Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/83cb84a5-415d-301d-a155-baec099bd38f.roa
File:                     83cb84a5-415d-301d-a155-baec099bd38f.roa (download)
Hash identifier:          CSUMJF7Z0tmDjxWq9jVxOEs/syCAgscn4SZbUFrLBnY=
Subject key identifier:   02:04:FF:F7:5D:BD:13:0B:5B:7C:98:95:BD:25:E9:32:B7:37:A8:06
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1649741DC99
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/83cb84a5-415d-301d-a155-baec099bd38f.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 209.162.64.0/18 maxlen: 18

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:97:41:dc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=d9f239bd-d6fe-41b5-9d39-cf6fb48c270b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:60:c0:d8:89:99:2e:5d:e3:bb:aa:58:c3:
                    ea:46:98:b9:aa:cf:24:0b:e6:89:02:0c:29:4c:31:
                    10:5f:e3:96:3f:2a:96:eb:36:33:41:52:d1:01:51:
                    87:c8:91:05:f1:1b:ff:b3:94:a7:94:61:3b:4f:43:
                    80:53:5b:b2:4d:0b:43:c5:2f:84:e9:a9:fd:9b:25:
                    72:81:69:23:2a:f9:01:8c:48:d5:ae:be:d2:e4:25:
                    53:c3:8b:a6:d3:04:73:12:df:4f:c2:1a:2f:94:95:
                    27:c4:0d:ba:ce:5b:bd:2e:f3:e5:ea:da:ad:40:6f:
                    4a:02:40:b9:83:7b:0c:f4:07:b5:6e:ad:9f:31:90:
                    40:58:ed:9d:d3:a7:29:18:a7:18:b6:6c:e7:62:c8:
                    fa:26:85:73:e6:57:3d:9a:9b:ce:41:01:ac:82:ca:
                    42:d5:d5:c6:68:d4:ce:ea:33:8c:89:70:1d:02:46:
                    e4:b7:2a:47:cf:94:cc:d9:0b:5d:65:67:11:2e:b8:
                    86:5a:db:6d:de:05:6f:14:d7:0c:7c:dd:5a:ab:41:
                    e4:15:80:17:2d:44:2d:9c:6d:5d:90:e6:1c:ef:e6:
                    52:32:37:a1:50:6d:70:92:7a:61:f9:93:04:9d:45:
                    c9:97:12:4f:c0:d4:17:4f:c4:f2:bd:c5:00:51:d4:
                    1e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                02:04:FF:F7:5D:BD:13:0B:5B:7C:98:95:BD:25:E9:32:B7:37:A8:06
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/83cb84a5-415d-301d-a155-baec099bd38f.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.162.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:4e:1d:05:d2:32:29:fd:08:61:5b:22:7f:e5:3a:8c:73:46:
         07:7e:3d:ea:50:40:9d:e9:a7:86:ce:b0:19:d0:d9:7a:9a:1c:
         ca:81:2e:fe:1b:34:1b:fc:51:9e:95:c8:6c:4d:59:aa:d5:dc:
         9f:fd:99:68:54:4d:39:29:b7:34:d9:47:ec:ec:54:aa:b8:a4:
         00:1f:db:ee:59:11:6f:b6:15:cc:06:1b:85:34:07:45:3b:ec:
         1b:3c:5a:7f:55:6c:82:33:42:ac:d0:7c:99:1f:6b:03:2c:0c:
         4c:79:bc:9b:4c:d7:ff:82:37:37:d9:5a:bb:74:66:16:4f:31:
         c0:dd:35:19:fe:89:91:d9:db:8c:83:46:4e:e8:f6:d7:8e:9e:
         0c:bb:7e:93:1a:b7:8c:ee:0c:00:4e:b0:ef:1d:7a:a8:38:14:
         a1:df:96:6c:52:d9:2d:87:eb:43:4b:18:89:d6:1a:28:0c:5d:
         32:23:f0:fd:e1:70:d2:c0:74:be:4d:2e:16:c6:93:9b:01:62:
         f6:f2:5b:1d:34:d4:87:75:53:8d:d8:7a:5a:7e:58:c9:79:2b:
         a5:01:1d:9f:db:7c:90:e2:06:97:89:5b:f8:41:ef:a8:d2:6e:
         1d:08:75:0e:d1:1f:d1:68:be:49:aa:95:41:44:0b:51:76:75:
         82:3a:41:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 20:00:15 2022 by rpki-client.