Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 7e1dd16d-9aab-3537-ace2-3608dd9a8272.roa
File:                     7e1dd16d-9aab-3537-ace2-3608dd9a8272.roa (download)
Hash identifier:          25TDVQf+omyjhRh2hqL/83NBiDTwI9ZhWzx2qrIxuAo=
Subject key identifier:   C8:0C:23:94:34:43:66:D3:B1:16:D9:64:31:2E:A4:72:A8:FB:E6:58
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E03974C9E
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7e1dd16d-9aab-3537-ace2-3608dd9a8272.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 207.153.128.0/18 maxlen: 18

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:03:97:4c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=24a63ef4-ee55-4c17-a3d1-0b3fcb1274bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7a:4a:ab:fa:aa:ae:b3:de:fd:c0:9a:65:3e:
                    5c:3c:a1:ea:8a:86:e3:7a:0b:de:c4:43:ce:74:98:
                    4a:79:9b:0a:fe:de:cf:c2:6a:8c:c6:6b:e0:cb:8a:
                    27:14:55:57:db:77:0d:20:05:b8:15:69:45:a7:0f:
                    b7:11:4f:74:c6:56:c5:7a:d7:d0:5e:4c:08:27:5b:
                    79:8a:1b:96:a0:69:47:34:77:bd:bf:22:88:2f:f5:
                    00:49:15:a5:ab:db:52:40:4d:18:91:9d:d2:6d:1f:
                    95:37:f9:df:ec:8f:31:0a:2d:bd:b6:d1:c2:c1:f7:
                    c4:fe:c0:7d:19:42:29:a3:f1:2c:3f:4c:f4:0a:d4:
                    98:2c:8f:0e:72:82:a9:fc:96:ff:34:39:fe:a7:61:
                    f2:a6:2f:ae:fe:5e:78:4f:6a:9b:b6:e2:ff:9c:d9:
                    08:97:08:7f:38:da:ca:55:4e:16:cf:d8:c3:78:56:
                    39:3e:68:57:62:e0:86:e9:38:ad:01:e8:f2:d3:fc:
                    cb:b8:5e:66:5a:33:5a:89:7e:31:7f:09:33:24:97:
                    8a:3e:61:0e:00:28:1b:a5:c4:83:bd:28:4e:c5:56:
                    ab:d2:17:10:02:b9:d9:1a:76:98:c0:04:59:95:20:
                    ed:c9:37:ee:b2:d3:57:f4:97:45:14:20:b7:1f:1d:
                    f5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C8:0C:23:94:34:43:66:D3:B1:16:D9:64:31:2E:A4:72:A8:FB:E6:58
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7e1dd16d-9aab-3537-ace2-3608dd9a8272.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.153.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:8b:68:4c:10:df:d3:9b:d8:27:ed:20:f5:f4:b0:e5:17:88:
         e5:39:a4:96:32:50:23:3e:df:8b:3d:14:67:0e:15:06:0a:3e:
         43:a0:a8:90:92:09:e3:5f:13:5f:c1:d4:46:a8:fc:f4:e2:8b:
         11:51:7d:c9:dc:b2:e9:a9:a2:ef:45:80:9e:79:84:f5:87:e0:
         1b:7a:9f:66:31:eb:04:c8:6b:6f:8c:dd:83:bf:15:32:a6:35:
         87:93:07:ea:b5:ee:ba:d5:5c:55:0a:8f:59:80:7d:fa:62:cc:
         12:5b:15:80:26:8f:96:2e:70:be:a4:06:8a:d0:66:b8:e5:43:
         20:1e:fd:8f:eb:42:1e:4a:47:ea:4b:94:24:70:9f:20:1f:41:
         ae:cd:3a:dd:65:66:60:87:cf:cd:68:90:8d:95:eb:77:1d:d2:
         d6:26:70:ff:e8:0e:bd:b4:e8:51:2f:14:3a:a5:76:ce:78:29:
         c3:a1:21:83:38:c2:1c:1e:f2:ef:2f:a3:b5:b4:92:40:9c:4e:
         ac:82:e1:33:f9:d2:52:30:09:cd:59:63:7a:cc:33:e6:3b:73:
         ab:9d:ae:d2:1d:63:0b:62:47:43:2f:8a:84:56:fe:c6:47:d1:
         99:78:db:c7:b1:26:d4:e1:6d:8d:12:7d:5b:a4:0d:6e:de:5d:
         9f:32:41:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 1 22:55:46 2022 by rpki-client.