Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 57bf79ba-4664-30b2-9e9c-1dcfaa399a97.roa
File:                     57bf79ba-4664-30b2-9e9c-1dcfaa399a97.roa (download)
Hash identifier:          cyHbviP7n9j6eo/x7LL65Iu/1QN+uxSN7A27Yw3xt0Y=
Subject key identifier:   40:D7:4D:56:6D:67:C9:7E:B7:C0:9D:EC:B5:E1:44:28:4C:BC:BD:ED
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F82183053
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/57bf79ba-4664-30b2-9e9c-1dcfaa399a97.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 207.153.192.0/18 maxlen: 18

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:82:18:30:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=55f98229-b733-4174-9d85-16c43d377a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:07:1e:8e:21:af:dd:24:12:dc:3d:88:d0:
                    02:cb:14:d3:ad:06:1e:02:34:22:f5:a5:ff:7a:ca:
                    23:5b:57:8c:86:1b:29:84:b1:8d:ee:43:6e:ac:6a:
                    6e:f4:a4:16:95:32:c6:6c:58:18:a8:09:cf:20:d0:
                    ca:de:b6:78:b2:fe:e2:c7:25:33:04:50:bc:f1:01:
                    2d:a6:fb:6f:1b:f7:6b:03:29:58:bb:4a:5f:5b:fc:
                    10:30:a8:ae:e5:4d:ac:e9:1c:c1:8c:11:22:38:2d:
                    8a:46:f9:87:b2:26:e1:8a:62:66:39:a4:66:90:da:
                    cb:f8:72:3f:a3:23:19:35:9e:c7:d1:d6:51:c6:60:
                    51:fd:21:3f:03:b6:7b:19:0e:21:da:7f:70:0f:ca:
                    95:d3:9a:2c:ba:b3:30:89:17:d1:6d:78:76:fd:3a:
                    2f:7a:44:26:55:b0:1c:a4:3d:f3:dc:69:d8:37:b3:
                    58:01:7e:04:66:10:7f:8c:72:8e:2e:1c:46:3d:7b:
                    d7:95:df:42:c0:9e:c1:f7:ed:82:06:4e:af:db:7a:
                    19:94:b3:fa:b1:cd:d3:84:84:8b:a8:19:79:ea:04:
                    08:db:e6:b6:bf:ef:bb:bd:2c:90:ac:05:5b:28:22:
                    4f:31:d9:2d:bb:1e:d6:38:ac:67:38:72:d1:47:91:
                    86:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                40:D7:4D:56:6D:67:C9:7E:B7:C0:9D:EC:B5:E1:44:28:4C:BC:BD:ED
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/57bf79ba-4664-30b2-9e9c-1dcfaa399a97.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.153.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:91:af:0c:7b:39:46:7f:33:97:34:51:73:92:75:87:c1:ac:
         83:d9:13:ff:e9:6c:83:da:e5:47:b7:22:2f:15:56:77:19:fb:
         ba:57:93:e4:c3:c8:66:e8:73:65:0e:89:4f:93:5f:2d:e4:c2:
         36:7c:ef:c6:12:0d:2e:2f:d0:e0:bc:de:21:71:5d:5d:41:01:
         3c:da:51:50:af:0b:a0:c0:45:cb:6a:0e:f7:75:d5:12:27:2c:
         64:05:bc:0e:69:b7:1e:1d:aa:92:a9:c6:1e:c0:de:e7:c8:05:
         a8:29:d1:ab:f6:c7:96:fd:c3:b3:f7:c9:51:92:ac:c0:02:da:
         75:a4:b5:ab:b8:58:22:de:22:21:eb:31:3f:2e:7e:d0:28:b3:
         04:6a:8f:3c:94:8e:6e:f2:c2:d2:46:62:75:43:15:67:8a:b1:
         c3:27:c4:5e:c1:74:e1:0a:5b:fa:04:0b:67:e4:1e:77:68:28:
         dc:2f:f5:a7:7b:4f:3c:da:47:6a:05:10:3d:58:8f:0b:a9:72:
         68:cd:ee:4a:50:5e:a2:30:86:b2:ed:32:c1:16:e6:fb:b3:88:
         c0:7d:8e:95:81:e2:20:96:ce:0c:15:9b:f0:da:53:0a:72:60:
         97:aa:cc:a0:fc:47:25:90:07:f3:f7:69:e5:7b:c7:e8:9c:33:
         0b:ed:95:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:00:06 2022 by rpki-client.