Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52abd704-7d26-3ccc-a7b9-2185dae7e68e.roa
File:                     52abd704-7d26-3ccc-a7b9-2185dae7e68e.roa (download)
Hash identifier:          wy3/3OB1PYSCOzRJ8Mf7qDTWS4rW5In3mMFkWhQzFFY=
Subject key identifier:   84:F7:DE:DE:72:4D:21:FD:D0:C6:4A:FF:A6:CB:AB:A0:DD:12:71:9E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC166423E0334
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52abd704-7d26-3ccc-a7b9-2185dae7e68e.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 128.241.34.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:3e:03:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=1d5f14a9-062b-4320-b5bf-73bda1034b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0f:02:90:65:44:62:9d:33:63:2c:6b:3e:c1:
                    92:28:20:0d:d0:b7:37:d3:24:82:46:c6:75:a5:b6:
                    fc:72:41:30:d8:1d:6f:15:43:50:3b:b7:75:dd:5e:
                    65:9d:bb:43:88:a9:76:10:6f:a1:ca:ef:8a:8f:f5:
                    73:79:d6:6c:4f:10:9b:d6:44:36:d3:3b:b0:e3:61:
                    b3:dd:3d:f8:ea:6a:36:2a:49:a5:a3:3f:a5:ab:7d:
                    1c:79:62:59:c0:cf:77:da:74:8b:28:c1:e7:5b:23:
                    f5:4a:b7:30:a2:5e:20:ef:9e:cf:62:e3:01:d9:8a:
                    a1:2a:2c:dc:ab:7e:b2:94:a4:29:d1:7a:0b:a7:88:
                    de:27:84:a4:4d:97:94:6e:5c:89:eb:56:fb:c2:87:
                    59:06:fd:8f:76:a3:f9:5f:1e:12:19:a4:a8:6e:d2:
                    f4:72:8f:7e:e9:cd:01:cd:e3:15:e8:5a:63:f9:f4:
                    51:51:de:41:1e:35:7b:6f:66:16:b4:f8:22:f8:ed:
                    91:9b:f4:e7:38:36:5b:d3:41:2d:28:83:7c:dc:11:
                    c6:6b:99:ed:12:f9:1f:c9:af:32:78:e8:f4:a9:f1:
                    e1:81:65:ad:99:6f:56:11:94:53:a5:2f:7b:dd:01:
                    7c:87:3f:13:68:86:e5:33:b3:32:d3:bf:8e:ac:44:
                    b5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                84:F7:DE:DE:72:4D:21:FD:D0:C6:4A:FF:A6:CB:AB:A0:DD:12:71:9E
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/52abd704-7d26-3ccc-a7b9-2185dae7e68e.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.241.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:12:f1:17:41:7d:7a:99:25:51:7a:10:d2:60:49:ac:19:3e:
         55:8d:c4:42:db:f2:6d:c4:5d:1e:90:e5:63:f0:6d:7d:f8:8a:
         a6:a6:a4:bb:7a:cc:06:4d:0f:ac:fc:09:94:31:34:bf:fa:31:
         e0:23:03:3d:13:06:d5:0c:d8:18:fc:fa:ed:b0:67:c6:89:d7:
         aa:12:c4:76:92:2f:18:a3:80:72:28:7b:fd:e0:43:e6:7d:d2:
         75:53:8f:9a:fc:dc:97:26:72:98:a3:4c:fa:05:22:95:42:8f:
         5d:30:b7:7b:6a:a2:44:1e:3c:46:8c:ed:8a:26:95:8f:df:e9:
         ce:cf:1f:a6:c7:3b:a8:b7:d6:9f:e1:04:12:c6:c0:44:40:2d:
         d0:8d:bf:c9:ec:49:eb:26:b5:10:4d:69:1d:6b:6b:59:9b:05:
         b0:33:71:b6:a9:99:c1:03:6f:87:e1:75:48:9d:b0:dd:33:c5:
         46:26:eb:40:ab:08:1b:c8:9b:6b:5c:ca:e4:f6:c2:b5:55:4a:
         6d:28:44:68:1c:e2:b9:c7:64:24:bf:d4:5e:1a:10:9b:f6:ac:
         e8:97:cc:3f:2c:eb:9b:23:16:c3:fe:c5:02:b7:34:6e:14:9d:
         0e:d6:0d:66:41:70:a4:68:63:79:86:be:96:d6:d6:20:bd:2d:
         42:4d:6f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 18:40:06 2022 by rpki-client.