Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf b30fbad7-85f1-3dea-8d73-8baa9a73b216.roa
File:                     b30fbad7-85f1-3dea-8d73-8baa9a73b216.roa (download)
Hash identifier:          1VTAMu7wCmfIk+qSJ/kazlZWTB+RV5aJ9gQW6hmDqVI=
Subject key identifier:   43:45:08:AD:84:D8:13:67:9A:A5:BB:BE:CE:5C:22:B9:53:BA:6A:9B
Certificate serial:       010D0C9F4328576D51CC73C042CFC1667776159F
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b30fbad7-85f1-3dea-8d73-8baa9a73b216.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 129.250.113.128/29 maxlen: 29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:76:15:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=c8e6c901-3a20-4b55-bb0c-87f5dc124d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:27:d6:2e:71:a1:cb:d0:8c:80:c7:a0:39:
                    19:86:89:0b:be:9f:b3:57:c4:a3:e3:a3:ac:48:8b:
                    e3:34:c6:c5:4f:c0:b2:c5:ef:df:7d:8a:ba:6c:d3:
                    c7:9b:91:43:3c:5c:00:db:10:55:da:2e:62:75:dc:
                    d7:f0:44:17:8b:2d:a9:32:7b:c8:c3:cb:83:e4:28:
                    ec:3a:b6:7e:0e:96:d2:29:0d:46:da:89:41:eb:63:
                    d2:58:3b:d1:37:18:ab:56:6e:ff:e5:a6:38:fb:29:
                    f4:3f:46:93:af:97:01:ca:f7:71:ca:39:b4:46:23:
                    58:73:e5:d2:20:fa:ca:47:0d:ef:ea:65:13:df:0c:
                    3b:19:fd:e0:31:36:78:93:a3:dc:f2:cc:e6:b9:96:
                    f2:9b:e3:65:e6:18:6b:c0:e4:da:7a:67:6b:78:7a:
                    c1:79:15:44:99:36:e0:3d:73:09:2e:f9:21:60:c1:
                    bf:18:0d:66:d8:73:df:71:83:ba:ab:75:07:9a:bc:
                    29:31:2b:8e:b6:dc:eb:12:c2:ab:4a:52:fa:1d:52:
                    49:59:55:8f:54:6f:09:f2:ed:43:9d:45:ab:c0:b8:
                    fe:9a:99:e5:c6:a7:92:08:e0:b0:3d:32:cc:16:53:
                    8d:1b:5b:0b:c7:fd:72:c1:69:74:14:14:cb:94:e6:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                43:45:08:AD:84:D8:13:67:9A:A5:BB:BE:CE:5C:22:B9:53:BA:6A:9B
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b30fbad7-85f1-3dea-8d73-8baa9a73b216.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.113.128/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0e:73:6d:ae:31:59:be:06:bb:97:ec:7e:70:ae:21:3c:01:
         b8:1c:60:07:05:d2:c3:af:9e:d7:05:a0:3a:80:da:1a:4c:d4:
         31:f7:90:07:ae:cf:83:2e:c8:df:66:9c:5b:06:2b:99:49:3e:
         bf:ae:f4:23:ff:e7:c5:fc:1d:f9:73:43:3d:fd:cb:6a:74:90:
         a5:5a:62:86:ac:d5:23:d8:a7:d7:7c:65:6e:2c:b4:5d:ab:ad:
         a5:70:96:b2:e6:ce:ed:6d:f0:40:9c:50:96:31:d0:8a:af:68:
         b5:53:bc:c6:46:5b:6b:19:16:d1:48:4c:ba:c3:e9:29:74:bc:
         8a:97:23:b4:79:d1:99:55:28:a4:39:6c:c0:a5:b5:bd:09:3c:
         11:07:f6:e3:81:9d:01:cb:06:9f:4e:51:ff:66:89:e8:c6:8d:
         92:b0:a8:a3:56:55:64:eb:20:74:de:32:81:85:92:3f:2b:5b:
         6b:87:6d:93:e9:d4:bc:e6:df:6a:c0:93:f5:8d:03:5b:f0:ac:
         c5:9b:d9:f1:75:96:e0:48:3f:60:b8:0e:0e:98:65:5a:e7:2d:
         66:d8:fd:49:98:c0:a4:2d:46:90:4f:a8:73:2a:ff:0b:68:38:
         a6:31:8a:67:c2:e6:f2:8b:ee:40:79:ed:97:a0:3a:74:4e:35:
         be:93:7d:b4
-----BEGIN CERTIFICATE-----
MIIGQDCCBSqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZnd2FZ8wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODEwMTUwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJGM4
ZTZjOTAxLTNhMjAtNGI1NS1iYjBjLTg3ZjVkYzEyNGQ0ZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMZ3J9YucaHL0IyAx6A5GYaJC76fs1fEo+OjrEiL
4zTGxU/AssXv332KumzTx5uRQzxcANsQVdouYnXc1/BEF4stqTJ7yMPLg+Qo7Dq2
fg6W0ikNRtqJQetj0lg70TcYq1Zu/+WmOPsp9D9Gk6+XAcr3cco5tEYjWHPl0iD6
ykcN7+plE98MOxn94DE2eJOj3PLM5rmW8pvjZeYYa8Dk2npna3h6wXkVRJk24D1z
CS75IWDBvxgNZthz33GDuqt1B5q8KTErjrbc6xLCq0pS+h1SSVlVj1RvCfLtQ51F
q8C4/pqZ5cankgjgsD0yzBZTjRtbC8f9csFpdBQUy5TmUmsCAwEAAaOCA1YwggNS
MB0GA1UdDgQWBBRDRQithNgTZ5qlu77OXCK5U7pqmzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2IzMGZiYWQ3LTg1ZjEtM2Rl
YS04ZDczLThiYWE5YTczYjIxNi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFA4H6cYAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDALBgkqhkiG9w0BAQsD
ggEBAB4Oc22uMVm+BruX7H5wriE8AbgcYAcF0sOvntcFoDqA2hpM1DH3kAeuz4Mu
yN9mnFsGK5lJPr+u9CP/58X8HflzQz39y2p0kKVaYoas1SPYp9d8ZW4stF2rraVw
lrLmzu1t8ECcUJYx0IqvaLVTvMZGW2sZFtFITLrD6Sl0vIqXI7R50ZlVKKQ5bMCl
tb0JPBEH9uOBnQHLBp9OUf9miejGjZKwqKNWVWTrIHTeMoGFkj8rW2uHbZPp1Lzm
32rAk/WNA1vwrMWb2fF1luBIP2C4Dg6YZVrnLWbY/UmYwKQtRpBPqHMq/wtoOKYx
imfC5vKL7kB57ZegOnRONb6TfbQ=
-----END CERTIFICATE-----
Generated at Thu Dec 1 22:55:47 2022 by rpki-client.