Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf a98bbba8-cd53-3ce4-856d-c01194692333.roa
File:                     a98bbba8-cd53-3ce4-856d-c01194692333.roa (download)
Hash identifier:          XAy3kyhucKUCq1/tGnj6BLHqokvX1Mw470iDMle2/i0=
Subject key identifier:   7A:32:E3:D4:BB:48:FF:2E:9E:79:C5:BC:8F:FA:9E:FC:47:37:BC:FB
Certificate serial:       010D0C9F4328576D51CC73C042CFC166776ABA4B
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a98bbba8-cd53-3ce4-856d-c01194692333.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 129.250.113.208/29 maxlen: 29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:6a:ba:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=156db78b-f879-467a-a16c-964d35eaef9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d2:b6:3d:61:6d:9b:8b:86:5e:02:97:1c:ed:
                    15:57:d8:19:5f:8f:e5:d4:4e:51:be:da:3b:c5:6c:
                    3d:45:1a:c6:a8:67:fb:5a:13:3f:1c:2a:1f:a9:6a:
                    10:dd:84:3d:f7:71:f1:39:30:03:00:15:e4:72:80:
                    a9:29:e2:95:6c:a0:da:4c:85:e4:d0:55:3d:0e:dd:
                    57:be:3f:c7:8d:03:2d:d8:82:a6:a8:2a:9e:50:a3:
                    07:30:ab:9d:ef:2c:9d:b8:89:1f:14:1b:5c:a1:8a:
                    36:37:82:d3:47:c2:96:a9:33:e4:f6:52:0e:f3:9c:
                    89:88:ed:99:36:1d:4d:5a:31:eb:b1:27:62:d8:a4:
                    5d:5b:da:b9:9a:2e:a0:4d:29:d5:94:5a:de:f0:fa:
                    32:53:83:31:05:6d:a5:a7:b2:79:1c:78:89:c5:63:
                    e4:1c:c8:32:94:bf:80:59:00:37:a2:cf:1b:ee:96:
                    ca:19:f9:e1:b8:14:da:96:ca:0d:4d:fc:94:f7:91:
                    50:3d:3f:98:06:bd:36:5e:7a:1b:3f:75:d0:c8:16:
                    6f:0f:38:99:94:c3:90:9f:d5:a8:2f:f0:f2:e2:5d:
                    9b:e5:22:37:fc:4f:d7:c1:ce:4b:46:fb:ba:64:b3:
                    0e:ff:0f:cd:d3:45:e2:1f:3e:c2:4b:71:3b:8f:41:
                    c7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7A:32:E3:D4:BB:48:FF:2E:9E:79:C5:BC:8F:FA:9E:FC:47:37:BC:FB
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a98bbba8-cd53-3ce4-856d-c01194692333.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.113.208/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d8:38:0b:d0:0c:15:d7:a6:8a:e9:05:ce:3f:24:08:f1:87:
         46:4e:48:9a:b6:98:31:a3:57:d8:ab:60:2c:4a:78:40:5e:db:
         a2:e2:61:a9:4b:82:97:bd:ad:a2:77:ad:72:0d:e4:29:ca:d9:
         ef:11:86:30:23:75:35:12:66:27:e2:20:57:5f:dc:b8:42:65:
         90:7a:11:6c:b1:a4:7a:bb:23:81:10:fb:bf:1d:ba:46:72:48:
         22:f9:98:f8:a8:db:c6:29:da:b8:dc:27:7f:f6:9e:ed:9b:26:
         32:d9:63:ae:c3:95:9d:c0:5a:48:5a:87:74:86:42:ce:00:02:
         4e:90:06:a5:b3:9b:48:8d:78:1a:c5:60:ad:3b:54:34:aa:32:
         7c:27:b7:0e:a3:83:4e:ff:dd:23:6c:a7:9f:51:15:95:da:1d:
         7f:d2:d7:b6:f7:0f:85:04:d8:ca:61:d1:bd:a8:14:09:3a:07:
         76:22:bc:62:79:3a:60:00:d5:7c:a3:00:03:8f:de:2d:11:ab:
         72:bc:7b:f1:99:3c:c3:8c:e7:4c:50:2a:dd:f0:9c:7b:e4:94:
         ef:dc:24:4c:c5:db:93:50:dc:a2:80:d8:3b:58:fd:97:d9:c5:
         a5:af:e4:0b:be:bd:d7:db:14:38:3e:d0:93:bf:9f:ae:cf:d2:
         1a:21:2c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:00:06 2022 by rpki-client.