Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/55ae58d7-f0fe-3c33-8075-238f64dcadc9.roa
File:                     55ae58d7-f0fe-3c33-8075-238f64dcadc9.roa (download)
Hash identifier:          azKMQVkW7SiQC3FdoSCEj0z6asIqynSqnRO2rUCYJ/Q=
Subject key identifier:   99:38:23:18:C6:08:95:F8:09:A8:9A:91:E5:26:19:60:51:8F:FF:03
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16677653958
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/55ae58d7-f0fe-3c33-8075-238f64dcadc9.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 129.250.130.24/32 maxlen: 32

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:65:39:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=d073cd15-a25a-481d-bc68-835ad64672fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0d:40:9b:db:ca:61:19:07:ba:72:06:1e:15:
                    b9:9a:11:f2:28:d7:f6:5e:06:d9:78:1a:ad:1a:0a:
                    88:2d:98:5f:1b:73:e3:a1:3a:11:8b:c9:03:88:4e:
                    63:4e:c6:f7:7d:31:20:e1:22:e0:c5:2d:fc:82:1f:
                    93:51:b2:17:de:68:38:f7:ba:47:0c:16:d1:e0:31:
                    d7:5d:ca:33:67:74:e0:bd:b5:63:a6:46:de:1d:d3:
                    60:c7:e2:54:06:90:17:9b:8f:af:fc:8d:82:fc:aa:
                    5e:8f:49:05:ac:b2:a1:c0:cc:85:89:57:b5:e3:18:
                    c5:bd:f1:28:9f:b8:c9:c9:bc:3d:af:aa:2c:85:b4:
                    46:f4:e7:6d:59:a0:eb:85:0c:15:06:2d:4c:c2:ff:
                    95:c0:ea:9b:df:25:bc:3d:7e:f7:bf:10:e8:1f:9a:
                    a0:04:19:c6:5a:46:ce:ac:2a:81:22:fc:6c:d7:79:
                    3e:8c:49:aa:1f:cd:af:5f:1e:a6:b4:89:22:7f:b7:
                    df:2d:29:51:34:62:fc:10:35:4d:60:55:57:b2:d9:
                    7e:fc:7b:b7:10:59:74:af:4c:d1:83:88:13:d6:e1:
                    74:f6:48:69:9c:ca:20:ab:fe:eb:90:f3:66:67:2f:
                    1f:00:af:c3:3c:21:c5:c0:ab:12:fd:22:27:71:57:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                99:38:23:18:C6:08:95:F8:09:A8:9A:91:E5:26:19:60:51:8F:FF:03
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/55ae58d7-f0fe-3c33-8075-238f64dcadc9.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.130.24/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ad:81:30:48:e2:c1:fb:93:5d:94:2a:ea:e9:6c:8a:4e:21:
         8d:eb:fe:ae:fd:31:e6:8f:44:56:1e:3d:9d:9b:84:0a:62:95:
         2d:38:b3:13:41:03:ce:98:58:9b:7e:61:61:6c:5e:59:fb:bf:
         1f:e2:c6:44:96:ba:23:c3:d4:db:82:8d:ad:65:20:ff:ab:59:
         f3:73:a9:74:0f:ac:21:91:0c:d4:cb:7c:09:de:b8:e5:12:d3:
         73:e9:c8:eb:4e:27:5e:c3:f0:90:be:41:14:86:f8:cd:b0:1a:
         d3:c3:09:b1:81:f0:ee:a4:31:84:0c:d6:54:27:c3:71:64:e5:
         ee:41:b4:12:8f:ad:65:5f:54:a1:c5:f1:81:35:c3:21:43:92:
         c1:b0:97:a7:16:74:d8:d5:c9:9f:3e:f2:fd:41:fa:b6:54:71:
         de:77:e8:7d:7d:f1:a6:4b:7d:df:64:22:10:39:c4:d6:98:6d:
         c1:9e:6f:56:fb:a4:18:09:57:0d:e5:fa:65:8c:dc:d5:aa:9e:
         a8:e5:4b:c6:ec:99:d0:03:03:ef:a3:15:06:48:2b:00:90:9b:
         a7:0d:d6:c4:92:fc:b3:88:4d:20:48:1b:f3:e2:48:ee:6c:30:
         ed:91:52:aa:5b:1f:f5:c5:8a:99:9d:f9:f7:c1:64:80:48:95:
         d5:1e:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 18:40:08 2022 by rpki-client.