Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da14248e-b952-3d05-a2b5-80c89e6bea3d.roa
File:                     da14248e-b952-3d05-a2b5-80c89e6bea3d.roa (download)
Hash identifier:          g2vugmu2NOdCK1oHILEvDd+eAsgJZxmf/f15eN/WqlI=
Subject key identifier:   D2:EA:6E:16:36:24:97:3F:66:34:0B:A0:AA:75:C9:C7:60:D2:76:A1
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664239039B
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da14248e-b952-3d05-a2b5-80c89e6bea3d.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 128.121.0.0/16 maxlen: 16

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:39:03:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=24b1d444-12ab-48eb-bb2b-b60c8f37977e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:92:d5:d0:2c:59:a5:37:bb:3c:0e:b4:6f:
                    7f:04:ce:02:3f:61:30:da:dd:7f:07:37:be:f9:bd:
                    47:e1:9e:33:7f:7f:fb:24:a6:9a:af:42:05:65:9d:
                    bb:c6:ba:1b:e2:fb:fe:ea:7e:71:5a:89:77:4d:f7:
                    71:32:01:0b:f2:07:e1:56:e0:24:ee:87:f1:0d:da:
                    da:d9:1e:6b:e2:a1:73:52:b0:d7:5b:01:9e:9d:3c:
                    ca:e8:e6:7b:2c:b6:c3:98:fa:e0:d6:66:1f:79:88:
                    f6:93:85:26:7a:31:b0:8d:1c:55:ac:83:1c:b0:ad:
                    68:9e:0f:5b:63:6d:42:18:2c:dc:49:3e:a0:5f:05:
                    04:7c:fb:6e:51:ba:b2:b4:48:18:01:cf:2d:a8:d1:
                    b7:f0:d5:52:f8:67:bf:fb:f2:ef:4d:c3:fd:22:22:
                    66:7c:04:67:11:9c:cf:23:af:e5:56:a3:70:47:3e:
                    2b:ac:0e:25:21:ba:b7:2e:ec:f8:8e:2b:2a:54:38:
                    23:78:19:f8:43:9f:13:2b:1e:3a:7f:9d:d0:2c:d7:
                    d0:63:b6:81:44:a1:1a:89:d5:08:62:d8:50:a4:02:
                    35:77:5b:e8:dd:4a:87:98:de:05:08:b7:7d:dc:1f:
                    fa:04:22:05:d2:c1:eb:23:2c:75:03:1b:23:82:21:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D2:EA:6E:16:36:24:97:3F:66:34:0B:A0:AA:75:C9:C7:60:D2:76:A1
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/da14248e-b952-3d05-a2b5-80c89e6bea3d.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.121.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:33:dd:62:42:e5:cd:c9:b4:cb:9b:14:0c:48:c0:07:17:0b:
         ca:f4:68:69:38:b4:cc:e6:3a:d3:da:6c:e4:18:7f:7e:91:40:
         32:7a:39:27:43:21:e1:6f:51:0b:08:35:25:c1:fb:97:04:41:
         bd:7f:51:8a:4e:42:15:d3:68:cf:90:69:9d:fd:78:e1:d8:85:
         05:0b:d9:3b:e1:b8:e4:8b:52:3b:52:18:87:83:7a:32:38:1a:
         81:1a:80:52:32:4f:8b:25:67:f8:af:27:c1:c2:44:4a:c8:72:
         95:b9:c3:ca:8e:46:b7:2d:52:ef:39:94:a6:26:de:68:2d:73:
         41:4c:52:1c:bd:82:17:b0:6c:82:c6:86:66:b2:44:8c:2f:e7:
         44:33:08:10:39:39:38:9a:ac:0e:40:46:d0:a5:07:d8:c0:0a:
         92:83:27:61:c1:1c:9e:9c:7e:3d:82:b2:5a:88:6d:bb:27:29:
         53:f1:57:5a:76:d8:83:2a:3b:44:59:a1:11:73:44:2e:7a:96:
         81:e3:3b:97:44:3f:86:28:4d:04:de:cc:f3:9e:39:75:fe:be:
         5f:72:59:6c:8a:b1:ca:e1:a2:d5:b9:69:18:ea:6e:cc:3f:c2:
         a6:46:e4:75:29:cb:ee:18:35:72:ff:f2:f3:81:30:52:da:ca:
         f2:18:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 20:00:19 2022 by rpki-client.