Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf b5373736-66b4-3bf9-ae7e-e0120507f188.roa
File:                     b5373736-66b4-3bf9-ae7e-e0120507f188.roa (download)
Hash identifier:          I9u2Xj48lAUzYZ/fxOv4dJmYbrndmfSjLCepE7Q5wKA=
Subject key identifier:   03:48:FF:BF:5D:4A:4E:1F:60:E1:32:51:01:F2:2F:FC:60:66:0C:8C
Certificate serial:       010D0C9F4328576D51CC73C042CFC164A3555241
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5373736-66b4-3bf9-ae7e-e0120507f188.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 198.17.243.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:a3:55:52:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=97af1547-cbfe-4bc8-a7eb-a6a5ed92c1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b7:0b:5c:a1:90:ea:85:b5:b6:d2:cf:91:32:
                    01:2d:1d:94:11:1d:84:8c:a0:f1:4d:5c:ba:e3:c2:
                    49:c0:1b:fc:cd:fd:13:f0:3a:de:6c:b8:a2:9f:ee:
                    a3:3e:34:51:4f:a2:40:c9:c6:03:11:03:7a:26:ee:
                    d1:0c:3e:cd:4f:b8:7e:cf:c9:9c:6f:60:92:2a:b3:
                    00:06:08:8b:11:e6:54:df:61:4d:88:c5:81:50:91:
                    2a:98:62:20:01:49:fd:39:28:c5:70:f4:dc:4f:d7:
                    d0:27:59:f2:a0:e8:28:a4:61:32:d9:c9:7e:6a:0b:
                    5d:40:cc:dd:f6:c4:d7:f4:a5:ac:8b:4c:a8:0d:a2:
                    c8:ca:da:3c:b7:ce:8e:51:35:3a:ea:67:8d:08:b9:
                    61:cc:c2:7e:78:be:4d:3f:77:6f:7e:14:55:b9:85:
                    39:08:84:f4:2b:7d:f0:03:2f:81:fe:4e:6a:3d:21:
                    ee:34:05:af:08:6b:1a:6b:0b:91:e3:3c:49:8f:ba:
                    88:5b:27:53:3e:cf:32:2f:cd:20:9d:77:7b:29:9b:
                    de:0c:d0:82:3c:7e:3d:c2:56:16:aa:8e:20:ad:ff:
                    d7:78:3f:9c:f3:fd:4d:7f:40:64:46:d2:d1:7d:19:
                    e8:9e:8a:5d:57:cb:af:c9:ea:f5:45:2d:ee:a2:54:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                03:48:FF:BF:5D:4A:4E:1F:60:E1:32:51:01:F2:2F:FC:60:66:0C:8C
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b5373736-66b4-3bf9-ae7e-e0120507f188.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:cd:e7:5f:30:d2:78:05:43:38:e5:c5:f3:4a:bb:d2:b3:b7:
         74:58:f1:88:b9:45:45:c5:38:bf:6b:c9:c1:54:53:82:fa:3b:
         46:59:86:80:c1:80:a9:bb:f2:fd:32:03:b4:4c:83:25:3a:5b:
         11:4a:c0:96:28:87:7d:c3:db:31:01:67:ff:2b:cc:de:16:25:
         38:a1:92:a6:60:b7:c4:fa:d4:65:75:9b:e2:c5:68:7d:00:65:
         ee:92:dd:84:50:10:83:4e:70:83:a4:6b:66:df:ba:3e:23:7d:
         50:0b:19:ec:b4:77:83:5b:57:63:db:56:65:80:5f:cb:02:a8:
         05:e9:2b:02:8b:c3:06:d6:3d:36:b9:59:07:0b:c3:75:b2:35:
         fa:45:02:72:7b:8f:c0:bf:8a:8a:5d:20:b2:c1:47:81:ad:e4:
         c8:33:ab:3d:83:81:a2:94:1a:58:3c:5f:0d:29:c3:95:3d:d6:
         ca:d8:80:2d:e2:a5:84:7a:28:d7:fe:10:d0:b6:ca:f9:d1:51:
         16:9a:c1:82:ea:e3:9f:61:88:84:95:92:74:19:9f:db:62:0f:
         60:89:a7:b0:82:e1:3f:09:3d:65:09:d7:44:51:59:93:a9:56:
         ba:f7:06:01:14:41:e6:bf:4f:ee:85:b1:5d:5f:cb:c7:b7:da:
         f6:07:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 1 22:55:47 2022 by rpki-client.