Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf a4020aaa-6f48-3408-ac01-ae243ddc918c.roa
File:                     a4020aaa-6f48-3408-ac01-ae243ddc918c.roa (download)
Hash identifier:          YuQckxBMPZ3tne9Of4lxpHXJJZrK0A7y8WvWjiigSg4=
Subject key identifier:   FC:58:D6:51:BF:C9:F7:BC:E3:D6:6E:66:DD:8E:F7:68:F6:4F:79:E5
Certificate serial:       010D0C9F4328576D51CC73C042CFC16677764823
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a4020aaa-6f48-3408-ac01-ae243ddc918c.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 129.250.113.112/29 maxlen: 29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:76:48:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=12891098-dfe1-41a2-ac3e-ce93453302d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:39:02:0e:70:1f:20:37:de:6b:8d:09:1a:
                    cc:ca:b4:3e:8c:24:58:8a:90:b8:13:aa:74:08:12:
                    67:88:b4:79:5c:e0:0b:40:9a:73:a8:53:71:f8:b4:
                    29:9c:11:6a:8b:4b:aa:dd:51:22:d8:a5:34:3b:33:
                    2b:51:75:01:c8:91:db:27:01:09:b8:64:95:d4:b6:
                    a8:14:14:22:90:10:55:80:b8:a3:22:54:9f:ae:87:
                    13:05:f8:4d:4c:06:40:57:9a:86:5b:63:a7:cd:12:
                    85:eb:9d:93:ef:58:36:74:3c:a9:fd:ff:77:20:fb:
                    8e:c4:2a:7c:9c:99:07:e7:8b:e4:aa:b1:5a:04:98:
                    bd:6b:fd:50:9f:63:bb:6b:83:23:a1:72:d3:8f:44:
                    98:0d:c9:29:cc:38:2a:bc:af:7f:a4:00:da:44:c6:
                    5d:b2:5b:76:75:c0:8b:d5:a3:d6:1f:b0:45:e6:92:
                    70:c7:aa:09:f0:ec:32:99:07:6d:e9:ec:de:e3:1d:
                    c0:bc:87:ea:39:9d:6b:fb:93:b1:4c:b8:72:ac:b2:
                    2d:19:a3:6d:34:c8:8b:d9:d3:11:2d:11:b2:86:fb:
                    87:d8:40:03:27:e9:a7:17:05:f3:07:63:23:eb:08:
                    24:88:d0:64:77:b6:50:7d:ab:07:c4:bc:81:6c:1e:
                    ed:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FC:58:D6:51:BF:C9:F7:BC:E3:D6:6E:66:DD:8E:F7:68:F6:4F:79:E5
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a4020aaa-6f48-3408-ac01-ae243ddc918c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.113.112/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:eb:24:e9:a1:c4:12:36:85:6b:88:fc:8d:54:e5:34:b5:88:
         5b:42:e7:0a:c7:01:ef:31:d9:61:23:8c:4c:d7:59:7b:70:84:
         38:0c:8d:03:66:0f:b2:23:e6:f1:e8:d1:9a:64:2a:25:42:67:
         63:0b:b1:c3:a9:f7:30:ac:51:d2:61:d0:9d:bf:36:7b:75:f8:
         dc:8f:3f:03:91:d4:81:ec:7a:39:80:c4:1e:c9:d4:28:1f:e2:
         41:4e:8b:19:41:11:c3:87:86:26:1d:32:3f:ec:3b:98:3c:91:
         bb:b1:6b:fb:76:b6:5a:a3:0f:6d:a7:ae:a5:0d:4c:66:75:03:
         63:df:ae:62:79:db:11:3b:a4:fc:71:f3:88:f7:c9:9a:85:4c:
         1a:99:52:d9:55:8b:98:34:13:5b:3d:bc:f8:a6:59:bf:a6:cc:
         ba:9d:6c:1b:33:0f:e5:c0:db:af:f9:b8:3e:40:0c:bb:7d:76:
         48:17:7a:eb:c2:a0:45:65:ae:7c:04:07:28:3d:c1:f3:fb:a5:
         3f:53:38:5a:f7:0d:35:e3:13:70:18:22:28:f4:f1:3b:c9:58:
         29:4b:93:ca:63:8e:a8:3a:75:a5:a9:00:a9:e1:8e:8a:28:32:
         2c:ee:1d:f3:98:02:fa:a3:85:fc:61:e7:d7:d0:69:42:f8:10:
         b8:85:cc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 07:09:44 2022 by rpki-client.