Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 70c82bbc-0608-318a-943e-c6d5b927dd00.roa
File:                     70c82bbc-0608-318a-943e-c6d5b927dd00.roa (download)
Hash identifier:          S+1ZdJvsSZzxS2YaLEqommbXPDJRh9tE61YqeUb3IME=
Subject key identifier:   C0:78:53:60:0D:50:95:EF:DD:DF:54:53:EE:30:50:4E:60:6A:44:02
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F82165904
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/70c82bbc-0608-318a-943e-c6d5b927dd00.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 207.111.64.0/18 maxlen: 18

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:82:16:59:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=af63bd2f-f9b4-4ba3-9118-265030b8e6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:17:25:66:f4:e1:7b:ca:fc:5e:2c:bf:e6:a8:
                    da:11:3b:0a:d0:41:a1:c9:55:78:ce:0b:72:72:1c:
                    0b:5a:6e:e7:01:d0:49:6a:1f:75:94:18:8b:92:db:
                    99:48:60:06:a3:5f:3d:93:ea:c0:3d:89:2c:07:5d:
                    29:b8:b2:a8:5f:6a:22:50:71:84:8f:de:1b:93:ca:
                    31:fd:70:dd:d8:7d:e8:7d:0d:3e:83:cb:b0:3f:a9:
                    71:1d:4b:33:d8:93:92:1e:c8:c3:e4:04:d8:ea:d5:
                    6d:5b:9f:c5:04:4c:6a:b3:55:75:2c:00:3f:4a:34:
                    74:48:ef:ba:f5:99:e3:31:a9:63:c8:71:a7:8e:79:
                    74:0d:76:14:a6:81:8e:27:13:bf:c1:24:b5:4a:36:
                    c6:7a:e2:6d:51:b2:1f:65:c7:3f:54:ac:3a:f3:81:
                    fb:f6:62:3e:99:e6:2d:8b:4d:ce:3c:aa:14:cf:16:
                    87:d4:74:30:c1:eb:93:27:23:ed:47:70:39:e0:bc:
                    dd:b9:7c:35:b9:30:54:32:45:f8:bd:46:23:25:56:
                    6b:f6:1d:79:81:f7:1e:f1:ad:45:d2:a8:c9:8f:f6:
                    d5:dd:ab:e9:bf:2d:09:0f:18:db:fc:be:74:4e:17:
                    54:79:e4:d6:2b:29:e3:0e:b4:93:2d:36:ba:17:98:
                    90:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C0:78:53:60:0D:50:95:EF:DD:DF:54:53:EE:30:50:4E:60:6A:44:02
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/70c82bbc-0608-318a-943e-c6d5b927dd00.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.111.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:3f:cc:a6:1d:ca:12:6c:68:20:82:d7:06:d9:9a:db:61:27:
         64:0a:88:a9:7c:3c:cb:1b:0c:fd:5e:69:d0:74:72:ea:c2:26:
         f6:ee:de:9a:58:6b:50:bc:30:26:2e:2c:32:21:7c:84:8c:18:
         72:d7:37:13:74:18:64:24:bc:21:2e:47:c6:d2:fa:d3:0a:f9:
         49:16:46:2e:67:4c:07:5a:8e:44:08:62:c3:ba:6c:b3:de:15:
         b2:eb:23:d8:1d:a4:ce:ad:0b:13:9d:21:90:97:60:56:f0:83:
         31:15:39:1f:95:46:21:5d:ab:2a:b2:ec:03:97:ac:25:00:94:
         38:32:be:7a:d5:5b:44:3d:d2:70:f2:37:86:68:a5:bf:cb:12:
         b6:86:f0:9b:69:60:18:e7:83:8d:01:a7:fd:f4:fe:be:3b:e1:
         0b:bc:ba:c5:0a:52:74:98:d9:29:f6:0e:09:db:56:d0:e0:c4:
         50:ee:d8:42:0d:64:4e:d3:77:24:84:ef:b9:d9:01:ca:92:8e:
         8f:19:9c:10:d0:6a:98:31:a4:93:c3:c3:b7:fe:b4:1a:54:aa:
         ff:9e:54:37:c4:b3:68:ce:0c:30:07:69:05:ad:ac:a1:15:19:
         79:9c:07:b1:02:28:b9:5d:1f:62:65:3d:c2:98:1a:a6:54:39:
         01:6a:06:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:34:28 2022 by rpki-client.