: 17

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:82:13:f4:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=87037217-1d29-4670-a6f2-147f5c53f379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:95:e5:83:d2:f9:d4:f6:ca:97:a5:58:e7:
                    8a:8d:35:d2:5e:15:31:d9:a6:b5:28:e2:50:8a:02:
                    9a:d9:02:cd:4b:11:23:c1:fa:7c:39:08:bd:d4:15:
                    20:f5:8a:fa:7f:bf:a8:9d:74:8a:1d:73:04:ae:db:
                    b7:9d:da:44:af:84:f5:eb:20:d5:17:aa:1f:9a:fd:
                    e6:73:47:7b:b7:1f:4c:26:17:e0:80:fd:f8:01:d8:
                    c9:0a:1f:70:04:d9:65:35:f1:6f:a1:d5:86:2b:2c:
                    d6:75:7a:7f:a0:69:37:2c:51:e8:a9:50:6f:3c:9e:
                    93:58:5a:1b:35:72:ca:a2:2b:2a:ef:9c:a6:fa:10:
                    1b:ed:0f:9e:30:f6:ce:45:f8:f3:db:77:14:0b:fc:
                    1e:7c:df:c5:5d:06:14:92:88:80:5b:28:63:64:45:
                    64:7e:81:2e:6f:e5:76:68:71:e4:a6:3e:fb:9a:a0:
                    ef:93:49:12:b4:f8:30:29:08:eb:4c:e4:73:89:37:
                    67:15:79:80:e1:dc:b8:74:59:8f:3d:a7:46:5e:39:
                    cc:f4:33:a4:4d:b6:01:85:e8:8e:16:14:4a:c8:21:
                    f6:ec:a5:12:33:06:db:24:62:c9:e3:4a:d3:a7:c6:
                    68:98:0e:e4:fc:6d:ea:98:2e:07:9b:e5:44:78:b8:
                    a8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C8:13:C8:12:C2:F2:BC:55:89:A9:B4:F2:7D:EB:96:61:BC:E2:C0:FD
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/508f3d08-91db-3534-b59e-128966af795a.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.67.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:c7:02:4c:41:39:e0:4d:e6:1d:be:a9:de:50:ea:ee:4c:27:
         ce:c6:b7:7b:ff:b3:3a:2f:13:f5:fa:df:9d:2e:17:96:8e:4d:
         f9:f8:ff:ea:f9:7b:d0:eb:85:75:bd:cb:dc:9a:04:aa:61:2b:
         c1:10:c3:41:2b:87:6e:b1:72:02:db:ec:a1:58:3b:66:1a:8f:
         66:81:6e:07:65:18:5a:26:a3:9d:04:6e:c9:cb:5e:b3:85:45:
         ba:46:37:97:1b:a0:11:3a:c5:fb:87:0f:29:2d:58:aa:43:5b:
         40:b1:40:f9:35:07:37:5a:df:eb:d5:fb:a3:bb:7a:f5:ec:27:
         4c:ae:f5:31:9d:4b:ff:a5:5d:64:23:f3:3b:23:64:da:fb:7c:
         b8:a2:00:0c:43:3c:c7:3e:06:ac:c3:a3:1e:6c:bc:c3:75:d4:
         86:e8:b5:14:f7:48:30:3b:0a:00:68:09:37:5d:5a:87:12:32:
         be:ed:64:2f:d1:e6:0c:e3:42:a6:cd:df:3a:05:de:e5:6d:28:
         92:2f:af:96:fd:34:78:3e:58:01:c2:74:0f:59:94:11:25:bd:
         5b:6f:7c:2d:22:d4:54:d6:18:b2:40:25:ae:73:9f:7d:33:2b:
         0d:2a:06:78:cf:c3:21:2a:0c:ee:c3:c3:0a:48:32:9d:03:73:
         3d:c7:42:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:00:06 2022 by rpki-client.