Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 69570173-11e5-366e-8004-086057234a26.roa
File:                     69570173-11e5-366e-8004-086057234a26.roa (download)
Hash identifier:          NNfWYS+kOkQkDDXN0EgIFc2uCaLRfZlTB35sxYTSlMk=
Subject key identifier:   80:0D:EC:29:21:2B:C6:E0:E1:DE:1C:3D:27:EA:E6:E3:2C:65:47:06
Certificate serial:       010D0C9F4328576D51CC73C042CFC166777932EB
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/69570173-11e5-366e-8004-086057234a26.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 129.250.113.16/29 maxlen: 29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:79:32:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=60b5fe8a-703a-4e5d-ae1c-685d97126a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:d5:49:3f:dc:ae:62:e3:74:95:10:c6:34:22:
                    9b:97:8f:3d:b0:da:fa:ed:68:3d:14:4d:5b:15:1a:
                    e4:3b:73:bc:43:79:5d:87:31:51:77:ae:1f:50:b0:
                    be:31:e1:1e:8c:3f:99:4a:a3:1d:1d:41:ad:3e:0d:
                    35:b2:35:03:c6:65:77:80:3d:44:f6:91:32:c3:6a:
                    66:e3:bb:9d:c5:9a:39:af:8c:df:7c:92:9d:2a:ab:
                    22:fc:5e:57:52:b9:9c:62:58:e4:18:84:b3:ae:e2:
                    7c:b9:5a:07:22:94:2d:03:2f:88:d5:d0:60:7f:3d:
                    fe:6b:1f:44:ab:32:fd:ba:81:1f:22:20:06:94:0d:
                    a1:08:60:95:ac:bb:9e:ad:a1:62:23:82:60:75:2b:
                    80:5f:d7:fb:52:24:d4:aa:b0:67:e1:99:c6:51:af:
                    64:48:cd:5a:43:d8:81:cc:49:cd:f2:76:8e:8a:5a:
                    d3:ae:28:9b:12:20:57:07:a2:c4:e6:eb:bb:14:00:
                    45:86:d3:fe:e2:4a:a2:d7:1b:46:09:46:1f:74:95:
                    e0:14:0c:09:2b:2e:43:64:74:77:30:c0:ba:d3:36:
                    7e:be:b8:48:2f:98:1b:b9:dd:31:a1:16:87:9c:37:
                    30:eb:45:a3:7b:2f:7a:8c:e6:07:f5:14:75:c3:87:
                    bf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                80:0D:EC:29:21:2B:C6:E0:E1:DE:1C:3D:27:EA:E6:E3:2C:65:47:06
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/69570173-11e5-366e-8004-086057234a26.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.113.16/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:10:31:06:80:2f:df:fd:5d:3c:30:86:ab:98:e2:92:db:f7:
         ef:fb:f3:86:ab:b6:2f:e5:02:77:96:fa:7a:17:91:44:a3:fb:
         bc:be:df:8b:b1:4f:70:36:43:53:83:e0:15:56:c1:5c:e7:69:
         32:ff:e0:7d:a0:b3:f6:89:af:b6:ea:f8:e3:cb:47:24:b9:08:
         60:24:ce:10:ab:5d:ed:93:93:a5:25:e7:da:5f:c0:25:3e:df:
         7f:86:9f:af:0b:3c:4a:1b:ba:39:09:4a:aa:42:db:9b:3d:5f:
         1e:66:75:7c:fe:6b:06:6d:b1:40:0b:9e:5a:33:c2:97:d5:b2:
         f3:79:ab:10:b7:ed:69:19:bc:e1:61:fc:ba:f9:bb:a4:82:0d:
         e4:d7:d7:75:ba:07:db:14:69:17:7b:7f:1d:85:48:a4:d8:8b:
         d7:52:fe:fb:38:18:b6:9f:9e:cc:37:d1:9e:1b:8d:0e:d0:d1:
         86:32:02:3b:1e:b0:3c:f5:a3:2b:91:20:ab:e5:01:76:5b:d3:
         eb:d4:47:a7:06:60:36:58:e1:fc:65:11:5d:bc:61:4a:04:8e:
         86:0f:1b:70:e3:66:77:a4:24:cd:51:fc:31:54:e4:ce:c3:87:
         15:08:38:d5:7f:2f:e0:29:d1:39:bc:d4:4f:a0:d7:35:06:1f:
         42:03:46:e9
-----BEGIN CERTIFICATE-----
MIIGQDCCBSqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZnd5MuswCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODEwMTUwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDYw
YjVmZThhLTcwM2EtNGU1ZC1hZTFjLTY4NWQ5NzEyNmE0MzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAPrVST/crmLjdJUQxjQim5ePPbDa+u1oPRRNWxUa
5DtzvEN5XYcxUXeuH1CwvjHhHow/mUqjHR1BrT4NNbI1A8Zld4A9RPaRMsNqZuO7
ncWaOa+M33ySnSqrIvxeV1K5nGJY5BiEs67ifLlaByKULQMviNXQYH89/msfRKsy
/bqBHyIgBpQNoQhglay7nq2hYiOCYHUrgF/X+1Ik1KqwZ+GZxlGvZEjNWkPYgcxJ
zfJ2jopa064omxIgVweixObruxQARYbT/uJKotcbRglGH3SV4BQMCSsuQ2R0dzDA
utM2fr64SC+YG7ndMaEWh5w3MOtFo3sveozmB/UUdcOHv0MCAwEAAaOCA1YwggNS
MB0GA1UdDgQWBBSADewpISvG4OHeHD0n6ubjLGVHBjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzY5NTcwMTczLTExZTUtMzY2
ZS04MDA0LTA4NjA1NzIzNGEyNi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFA4H6cRAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDALBgkqhkiG9w0BAQsD
ggEBAAgQMQaAL9/9XTwwhquY4pLb9+/784arti/lAneW+noXkUSj+7y+34uxT3A2
Q1OD4BVWwVznaTL/4H2gs/aJr7bq+OPLRyS5CGAkzhCrXe2Tk6Ul59pfwCU+33+G
n68LPEobujkJSqpC25s9Xx5mdXz+awZtsUALnlozwpfVsvN5qxC37WkZvOFh/Lr5
u6SCDeTX13W6B9sUaRd7fx2FSKTYi9dS/vs4GLafnsw30Z4bjQ7Q0YYyAjsesDz1
oyuRIKvlAXZb0+vUR6cGYDZY4fxlEV28YUoEjoYPG3DjZnekJM1R/DFU5M7DhxUI
ONV/L+Ap0Tm81E+g1zUGH0IDRuk=
-----END CERTIFICATE-----
Generated at Fri Dec 2 06:00:08 2022 by rpki-client.