Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4aacaa9-047d-3d64-9167-3c377d6f1c06.roa
File:                     d4aacaa9-047d-3d64-9167-3c377d6f1c06.roa (download)
Hash identifier:          9IiHPyLVdBAt98gvHaxdiUYAUQjjMfhOscKyesBzy8k=
Subject key identifier:   CD:99:A0:CA:63:91:8A:A2:21:E8:17:B9:A7:7F:5D:D5:F7:24:A4:A7
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16642CCFDC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4aacaa9-047d-3d64-9167-3c377d6f1c06.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 157.238.208.0/20 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:cc:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  5 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=ef28ce32-7dd4-4165-b76b-c7e482ef8665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:21:6e:3f:b7:74:4d:fa:e6:4a:3f:df:5f:8f:
                    db:fe:bd:85:dc:6b:4f:24:28:14:1a:e6:cb:a8:ca:
                    3c:94:19:49:0f:dd:f9:a9:fc:ac:47:6a:44:f9:f0:
                    13:80:af:3a:11:4f:c2:c3:4b:a6:c1:a8:65:2a:59:
                    21:36:c9:11:4f:c3:a3:d1:3a:9c:cf:32:72:7f:ef:
                    d0:01:a9:e0:b1:1e:61:5e:c6:b3:45:25:9b:ce:1f:
                    a0:9c:de:25:57:8c:2d:7f:13:55:1d:8d:da:3b:c7:
                    f0:55:59:58:fd:94:16:04:af:45:04:27:6e:53:c1:
                    82:ac:50:7e:80:cb:2f:e1:6c:93:a0:36:5b:ea:11:
                    e8:d4:74:e6:26:3b:d6:6d:9b:7a:ef:2f:45:11:2f:
                    c1:56:aa:82:93:d5:5b:2b:a9:39:5c:7e:81:03:41:
                    4f:08:74:98:1f:df:0b:16:fc:d1:f4:91:fa:b2:c2:
                    c5:5f:8f:fa:cd:cb:ee:90:5c:25:c2:a3:e8:74:9e:
                    e6:37:0c:b7:75:4a:08:a5:7c:58:a2:2a:66:5b:a3:
                    ce:44:f9:ff:66:2e:f0:88:33:82:b2:55:44:40:b7:
                    ff:9c:ad:96:5d:41:ce:15:ee:ec:9c:1a:18:a2:fb:
                    8a:05:f8:9a:d9:83:be:71:cc:07:9a:e3:31:9e:2c:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CD:99:A0:CA:63:91:8A:A2:21:E8:17:B9:A7:7F:5D:D5:F7:24:A4:A7
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d4aacaa9-047d-3d64-9167-3c377d6f1c06.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.238.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c5:cb:68:41:14:87:1b:ad:f5:23:1d:23:ff:d0:04:1f:42:
         35:e1:e1:90:4c:99:52:8b:d5:d0:68:4d:8f:22:59:70:06:a5:
         4d:d1:05:6a:5d:ce:f1:a5:3a:ab:b5:bc:18:0c:c2:42:5a:13:
         30:07:82:54:5c:1b:fd:6f:ae:8b:c3:0a:dc:b8:da:49:d1:8b:
         fb:a9:a4:8b:c8:03:41:d1:ec:9f:b7:26:ef:52:b2:ea:9e:be:
         8f:6b:09:d3:ae:bb:1a:54:c0:4b:d1:f4:2e:8f:f0:9d:32:35:
         da:04:2b:d9:6e:0b:17:e5:02:37:b6:79:98:dc:cd:10:8f:eb:
         16:fe:49:a2:1e:11:b7:cb:47:a7:73:0b:9c:5d:a5:05:6d:8c:
         9b:32:45:b0:b9:c6:8c:77:25:9e:d9:5f:6d:35:97:d8:0f:3d:
         41:89:62:10:b4:55:fc:cb:34:af:04:d4:71:bb:e8:c0:56:a7:
         18:9e:04:7c:fb:8f:d8:81:20:2a:b4:43:53:cb:a4:09:cb:e9:
         73:a9:77:13:18:0b:4c:01:58:a9:e4:ba:c1:f6:7f:cc:19:f5:
         bc:b4:d0:2b:da:5a:8f:35:24:86:17:03:67:7d:b7:5e:23:9f:
         de:e1:5a:ab:c5:a4:1f:9a:34:d6:e7:e6:b4:e9:2f:88:3e:c9:
         e2:07:ad:7c
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZkLM/cAwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODEwMDUwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJGVm
MjhjZTMyLTdkZDQtNDE2NS1iNzZiLWM3ZTQ4MmVmODY2NTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAN0hbj+3dE365ko/31+P2/69hdxrTyQoFBrmy6jK
PJQZSQ/d+an8rEdqRPnwE4CvOhFPwsNLpsGoZSpZITbJEU/Do9E6nM8ycn/v0AGp
4LEeYV7Gs0Ulm84foJzeJVeMLX8TVR2N2jvH8FVZWP2UFgSvRQQnblPBgqxQfoDL
L+Fsk6A2W+oR6NR05iY71m2beu8vRREvwVaqgpPVWyupOVx+gQNBTwh0mB/fCxb8
0fSR+rLCxV+P+s3L7pBcJcKj6HSe5jcMt3VKCKV8WKIqZlujzkT5/2Yu8IgzgrJV
REC3/5ytll1BzhXu7JwaGKL7igX4mtmDvnHMB5rjMZ4sjp0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTNmaDKY5GKoiHoF7mnf13V9ySkpzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2Q0YWFjYWE5LTA0N2QtM2Q2
NC05MTY3LTNjMzc3ZDZmMWMwNi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBJ3u0DBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEACsXLaEEUhxut9SMdI//QBB9CNeHhkEyZUovV0GhNjyJZcAalTdEFal3O8aU6
q7W8GAzCQloTMAeCVFwb/W+ui8MK3LjaSdGL+6mki8gDQdHsn7cm71Ky6p6+j2sJ
0667GlTAS9H0Lo/wnTI12gQr2W4LF+UCN7Z5mNzNEI/rFv5Joh4Rt8tHp3MLnF2l
BW2MmzJFsLnGjHclntlfbTWX2A89QYliELRV/Ms0rwTUcbvowFanGJ4EfPuP2IEg
KrRDU8ukCcvpc6l3ExgLTAFYqeS6wfZ/zBn1vLTQK9pajzUkhhcDZ323XiOf3uFa
q8WkH5o01ufmtOkviD7J4getfA==
-----END CERTIFICATE-----
Generated at Thu Dec 8 19:20:24 2022 by rpki-client.