Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c469fb2e-ab95-3a77-958d-c8fefb5ab51f.roa
File:                     c469fb2e-ab95-3a77-958d-c8fefb5ab51f.roa (download)
Hash identifier:          L30vJT5k7VKlZxTwHqm79K4s/05OjEPswWciBt3aHW8=
Subject key identifier:   64:90:49:E5:CF:0E:54:D6:FC:99:50:69:CE:33:0B:99:2A:02:08:21
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1667767E3AE
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c469fb2e-ab95-3a77-958d-c8fefb5ab51f.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 129.250.114.56/29 maxlen: 29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:67:e3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=71628111-ba2d-4f84-b090-702c00ede71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:b9:23:2a:4a:b2:03:cb:c9:fb:97:fa:55:
                    68:12:5b:93:06:9f:7a:b3:21:dd:ee:7b:99:53:78:
                    37:46:59:b2:04:89:99:2d:b7:ae:51:d1:46:91:9e:
                    ec:57:55:a0:82:21:dc:3c:ae:88:d2:94:3c:5b:2a:
                    d4:ee:bc:7a:6b:25:62:4d:27:05:3c:9c:8e:47:45:
                    d2:64:18:0c:5c:a4:5e:2d:97:92:c8:2a:54:aa:8f:
                    8b:e3:6d:aa:fd:22:d3:d7:e7:c9:ed:69:ca:43:38:
                    1f:84:34:0a:65:d5:4c:41:9e:72:0a:cc:34:96:50:
                    69:a9:ff:06:b2:33:20:59:d9:94:e0:1b:85:c6:02:
                    23:51:3b:f2:c6:9a:11:59:c9:83:4f:8b:ed:7b:df:
                    df:92:fe:9d:1b:44:8d:79:03:ad:f9:11:3c:f4:63:
                    81:33:e5:18:a6:c4:af:e0:7c:11:b7:fd:6d:fa:5c:
                    c5:11:ef:6a:4d:2e:b1:54:58:ea:1c:14:55:8d:fa:
                    60:84:6c:d8:10:38:28:c5:39:bc:42:d7:a5:c6:04:
                    fc:86:64:8a:1e:fe:b9:a2:5c:6b:6e:50:1d:92:e2:
                    ec:e3:3e:da:df:97:21:f8:73:c5:e5:49:55:22:95:
                    e6:97:fe:99:3e:ec:82:fa:59:f4:ee:ab:70:82:36:
                    8d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                64:90:49:E5:CF:0E:54:D6:FC:99:50:69:CE:33:0B:99:2A:02:08:21
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c469fb2e-ab95-3a77-958d-c8fefb5ab51f.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.114.56/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:77:85:49:48:8e:77:5f:fe:47:2d:12:f6:57:d5:20:9c:14:
         40:68:eb:e0:70:3f:42:3a:5f:83:f9:ba:0a:af:44:66:e2:17:
         4c:27:b8:ba:19:4b:7f:95:f4:4a:65:06:55:74:74:a3:6e:dd:
         c5:d5:f2:06:97:1f:08:59:3f:73:8d:39:de:b2:80:2c:9c:e2:
         cf:96:e3:53:f6:6b:e4:73:2c:63:cc:ed:dd:79:50:fd:7f:c0:
         d1:b5:c1:41:83:40:b6:15:55:3b:f1:de:bf:d7:ae:27:00:46:
         b8:fe:d5:66:98:7a:16:c9:60:72:fa:9e:bd:ec:e6:f1:40:35:
         71:4c:a6:84:42:44:06:f6:fd:30:27:f1:74:08:b2:1b:d7:00:
         9f:1a:44:f4:94:6a:c4:66:d0:af:cf:2b:21:38:4e:40:9a:57:
         67:e1:6c:32:2c:b6:b8:dc:55:22:de:90:01:57:b5:21:bf:63:
         b2:6c:d9:a6:a7:97:58:a7:db:38:35:cc:f6:9d:d4:c5:60:12:
         e6:f5:d1:1d:41:8b:74:60:bc:d9:e8:9c:c2:55:a9:3c:c8:e6:
         05:d4:72:c4:b7:32:97:1e:fe:f7:42:9a:c5:96:d1:90:50:55:
         22:d9:c1:0a:81:e4:b3:46:f4:d1:3f:3f:68:f0:97:21:a4:28:
         65:35:2c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 20:00:15 2022 by rpki-client.