Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf d3a197eb-2c6b-3430-b026-fdb563db05bb.roa
File:                     d3a197eb-2c6b-3430-b026-fdb563db05bb.roa (download)
Hash identifier:          23lF0pRf/19DwSl4MHCI8DhR1FDZKgbf3yHeA7USjm8=
Subject key identifier:   4B:F2:DE:D5:29:7E:8B:04:78:22:A8:8F:54:83:50:14:75:16:72:7F
Certificate serial:       010D0C9F4328576D51CC73C042CFC164972CB0CE
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3a197eb-2c6b-3430-b026-fdb563db05bb.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 206.252.0.0/19 maxlen: 19

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:97:2c:b0:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=8f1ef5e7-9426-4b87-b8f4-122ef45ab4e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ac:4a:6e:6a:ea:fa:98:51:fc:da:82:b7:70:
                    0a:d0:22:91:0f:63:90:de:14:7a:b2:a2:26:e7:3b:
                    a2:cf:23:aa:df:9b:38:9c:94:a6:e3:5c:c8:5a:e7:
                    86:cd:0a:61:bf:28:a4:5a:cd:61:d9:6f:65:ef:3a:
                    87:40:54:28:19:a2:52:43:4a:9e:b4:c0:de:d7:d8:
                    50:b7:bb:9a:24:98:71:64:42:17:e8:d3:ab:5c:00:
                    f5:52:af:23:75:f1:15:b5:a6:ed:38:d1:7d:50:d5:
                    8c:c3:83:2d:5f:fe:a6:c1:a7:c9:75:8e:34:6a:89:
                    f1:4c:cc:ef:9b:b3:16:14:34:03:3a:fc:d2:a7:b2:
                    fe:27:c5:de:1c:cb:8c:1f:9b:44:32:c8:b6:5c:c9:
                    32:5f:9e:56:d8:ed:2e:b3:8f:63:e0:0a:e7:81:87:
                    37:b2:0e:fa:d1:31:0f:b6:f5:54:9b:26:da:c4:1a:
                    e5:ce:f7:99:3c:68:d4:53:fa:9e:f6:dd:9a:3f:5f:
                    c9:2c:e0:cb:1b:6a:b9:3a:f0:3c:46:08:44:8f:a8:
                    2e:2c:80:43:60:f0:98:45:54:3a:73:9c:96:d6:48:
                    9f:23:55:c9:c4:02:b4:f3:f2:cf:11:f7:6d:72:f5:
                    fa:16:72:d7:21:1d:52:56:57:79:a3:d8:9d:ce:1b:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                4B:F2:DE:D5:29:7E:8B:04:78:22:A8:8F:54:83:50:14:75:16:72:7F
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d3a197eb-2c6b-3430-b026-fdb563db05bb.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.252.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:e5:35:61:33:a1:5f:af:38:05:fc:5d:43:7e:c7:67:ac:72:
         1a:c1:aa:48:c7:92:13:ed:fb:d5:b1:4c:22:fc:84:01:1d:d8:
         9d:01:35:5d:25:1f:55:25:23:91:b1:a7:b7:27:82:d3:0b:d5:
         88:d7:5b:c7:1e:7d:98:b9:90:37:d6:79:ca:7d:b2:0a:75:b7:
         a0:8d:d3:4d:9b:07:f0:4f:e2:35:81:5a:3c:0e:2b:5c:5d:1a:
         d5:fd:d1:c3:17:f2:33:9a:cd:29:86:d4:f6:23:bd:69:9b:f5:
         73:60:85:89:58:3c:e1:d4:b7:48:dd:4e:cc:38:92:fb:74:d4:
         fc:cb:72:a9:d6:38:6b:0e:cc:84:c1:ef:3d:87:1e:65:cc:88:
         c9:00:3d:1a:98:51:a8:a0:5a:e4:f6:91:bd:c2:50:70:19:9b:
         19:8a:55:f4:7d:94:98:17:b4:24:e3:23:bb:9a:69:90:fd:41:
         f7:08:1e:ca:93:65:34:3f:65:35:d9:0d:26:78:ac:b1:0e:6d:
         fe:8d:48:a9:2b:4f:4d:9a:32:14:6c:ee:be:89:a8:fa:8d:21:
         8f:01:83:6c:93:4b:70:cd:c3:2a:e9:5d:72:d9:fa:b1:ae:58:
         43:55:0e:d1:5b:3f:1d:46:1b:e2:a0:2e:70:33:66:19:59:16:
         c8:8f:b5:1f
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZJcssM4wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODA0MTAwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDhm
MWVmNWU3LTk0MjYtNGI4Ny1iOGY0LTEyMmVmNDVhYjRlNDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANysSm5q6vqYUfzagrdwCtAikQ9jkN4UerKiJuc7
os8jqt+bOJyUpuNcyFrnhs0KYb8opFrNYdlvZe86h0BUKBmiUkNKnrTA3tfYULe7
miSYcWRCF+jTq1wA9VKvI3XxFbWm7TjRfVDVjMODLV/+psGnyXWONGqJ8UzM75uz
FhQ0Azr80qey/ifF3hzLjB+bRDLItlzJMl+eVtjtLrOPY+AK54GHN7IO+tExD7b1
VJsm2sQa5c73mTxo1FP6nvbdmj9fySzgyxtquTrwPEYIRI+oLiyAQ2DwmEVUOnOc
ltZInyNVycQCtPPyzxH3bXL1+hZy1yEdUlZXeaPYnc4bQMMCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBRL8t7VKX6LBHgiqI9Ug1AUdRZyfzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2QzYTE5N2ViLTJjNmItMzQz
MC1iMDI2LWZkYjU2M2RiMDViYi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBc78ADBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAx+U1YTOhX684BfxdQ37HZ6xyGsGqSMeSE+371bFMIvyEAR3YnQE1XSUfVSUj
kbGntyeC0wvViNdbxx59mLmQN9Z5yn2yCnW3oI3TTZsH8E/iNYFaPA4rXF0a1f3R
wxfyM5rNKYbU9iO9aZv1c2CFiVg84dS3SN1OzDiS+3TU/MtyqdY4aw7MhMHvPYce
ZcyIyQA9GphRqKBa5PaRvcJQcBmbGYpV9H2UmBe0JOMju5ppkP1B9wgeypNlND9l
NdkNJnissQ5t/o1IqStPTZoyFGzuvomo+o0hjwGDbJNLcM3DKuldctn6sa5YQ1UO
0Vs/HUYb4qAucDNmGVkWyI+1Hw==
-----END CERTIFICATE-----
Generated at Fri Dec 2 07:09:47 2022 by rpki-client.