Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 73343125-33a3-3da5-8b5e-38be025c9753.roa
File:                     73343125-33a3-3da5-8b5e-38be025c9753.roa (download)
Hash identifier:          z+zlNnoBpK6E77xJcue/Qg3aKrLzKrw1yvU1SA2od6Q=
Subject key identifier:   BA:7F:DB:5D:5C:DE:9A:3F:60:21:05:CE:73:66:86:1B:AD:AD:9D:AD
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DCFC8A40D
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/73343125-33a3-3da5-8b5e-38be025c9753.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 204.194.176.0/21 maxlen: 21

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:cf:c8:a4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=c3ed8b95-b453-45ef-a9da-2ae5b332242e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:03:39:90:a3:74:ea:b1:1d:bb:11:82:cd:00:
                    d7:c6:91:02:cf:f2:4e:e8:77:44:43:39:1c:3f:1f:
                    fd:a0:7c:54:67:b4:eb:60:00:d0:49:16:28:7a:79:
                    e4:c1:82:af:43:50:a4:d8:35:89:b4:b5:d9:75:14:
                    02:e7:ed:c3:62:98:69:19:2b:7a:a4:6c:8f:aa:1d:
                    17:84:d9:cb:6c:e2:a8:cd:8c:5a:f5:1d:ba:ad:3e:
                    33:26:c6:c4:9e:a7:d4:18:72:e3:16:ae:df:e4:50:
                    fc:8d:9f:af:a1:bf:f7:6e:5a:7d:05:39:cb:dc:c4:
                    91:67:95:b9:df:1b:2d:f7:30:48:24:ff:15:79:00:
                    37:47:aa:4a:ae:0b:9b:b7:35:f0:34:20:b8:2e:e7:
                    81:d4:ad:1b:4a:d4:ce:19:67:73:0e:30:5c:09:60:
                    00:09:d8:67:bb:89:6e:65:04:ad:f4:08:e0:9d:26:
                    d9:2d:05:35:4a:43:30:6f:bd:35:f8:48:a1:f7:f7:
                    47:21:51:70:f8:bd:46:ef:b5:b3:eb:14:0f:12:50:
                    72:33:06:08:02:2f:45:cf:b5:57:63:ce:01:c4:f7:
                    b3:b3:47:67:d6:91:7a:35:93:d7:62:dc:fa:21:b5:
                    a7:a4:53:94:b1:76:6a:60:d4:2d:84:6b:7e:c1:79:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BA:7F:DB:5D:5C:DE:9A:3F:60:21:05:CE:73:66:86:1B:AD:AD:9D:AD
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/73343125-33a3-3da5-8b5e-38be025c9753.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.194.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:b4:f7:24:1b:2e:46:28:a8:55:a5:7d:1d:7d:0b:36:fe:90:
         7b:28:84:fd:55:31:a5:5f:0a:ef:74:88:c1:9f:82:2b:3d:d2:
         6e:13:dd:6c:71:b6:87:98:a1:f8:0e:8c:a6:8b:c5:56:58:eb:
         36:a0:99:7c:c6:6b:c2:ad:7d:fc:90:c6:13:0f:26:c5:cb:29:
         9c:e3:c7:29:55:b2:ac:fc:8a:00:5e:70:7d:bb:8f:72:3e:b1:
         e4:cb:39:0e:a5:c8:b9:35:74:06:c3:c7:9e:99:8a:21:84:a4:
         aa:b7:95:2a:f2:a6:d7:df:90:35:19:64:ac:89:db:4a:28:9f:
         72:6b:76:8d:c2:a0:77:91:2f:e1:53:87:74:61:ae:cc:72:9f:
         a1:56:9a:ae:32:fa:7c:40:c0:e7:12:1d:01:41:9e:c5:2f:99:
         25:4c:31:1a:96:b0:46:13:64:2b:76:a0:f1:d6:46:48:34:2b:
         20:59:48:dd:03:42:ff:e9:5a:39:bb:27:27:ed:ec:6f:b6:6f:
         8a:fa:e9:00:e7:66:a4:e1:1f:3f:19:5b:08:27:51:92:24:9d:
         da:a1:da:45:c3:14:48:bb:1e:9f:97:75:45:40:8b:93:62:c8:
         5f:73:d2:33:a4:ac:2b:ce:1b:3e:91:6a:fc:fe:c2:3a:a7:57:
         6e:da:c7:b7
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bbc/IpA0wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJGMz
ZWQ4Yjk1LWI0NTMtNDVlZi1hOWRhLTJhZTViMzMyMjQyZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANUDOZCjdOqxHbsRgs0A18aRAs/yTuh3REM5HD8f
/aB8VGe062AA0EkWKHp55MGCr0NQpNg1ibS12XUUAuftw2KYaRkreqRsj6odF4TZ
y2ziqM2MWvUduq0+MybGxJ6n1Bhy4xau3+RQ/I2fr6G/925afQU5y9zEkWeVud8b
LfcwSCT/FXkAN0eqSq4Lm7c18DQguC7ngdStG0rUzhlncw4wXAlgAAnYZ7uJbmUE
rfQI4J0m2S0FNUpDMG+9NfhIoff3RyFRcPi9Ru+1s+sUDxJQcjMGCAIvRc+1V2PO
AcT3s7NHZ9aRejWT12Lc+iG1p6RTlLF2amDULYRrfsF5nrMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBS6f9tdXN6aP2AhBc5zZoYbra2drTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzczMzQzMTI1LTMzYTMtM2Rh
NS04YjVlLTM4YmUwMjVjOTc1My5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8zCsDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAs7T3JBsuRiioVaV9HX0LNv6QeyiE/VUxpV8K73SIwZ+CKz3SbhPdbHG2h5ih
+A6MpovFVljrNqCZfMZrwq19/JDGEw8mxcspnOPHKVWyrPyKAF5wfbuPcj6x5Ms5
DqXIuTV0BsPHnpmKIYSkqreVKvKm19+QNRlkrInbSiifcmt2jcKgd5Ev4VOHdGGu
zHKfoVaarjL6fEDA5xIdAUGexS+ZJUwxGpawRhNkK3ag8dZGSDQrIFlI3QNC/+la
ObsnJ+3sb7ZvivrpAOdmpOEfPxlbCCdRkiSd2qHaRcMUSLsen5d1RUCLk2LIX3PS
M6SsK84bPpFq/P7COqdXbtrHtw==
-----END CERTIFICATE-----
Generated at Fri Dec 2 06:00:08 2022 by rpki-client.