Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b8d4f609-5f27-3177-b569-af0fc38f8c93.roa
File:                     b8d4f609-5f27-3177-b569-af0fc38f8c93.roa (download)
Hash identifier:          KZ9A6xEhLUiaIgj3hQYB+lMY6BBdjy9nZpwLcL7q+Sw=
Subject key identifier:   E5:B6:2B:9E:99:74:3C:10:D7:26:A7:4D:85:57:2D:70:77:DE:61:70
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E646AAD32
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b8d4f609-5f27-3177-b569-af0fc38f8c93.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 209.139.0.0/17 maxlen: 17

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:64:6a:ad:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=23fc7421-6747-4e94-9c03-4f41001db9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c6:d0:d9:21:de:ab:da:32:34:86:49:22:38:
                    a9:05:26:4e:91:3e:c9:a8:0b:91:b0:7f:8c:e8:b5:
                    28:1d:20:69:95:dc:50:2e:46:ec:5d:a9:e0:45:d7:
                    9f:7f:cb:49:cd:31:3a:05:e5:6b:eb:ee:16:6f:0d:
                    b3:ea:d1:c9:48:20:f9:7f:22:c1:6e:e0:9f:e6:f9:
                    2b:05:8c:ca:6a:dc:69:ff:5d:c8:25:35:fa:89:66:
                    fd:08:d5:1f:95:a0:10:fb:24:0d:88:d3:2d:a7:3b:
                    5a:90:f8:05:08:a3:f8:e7:8e:c7:e9:3d:d3:82:0a:
                    bf:75:65:00:dd:d1:10:8d:cb:ec:9b:a2:05:e5:b5:
                    ce:cc:1a:9b:34:58:3b:42:9a:a3:73:fc:1a:5b:f0:
                    b4:a5:34:36:f4:bf:a6:c7:25:62:6d:31:2a:84:fd:
                    78:64:d0:a6:c9:1d:f7:c1:c2:45:c1:d0:33:5e:09:
                    e2:01:01:5a:66:76:64:0d:c7:dc:4c:cb:11:95:ef:
                    9c:1f:cf:c0:04:d2:0e:f7:1e:14:ec:bd:23:48:d5:
                    a2:3f:88:18:29:9d:98:c3:45:e6:b2:63:f1:3b:f2:
                    89:5e:a7:cb:17:38:a2:b0:24:b5:9e:d2:a9:5f:4f:
                    d3:28:33:f9:ad:d1:cf:e2:d5:d5:18:df:24:52:4b:
                    a4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E5:B6:2B:9E:99:74:3C:10:D7:26:A7:4D:85:57:2D:70:77:DE:61:70
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b8d4f609-5f27-3177-b569-af0fc38f8c93.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.139.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b4:2f:02:b0:73:8b:f7:d7:de:9f:16:e9:c0:d1:3b:18:a5:
         ca:2b:6c:f2:16:bb:7a:fd:90:e6:fe:2f:04:fd:76:ff:ce:c3:
         5e:0c:a8:a0:ba:54:52:a1:5c:5d:98:45:e3:02:ea:b6:9a:26:
         fd:5a:78:d4:a2:2a:ed:4a:69:8e:fd:ac:27:b1:d0:63:08:b9:
         d5:42:24:9d:4d:f4:cf:a6:c7:15:6c:3f:b6:45:16:e3:90:3d:
         b6:df:4d:05:71:db:ab:53:3e:f4:da:59:23:07:66:9d:d3:76:
         86:d1:47:f4:a5:c7:aa:eb:76:2a:2a:c2:c3:22:5b:ba:83:d1:
         53:b0:5c:90:7c:0d:09:e2:a4:44:d4:d4:5e:3c:b5:fc:d6:48:
         36:6d:7b:c6:2a:a3:39:88:48:e5:0e:f6:5e:a3:4c:2e:c3:6c:
         6a:ea:cb:bb:28:57:18:c7:ce:33:b1:62:d2:c7:04:57:0f:af:
         98:3a:17:dd:3d:f0:59:1e:f9:bb:a3:32:92:af:75:23:c1:bd:
         03:68:3f:46:60:cb:00:14:cd:c4:d7:02:75:d7:a7:be:16:ff:
         ff:98:15:45:3f:77:f8:f3:4d:a5:d7:6b:89:86:15:a4:16:bc:
         df:20:5d:60:a3:44:67:d6:3c:ec:96:df:cb:43:1c:d7:bd:22:
         44:a9:98:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 18:40:10 2022 by rpki-client.