Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 97d4b99d-d45c-3c17-9c95-89227941e628.roa
File:                     97d4b99d-d45c-3c17-9c95-89227941e628.roa (download)
Hash identifier:          fDfLla6YsH4xi/fUE+XxWZuqPanPhwCiaYtLGf9yW/8=
Subject key identifier:   60:00:14:45:5B:C1:8F:45:81:BC:50:9C:67:1C:21:33:27:17:77:20
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FABD209E1
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/97d4b99d-d45c-3c17-9c95-89227941e628.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 207.97.67.0/28 maxlen: 28

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:ab:d2:09:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=f09690bf-b7a1-4b74-b185-58403bb702ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:51:a2:51:97:8e:c3:9f:e2:09:9a:d9:71:
                    d3:3c:69:a0:8f:f8:b2:56:a3:12:49:f5:17:04:a5:
                    41:13:80:74:b7:09:cf:a3:0b:2c:3c:56:d3:4f:0e:
                    e7:98:2c:d8:28:32:a9:24:32:47:c3:79:13:1a:85:
                    51:2c:f3:97:2e:3e:b1:86:d4:b7:6a:c7:60:d1:ca:
                    3f:94:30:12:02:8f:f9:cc:61:a4:8b:78:31:39:5c:
                    7d:2f:15:89:4e:65:d4:4b:f2:20:7a:1e:a4:29:72:
                    c4:c6:c4:f7:7a:40:da:8f:86:1e:9e:d7:87:54:4c:
                    ac:75:a8:f3:8b:56:d5:73:11:cb:03:22:de:3b:df:
                    59:41:82:a7:a7:24:91:5c:ef:f0:ba:8e:a2:1b:f2:
                    ef:11:bb:83:51:bc:5b:47:f1:db:ff:00:74:21:96:
                    83:75:21:a3:bd:d4:ff:e5:69:dd:ce:cb:0e:42:8f:
                    dd:c1:67:8e:4e:52:7e:c6:fa:43:96:8d:af:03:98:
                    a5:23:f5:1c:a3:6d:1b:a2:fe:3a:11:7e:bf:3f:e6:
                    1a:6b:29:fc:8d:2c:59:82:b9:84:81:ff:26:6f:84:
                    19:30:21:8a:60:42:1d:51:e8:51:c5:11:02:9f:6a:
                    18:59:b7:10:b0:d7:59:85:05:e9:68:4a:f2:cb:58:
                    d5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                60:00:14:45:5B:C1:8F:45:81:BC:50:9C:67:1C:21:33:27:17:77:20
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/97d4b99d-d45c-3c17-9c95-89227941e628.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.97.67.0/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:25:95:e2:30:68:9f:cd:2d:de:97:93:61:c7:7e:5a:4a:8e:
         de:07:8c:92:b6:4a:89:ed:e1:cf:2e:fb:da:c5:5e:d3:83:5f:
         5d:df:eb:8a:c8:d5:eb:dc:d3:59:b9:3a:fb:21:f5:d7:e1:a4:
         1a:f0:df:61:e4:0d:82:a6:80:f7:cb:45:5a:91:25:9f:17:ae:
         49:e6:5d:3d:a0:e7:74:85:20:35:33:8a:4f:14:51:65:0b:17:
         25:c0:2f:65:db:c8:70:3b:a2:3e:91:0f:b0:30:bb:53:23:35:
         a6:86:4a:55:8a:82:b6:a4:36:8b:bb:a8:29:6c:76:27:90:c4:
         e3:4f:ac:ea:b8:2a:df:21:2c:45:f8:3d:b4:57:dd:9b:8b:33:
         c4:a9:68:f0:66:85:3d:c8:a9:8c:ed:cf:45:a1:3d:ca:d8:7c:
         6f:c9:2f:b8:48:80:0d:93:dd:c5:65:89:ef:7a:c0:e3:a3:7f:
         10:51:d7:32:aa:d0:19:b3:63:ca:15:65:dd:c9:00:6d:78:1f:
         84:c9:5e:0b:5c:d8:90:ab:3d:3a:fd:3f:72:a3:99:a7:d1:33:
         b1:53:62:11:a5:59:06:3a:ff:bc:24:47:eb:16:49:26:d0:5c:
         af:de:56:df:ce:c3:36:61:d1:d5:a3:6d:cc:ca:21:ff:ca:c5:
         d0:04:aa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:00:08 2022 by rpki-client.