Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf cac2b2d7-5fdc-3dee-a03b-e4662a0e1629.roa
File:                     cac2b2d7-5fdc-3dee-a03b-e4662a0e1629.roa (download)
Hash identifier:          M39U+hHU/kyAex9r9VzmHG9PLmDHih1qJRy6Iv7Bccg=
Subject key identifier:   0E:36:59:94:77:84:35:B3:B4:40:B8:60:57:CD:5F:96:F1:C0:50:E6
Certificate serial:       010D0C9F4328576D51CC73C042CFC16677788FFD
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cac2b2d7-5fdc-3dee-a03b-e4662a0e1629.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 129.250.113.32/29 maxlen: 29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:78:8f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=ad17a1b1-1a76-4515-b9c2-07246d680336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:20:d6:b6:08:36:27:be:07:93:15:0f:30:
                    57:a4:9a:d8:0d:5e:c8:6e:ae:87:bb:4b:43:b2:df:
                    cf:3d:94:10:20:18:2f:d2:65:40:0c:5a:f3:f0:1a:
                    e0:53:8b:56:d1:05:b0:19:a1:fb:e7:11:e8:0e:91:
                    04:b4:ec:77:44:61:29:e4:78:24:ec:b7:d6:83:6d:
                    b1:2f:7d:fe:fd:e9:34:09:bb:77:0f:13:59:35:fe:
                    f5:e7:59:c1:4b:2c:ad:84:d8:3a:9b:e0:66:68:e8:
                    ca:f9:56:4e:39:d5:7b:61:75:d6:45:4a:be:9c:46:
                    ea:ca:2a:78:d9:c3:64:05:0d:94:83:2f:6b:9a:3b:
                    59:3f:84:f3:a0:2e:77:e8:2a:2a:98:17:c7:e5:27:
                    c7:88:aa:04:9e:6b:9a:b1:da:a4:ef:ec:a8:cd:c3:
                    a6:bb:a5:cf:33:38:46:31:25:38:8b:ea:bb:d7:d2:
                    0c:06:49:28:5c:eb:f9:fb:67:63:f2:1d:03:cf:94:
                    e2:5b:ee:a6:c0:f8:ad:29:26:dd:8e:82:ce:0a:fb:
                    6d:3e:89:ac:d7:2b:7d:13:da:1c:5c:5c:a8:34:dd:
                    20:6f:b1:ea:1e:8b:7e:29:ea:aa:2e:b8:1d:5b:7b:
                    bf:64:5d:6a:b1:5f:33:ae:a1:1c:43:00:ad:31:9b:
                    b5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0E:36:59:94:77:84:35:B3:B4:40:B8:60:57:CD:5F:96:F1:C0:50:E6
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cac2b2d7-5fdc-3dee-a03b-e4662a0e1629.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.113.32/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:2c:98:56:8f:3b:bb:5c:13:9a:f7:17:0e:8a:9b:ba:56:2f:
         77:98:c6:04:4a:66:ae:80:e5:1a:ce:3f:12:4c:d7:53:cb:3f:
         31:07:40:58:3e:11:35:5c:f6:14:99:c1:a0:19:e7:90:a7:e4:
         03:43:a6:4b:3e:64:3e:ce:4a:01:81:d0:f0:02:9a:2f:ba:47:
         a1:58:26:70:b3:9f:a8:a5:fb:d3:ec:5b:0a:e4:e3:48:4e:d4:
         82:c9:19:af:0a:56:e2:f0:66:08:48:bc:33:bc:56:68:f7:ef:
         50:40:0d:0e:61:ef:28:bc:b6:2b:63:cb:4e:f4:df:5f:a0:ea:
         08:24:44:97:3d:a7:1e:dc:75:cd:f6:6c:b7:3e:c2:e0:63:a7:
         c8:d3:ef:f1:f5:28:4d:f7:a8:ac:5e:08:38:8d:b9:9b:ed:71:
         71:a8:96:70:22:53:b5:4e:51:66:d0:83:4a:c2:0c:38:bb:a9:
         23:bc:ad:16:e6:b9:25:e8:c5:37:25:0b:6b:5a:81:c3:bb:57:
         3c:ef:46:d4:0d:33:c0:6f:8e:4e:1e:6e:a6:c0:c8:5f:5d:31:
         97:a9:ac:88:e8:52:f0:59:32:23:c1:24:c3:5f:c3:7a:8a:b1:
         a3:8b:2c:77:a6:32:1b:69:6f:55:f3:e8:9c:37:a0:db:b5:75:
         3e:56:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 07:09:45 2022 by rpki-client.