Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a0e4968-54b5-3c69-8820-88e9f6c6aca4.roa
File:                     5a0e4968-54b5-3c69-8820-88e9f6c6aca4.roa (download)
Hash identifier:          EPQ3aMzzV11kIcBpPwIZexm/9TX2YmJbK2J1WFXMYz8=
Subject key identifier:   E9:86:BD:09:21:D9:B2:D7:E2:46:81:D1:58:61:3D:AD:9A:EE:75:38
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16677689686
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a0e4968-54b5-3c69-8820-88e9f6c6aca4.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 129.250.114.32/29 maxlen: 29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:68:96:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=879e74b0-53e4-4e6b-84af-9f80c11e7e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:5f:f7:0a:bf:88:3a:06:ac:c8:0f:2a:50:
                    3d:9a:65:66:21:20:e3:08:5e:b3:03:14:5b:57:1a:
                    50:3d:0c:c9:3f:07:ef:11:53:dc:dc:1b:12:46:33:
                    10:cf:11:62:97:66:bb:49:38:e7:e7:90:1d:4d:d2:
                    80:e1:9c:c7:40:4c:40:dd:2e:ac:64:c3:dd:b8:d5:
                    a1:4d:01:32:1d:d2:cc:90:9c:47:17:9b:b0:e5:16:
                    b9:38:eb:df:d3:1c:ee:c2:7f:ba:ec:35:ef:4a:cb:
                    62:33:e6:cd:4f:d1:51:90:6c:60:b1:d2:2c:50:4f:
                    17:ee:87:14:0b:9d:f9:8c:39:8a:91:8c:bd:4f:3f:
                    08:e5:f0:7b:69:c4:3a:da:8b:4f:8c:dd:ed:85:a1:
                    7e:b5:20:8f:fa:15:31:c2:0c:d4:2f:40:44:c1:4f:
                    13:73:2a:b9:ee:78:09:b5:c3:fb:6a:a3:4d:a3:7d:
                    c3:6d:d6:e4:5f:93:47:04:f4:b1:9d:5d:ea:94:9d:
                    59:c4:5e:03:c8:66:97:85:51:e6:24:c4:7f:d0:bf:
                    43:13:79:3c:e8:ce:a8:eb:6e:ef:b9:20:5a:ce:08:
                    b5:18:85:0b:71:b5:69:c3:a0:3d:66:cc:e8:cb:c2:
                    e6:2c:36:3c:bc:fb:b0:7e:b5:4a:83:10:25:2c:6a:
                    d3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E9:86:BD:09:21:D9:B2:D7:E2:46:81:D1:58:61:3D:AD:9A:EE:75:38
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5a0e4968-54b5-3c69-8820-88e9f6c6aca4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.114.32/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d4:76:c5:5b:71:57:d0:2e:55:4a:d1:d2:38:f0:47:aa:2a:
         3e:10:a7:c4:a3:e7:ec:d4:71:8a:69:59:92:96:e2:a1:a9:50:
         96:f1:3c:05:74:83:c4:2a:2d:9e:10:63:d7:3a:14:67:12:1d:
         d6:c5:c6:95:6f:34:c2:bf:70:af:11:91:e0:ab:d0:e5:8f:59:
         33:a3:0d:7e:32:ef:09:8c:e8:9c:3a:75:11:12:05:2a:c8:9e:
         be:f9:37:7a:8c:7e:c4:4e:b0:85:77:97:b5:cc:cf:7a:03:c7:
         92:b1:98:da:4c:af:f6:90:50:bc:fc:60:10:87:17:c9:ca:26:
         ea:f5:2e:4e:fb:14:23:a5:c9:c3:cb:47:02:1e:18:a5:ec:58:
         03:8a:b7:3b:51:03:18:33:04:c6:48:bb:05:a5:d2:b1:25:2c:
         52:6f:16:66:9b:2e:56:08:e0:44:b0:c9:33:fe:86:30:73:14:
         2b:93:58:82:27:8c:46:54:ca:e6:db:7c:64:20:d6:3b:a3:c6:
         bb:ee:7c:9e:d5:c8:97:1b:b6:e2:ab:c7:5d:26:cd:00:05:8c:
         54:ce:8d:59:e5:3f:82:03:e2:92:5e:23:96:77:95:21:88:46:
         f7:cf:8b:25:14:d6:41:0d:b5:57:0f:7d:73:0e:c8:9f:d8:57:
         b5:8d:21:61
-----BEGIN CERTIFICATE-----
MIIGQDCCBSqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZndoloYwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODEwMTUwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDg3
OWU3NGIwLTUzZTQtNGU2Yi04NGFmLTlmODBjMTFlN2U3MjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALjtX/cKv4g6BqzIDypQPZplZiEg4wheswMUW1ca
UD0MyT8H7xFT3NwbEkYzEM8RYpdmu0k45+eQHU3SgOGcx0BMQN0urGTD3bjVoU0B
Mh3SzJCcRxebsOUWuTjr39Mc7sJ/uuw170rLYjPmzU/RUZBsYLHSLFBPF+6HFAud
+Yw5ipGMvU8/COXwe2nEOtqLT4zd7YWhfrUgj/oVMcIM1C9ARMFPE3Mque54CbXD
+2qjTaN9w23W5F+TRwT0sZ1d6pSdWcReA8hml4VR5iTEf9C/QxN5POjOqOtu77kg
Ws4ItRiFC3G1acOgPWbM6MvC5iw2PLz7sH61SoMQJSxq050CAwEAAaOCA1YwggNS
MB0GA1UdDgQWBBTphr0JIdmy1+JGgdFYYT2tmu51ODCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzVhMGU0OTY4LTU0YjUtM2M2
OS04ODIwLTg4ZTlmNmM2YWNhNC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFA4H6ciAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDALBgkqhkiG9w0BAQsD
ggEBAJjUdsVbcVfQLlVK0dI48EeqKj4Qp8Sj5+zUcYppWZKW4qGpUJbxPAV0g8Qq
LZ4QY9c6FGcSHdbFxpVvNMK/cK8RkeCr0OWPWTOjDX4y7wmM6Jw6dRESBSrInr75
N3qMfsROsIV3l7XMz3oDx5KxmNpMr/aQULz8YBCHF8nKJur1Lk77FCOlycPLRwIe
GKXsWAOKtztRAxgzBMZIuwWl0rElLFJvFmabLlYI4ESwyTP+hjBzFCuTWIInjEZU
yubbfGQg1jujxrvufJ7VyJcbtuKrx10mzQAFjFTOjVnlP4ID4pJeI5Z3lSGIRvfP
iyUU1kENtVcPfXMOyJ/YV7WNIWE=
-----END CERTIFICATE-----
Generated at Thu Dec 8 20:40:23 2022 by rpki-client.