Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7f280359-1bfd-37d2-842c-749158801e0c.roa
File:                     7f280359-1bfd-37d2-842c-749158801e0c.roa (download)
Hash identifier:          XI35GC44lFNR+WBnVyYPpWMKIbrYnvF0yenXsF4d0xk=
Subject key identifier:   64:3D:D3:8A:38:08:BA:F3:41:40:2D:A4:3D:D9:C5:7C:87:CC:00:12
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F81EFAD3C
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7f280359-1bfd-37d2-842c-749158801e0c.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 204.142.0.0/15 maxlen: 15

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:81:ef:ad:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=41fd66c4-9a66-4092-a25f-ff63bf8161a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:19:74:b3:1c:88:96:56:b0:7e:d7:1f:53:36:
                    e8:a3:89:6e:96:47:0d:48:12:5b:42:c1:5d:05:d1:
                    8f:44:99:69:ae:85:90:5c:26:20:82:50:e0:f3:6b:
                    66:c3:35:cb:ec:c4:69:10:98:2d:d5:dc:55:1d:22:
                    00:43:45:ab:ce:bc:53:cc:e9:3c:10:70:12:36:7c:
                    03:e6:80:e1:78:c9:27:49:d9:22:74:06:b2:2f:ed:
                    fa:3f:fb:10:a8:01:6e:ee:ca:f4:c4:45:1e:bf:ae:
                    d9:50:8d:79:9d:f8:c6:ce:a7:66:8c:ad:9d:6a:e9:
                    ae:09:1b:b3:7a:16:ae:1a:84:af:7d:71:12:92:3d:
                    21:24:90:af:10:0c:78:e4:dd:59:2a:c3:0d:17:4e:
                    5d:0a:92:11:6f:f3:7a:ca:13:06:e5:35:38:f6:4f:
                    0d:cf:5b:41:15:d4:22:95:c2:e3:55:b4:36:d0:2c:
                    84:ed:c2:ff:1f:63:1f:bc:c6:6e:59:41:41:72:30:
                    68:00:2f:d7:dc:f2:7f:1b:64:8a:f3:97:b2:80:e8:
                    29:c2:27:1c:7a:0a:1c:83:fa:9a:f8:62:47:54:d4:
                    73:ba:ca:01:3c:d3:9a:c3:f1:a9:cb:0e:eb:ce:68:
                    55:ce:78:46:8a:ee:54:1f:0e:75:61:ff:e1:62:de:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                64:3D:D3:8A:38:08:BA:F3:41:40:2D:A4:3D:D9:C5:7C:87:CC:00:12
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7f280359-1bfd-37d2-842c-749158801e0c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.142.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:1b:cf:04:5f:ef:f8:4b:e8:d0:8c:97:96:91:01:bd:e9:ff:
         58:71:79:fa:39:89:35:20:ac:81:a5:6d:58:25:b3:09:bc:9e:
         b0:3f:a1:0a:a5:30:10:7c:b4:5f:97:99:45:d9:0b:d9:d6:d4:
         03:d5:90:cd:25:1d:38:5b:2a:9f:60:b8:56:39:99:61:16:db:
         14:c9:3a:97:c8:a3:2a:d0:d0:66:09:6d:6c:ae:1b:1d:b3:1c:
         07:8f:9b:5f:89:9a:82:ea:cf:e6:c4:8f:8a:a0:98:5f:88:39:
         fa:b0:ec:dd:6c:bb:05:68:1e:70:40:95:24:ae:3f:a8:99:24:
         62:40:54:ff:64:8a:39:fd:21:ee:4f:01:28:7d:2e:92:57:1e:
         75:22:4e:6d:cf:4c:b3:78:d0:e3:21:a5:13:b9:cd:2a:a6:2b:
         bf:be:e3:d3:17:12:59:dd:2d:70:10:0a:00:fb:55:69:03:43:
         55:8a:e8:af:2d:87:82:a2:56:6e:15:aa:9b:19:98:17:12:4d:
         97:ec:68:b8:21:d5:a7:c2:2e:ff:69:a5:bd:46:b9:a6:eb:b3:
         b2:47:6e:1d:d4:d9:6d:4b:1e:b3:5a:56:9a:c3:b8:cd:cd:27:
         5e:5d:45:83:f1:43:99:a1:93:36:5b:3e:24:c1:58:a1:fc:b6:
         a1:aa:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 18:40:09 2022 by rpki-client.