Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a8168c3d-e7fe-313c-a31e-b13224f9f0cc.roa
File:                     a8168c3d-e7fe-313c-a31e-b13224f9f0cc.roa (download)
Hash identifier:          79g3195hp/EbGF2ulLNb3a1qpca0ovBiF2Ff86zriO0=
Subject key identifier:   61:12:BF:2E:F4:03:3D:BF:09:07:BF:DB:66:C7:8B:4B:F2:54:B3:DB
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F81BF0864
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a8168c3d-e7fe-313c-a31e-b13224f9f0cc.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 168.143.0.0/16 maxlen: 16

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:81:bf:08:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=0c96a5a7-2f38-4814-8621-7f38afa4e80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:61:b6:72:98:c1:a4:05:28:ec:37:c9:df:b2:
                    ae:45:58:d3:1c:fc:d1:c4:0c:d3:86:19:e3:a9:5d:
                    fe:04:b7:19:af:96:9f:dd:83:09:c6:9d:37:74:50:
                    19:20:2d:04:7b:24:ab:dd:70:a0:26:00:0d:dc:eb:
                    90:6d:68:2a:7a:fb:ce:45:50:d8:b3:bf:59:6c:a7:
                    f3:33:92:1b:36:44:1a:5a:8f:5f:8f:b9:38:7b:4e:
                    85:28:82:64:3c:5d:5e:5c:81:4e:d5:fc:6c:e8:7f:
                    7f:9a:78:68:4b:c5:ee:ad:24:0a:8a:b7:af:e3:08:
                    53:46:39:01:77:a5:f4:f5:e3:34:99:df:e0:d2:24:
                    1a:99:fc:a3:b6:c0:37:21:c6:32:69:0a:7e:50:94:
                    d0:42:b7:77:b3:3f:f4:92:b0:76:00:20:e3:5e:d9:
                    89:7d:29:9f:26:a9:8c:ee:69:fc:9a:ee:6c:f9:f8:
                    83:3d:11:0c:d6:c0:0d:5c:fd:59:f4:69:d8:12:bd:
                    ca:5d:1e:79:f1:18:79:83:51:b7:b9:8d:bf:ce:c6:
                    4f:ab:5d:db:83:b8:72:09:0d:84:d7:23:78:59:3c:
                    64:68:3c:c2:6c:87:82:d5:be:e4:61:b7:7f:32:95:
                    4c:68:44:8a:f8:f0:d9:33:0e:74:a9:bd:2c:18:bf:
                    81:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                61:12:BF:2E:F4:03:3D:BF:09:07:BF:DB:66:C7:8B:4B:F2:54:B3:DB
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a8168c3d-e7fe-313c-a31e-b13224f9f0cc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.143.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a6:e1:c4:2a:36:32:f5:26:a7:72:47:ac:fc:10:4d:6f:4d:
         5d:a4:8c:35:75:19:37:d6:4a:51:6b:ba:a5:86:93:ba:93:bb:
         cb:8d:54:bc:27:e0:19:c8:df:47:4f:5f:d1:70:55:a7:7c:7c:
         10:86:93:74:e2:5e:00:47:70:7d:14:7f:0c:37:7f:9f:b8:27:
         0e:bc:bd:92:ab:53:b5:c0:48:09:38:92:41:cc:2c:81:41:5d:
         4a:ee:dc:26:30:6c:b7:60:99:3b:1a:37:d4:b3:3d:99:3c:07:
         5c:1a:e3:37:f9:54:05:e9:90:98:a1:3b:da:c9:cc:44:21:f3:
         fa:c6:ab:44:a1:a8:82:88:9b:00:ca:32:cb:72:53:7e:78:dc:
         30:07:55:88:9b:fe:6b:33:82:20:a5:e1:af:1f:75:63:1d:bc:
         e8:99:a1:95:e5:7a:12:39:3f:a7:d4:f1:6b:61:ce:58:e9:8b:
         67:6a:44:d5:13:15:a2:58:79:f2:75:b3:d6:19:1e:0f:43:fa:
         be:10:1f:99:5e:0c:2d:e3:bf:bf:3a:4b:08:37:d3:a5:55:3b:
         5a:49:93:0c:3c:bf:7e:ce:cc:b6:71:fa:fb:f7:36:01:cb:a0:
         bc:01:1d:17:45:f0:22:30:44:6a:3f:26:d2:71:98:22:07:8d:
         37:4b:19:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 20:40:37 2022 by rpki-client.