Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 90eb07a8-f01f-3150-87d9-b61b6d7081c9.roa
File:                     90eb07a8-f01f-3150-87d9-b61b6d7081c9.roa (download)
Hash identifier:          8u5zXH68FPTpZ9GHTP9xAR5fMJN4ADg4j2QJF4ak2EE=
Subject key identifier:   F7:AB:6F:74:2F:20:44:20:CD:62:63:2C:51:C8:54:5D:BE:56:32:57
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DD5B2C8DD
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90eb07a8-f01f-3150-87d9-b61b6d7081c9.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 204.57.32.0/19 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:d5:b2:c8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=0f3d9425-f532-4cd8-b500-ff1968f079bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ee:29:13:a2:a6:f0:86:f1:5c:36:09:5a:c4:
                    81:b1:b1:ce:8d:d7:68:16:a3:9f:21:51:a7:ec:8d:
                    a0:26:f4:9f:9e:7f:e9:a1:74:e3:53:09:6e:81:04:
                    db:47:a0:93:d3:c3:7f:8f:85:92:15:6c:8c:5d:36:
                    e1:3a:b1:43:79:27:08:08:89:bb:cf:d0:be:d0:a0:
                    81:62:4b:e9:1a:e6:b9:ae:17:c4:6b:cb:49:a9:d2:
                    da:e5:c9:51:b7:9d:74:e3:d5:b0:cf:71:86:85:d6:
                    28:04:7e:95:5f:50:18:ca:36:1f:de:a9:5b:a2:03:
                    bf:36:70:88:df:00:de:58:02:b6:ff:00:12:22:c8:
                    be:93:9d:04:f9:ff:b1:50:9a:ef:05:61:a1:8f:9c:
                    20:31:fa:fd:da:97:35:20:31:c9:b1:0e:44:d5:58:
                    c4:52:6e:87:04:38:38:6d:28:e5:6c:b3:ae:63:33:
                    91:6d:88:d7:03:55:3f:37:9f:7c:8b:cf:47:90:db:
                    91:2f:fd:2d:1b:48:40:1a:5d:19:2f:ab:2a:db:08:
                    4f:e8:b1:d0:71:18:95:10:5a:b8:30:fe:ba:e8:fb:
                    02:e7:c9:40:1c:5d:23:90:25:bd:b9:98:cc:e3:73:
                    8a:23:16:b3:64:64:ec:f4:53:1f:46:be:2d:e3:e4:
                    c5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F7:AB:6F:74:2F:20:44:20:CD:62:63:2C:51:C8:54:5D:BE:56:32:57
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/90eb07a8-f01f-3150-87d9-b61b6d7081c9.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.57.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:4e:02:b3:6c:c6:bd:1e:f4:03:d8:cf:bd:55:b1:85:7f:44:
         47:0d:9a:01:20:92:0d:e4:ae:2d:bd:74:f9:0c:c1:de:25:b2:
         91:53:7d:0e:fb:cb:84:e1:ed:b4:22:0d:3e:36:bb:c1:d5:4f:
         e3:ea:4b:81:bf:a5:bb:9b:de:bb:69:3c:d3:ea:31:1a:ba:6c:
         9c:40:81:6c:2b:77:50:c8:96:60:74:d6:fe:07:10:c8:75:97:
         fa:90:80:37:0c:7b:e8:dc:9e:a1:1a:f3:e7:25:bf:63:bd:33:
         a9:d9:7f:1c:06:c4:eb:b1:08:a5:91:b3:1f:1a:c3:24:e9:fb:
         50:15:28:66:be:cb:38:13:e5:a3:59:0f:43:c7:f9:f1:6b:b7:
         31:bc:c9:f7:19:41:7c:14:f4:ad:6c:68:f5:a8:ed:93:da:18:
         5e:4e:09:15:af:f4:ea:5c:da:df:03:17:fc:86:79:7f:cb:1c:
         98:b4:ef:23:3f:81:27:d3:fc:51:85:5b:db:da:d9:4a:98:75:
         29:c2:98:fe:4f:ba:06:0d:4b:3a:75:de:50:f2:48:cf:71:73:
         b3:e3:47:23:de:a5:1f:0e:f9:6a:fe:8e:d2:08:6d:86:f6:24:
         82:bf:9f:44:23:a7:a7:55:27:15:b4:d8:7b:ff:fa:1a:36:3b:
         00:37:fb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:00:08 2022 by rpki-client.