Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf 981eb6ee-732e-3cb0-ba3e-77c14fd69da8.roa
File:                     981eb6ee-732e-3cb0-ba3e-77c14fd69da8.roa (download)
Hash identifier:          r8c2CffEntr+kqDCFMiD21UiWXYa1N40FozTBm7U/tg=
Subject key identifier:   12:EC:9D:E3:13:97:96:9D:FE:64:69:EA:90:4C:74:96:83:C5:96:34
Certificate serial:       010D0C9F4328576D51CC73C042CFC16642363FE9
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/981eb6ee-732e-3cb0-ba3e-77c14fd69da8.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 128.121.32.0/20 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:36:3f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=9b85f1d2-b878-4556-a3e6-8296dbc47392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:90:93:9b:3e:68:4f:08:73:2d:d9:ec:83:
                    5b:38:c3:5b:fd:0f:01:76:39:0b:c0:f8:c5:81:1a:
                    3a:50:f1:bc:cb:27:c2:b9:1d:22:2e:72:42:97:43:
                    de:60:c0:5f:6a:50:5c:3a:8f:cb:71:ce:6a:df:73:
                    12:65:89:1d:54:8e:90:81:e2:16:dc:a3:86:8a:ac:
                    af:76:29:30:96:85:18:a5:27:5f:a3:d9:35:58:ad:
                    ff:0d:6e:bc:33:cd:ec:e9:15:80:e5:74:37:43:98:
                    88:b9:ba:49:f0:f4:b4:da:7a:3f:9d:1f:85:cb:90:
                    6e:2b:df:20:b6:50:cd:25:1a:34:db:c3:49:c3:ca:
                    ff:36:45:14:86:95:b5:36:b6:66:2f:be:19:1f:49:
                    ab:1c:9e:ad:78:b7:8d:a1:9e:5b:93:1d:64:a2:e6:
                    cf:36:03:95:fc:41:99:1d:21:f5:c1:6a:d2:77:c2:
                    c5:77:b3:95:1a:9e:bd:fe:84:5c:d6:50:2f:a8:67:
                    a6:e0:6f:94:1f:89:b3:9b:96:d9:26:d6:a5:f0:4c:
                    35:3d:41:e4:87:49:31:58:99:cc:2e:ad:bc:30:5a:
                    e9:35:a1:af:fe:44:a4:80:f7:c2:26:e1:bc:be:b8:
                    b8:52:03:20:93:fe:0e:fc:cb:a8:89:45:ad:80:00:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                12:EC:9D:E3:13:97:96:9D:FE:64:69:EA:90:4C:74:96:83:C5:96:34
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/981eb6ee-732e-3cb0-ba3e-77c14fd69da8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.121.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b6:b9:ee:61:84:4f:25:42:53:1b:fa:59:a9:73:56:1a:5a:
         92:d3:a3:0e:73:62:8b:9e:5a:aa:bc:b1:f1:93:ab:82:9a:d7:
         4f:1c:ee:d8:cb:3a:b6:87:f0:28:7f:3f:62:88:d3:90:ff:38:
         46:af:5e:05:78:6b:d6:cb:e4:4c:c7:00:04:45:2a:01:c7:16:
         aa:06:f8:46:60:8e:af:41:a4:f6:c1:1b:44:d0:ab:59:1a:5f:
         a5:be:da:fd:08:f9:b6:1d:16:4b:94:31:86:04:90:73:11:6a:
         95:4c:d3:b4:c3:94:4f:b0:6c:16:30:b5:dc:fd:3c:96:47:b2:
         c1:e9:29:5f:64:da:9c:59:11:48:d8:ae:5e:b8:4f:ca:82:07:
         4d:57:42:ca:cb:5e:52:c4:8c:25:8b:ea:1a:38:35:d3:92:65:
         8c:58:cf:62:f7:03:de:b2:c4:05:d5:0c:09:d2:52:41:87:a9:
         fc:25:7a:73:46:d5:cc:ef:30:b8:a3:09:53:6a:30:28:d5:b6:
         b4:54:12:b1:12:84:c0:e5:e0:5e:c1:cd:fd:32:07:90:fc:90:
         14:e9:c4:95:c5:52:ae:38:3a:9e:4d:e2:f7:3c:0f:b5:60:c7:
         a1:db:5b:c2:fa:00:da:88:ac:bd:95:32:42:16:6b:7f:ba:b1:
         74:94:ca:db
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZkI2P+kwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODEwMDQwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDli
ODVmMWQyLWI4NzgtNDU1Ni1hM2U2LTgyOTZkYmM0NzM5MjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKnjkJObPmhPCHMt2eyDWzjDW/0PAXY5C8D4xYEa
OlDxvMsnwrkdIi5yQpdD3mDAX2pQXDqPy3HOat9zEmWJHVSOkIHiFtyjhoqsr3Yp
MJaFGKUnX6PZNVit/w1uvDPN7OkVgOV0N0OYiLm6SfD0tNp6P50fhcuQbivfILZQ
zSUaNNvDScPK/zZFFIaVtTa2Zi++GR9JqxyerXi3jaGeW5MdZKLmzzYDlfxBmR0h
9cFq0nfCxXezlRqevf6EXNZQL6hnpuBvlB+Js5uW2SbWpfBMNT1B5IdJMViZzC6t
vDBa6TWhr/5EpID3wibhvL64uFIDIJP+DvzLqIlFrYAAHuECAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQS7J3jE5eWnf5kaeqQTHSWg8WWNDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmLzk4MWViNmVlLTczMmUtM2Ni
MC1iYTNlLTc3YzE0ZmQ2OWRhOC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBIB5IDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAO7a57mGETyVCUxv6WalzVhpaktOjDnNii55aqryx8ZOrgprXTxzu2Ms6tofw
KH8/YojTkP84Rq9eBXhr1svkTMcABEUqAccWqgb4RmCOr0Gk9sEbRNCrWRpfpb7a
/Qj5th0WS5QxhgSQcxFqlUzTtMOUT7BsFjC13P08lkeywekpX2TanFkRSNiuXrhP
yoIHTVdCysteUsSMJYvqGjg105JljFjPYvcD3rLEBdUMCdJSQYep/CV6c0bVzO8w
uKMJU2owKNW2tFQSsRKEwOXgXsHN/TIHkPyQFOnElcVSrjg6nk3i9zwPtWDHodtb
wvoA2oisvZUyQhZrf7qxdJTK2w==
-----END CERTIFICATE-----
Generated at Fri Dec 2 07:09:44 2022 by rpki-client.