Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf ddbe4d27-9dd3-3c9c-ae53-3f261ee04547.roa
File:                     ddbe4d27-9dd3-3c9c-ae53-3f261ee04547.roa (download)
Hash identifier:          mpdc8JGcRZmczh45CNTMkYHF7kqQ/Eq1J+JqlaKkodA=
Subject key identifier:   E8:52:1D:0B:60:AC:00:6B:3C:F6:27:0C:3A:59:B5:85:DD:10:C5:9B
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F888A99FD
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddbe4d27-9dd3-3c9c-ae53-3f261ee04547.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 192.67.14.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:88:8a:99:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=d0c066aa-85f2-4bcf-9660-7a3a9585163b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:30:fc:f8:a9:40:92:8f:2f:df:67:a4:46:
                    02:02:95:83:b4:93:f3:20:33:8c:9a:26:63:3a:86:
                    70:75:f4:14:b6:8d:f2:05:81:28:c9:19:2e:5b:15:
                    c3:1a:3b:55:cb:75:90:b3:bd:a4:b9:83:77:a7:f2:
                    ec:96:cb:93:1e:a4:84:e1:da:25:df:b4:11:38:92:
                    17:3d:35:52:25:1b:55:bf:2f:88:2c:fd:47:1a:56:
                    d8:f9:3d:74:c2:d4:aa:21:75:06:8d:60:8b:5a:98:
                    b0:65:9e:2d:85:ea:8e:c7:3f:e6:b9:a4:5e:3e:45:
                    05:5d:27:a2:da:be:4b:92:0a:69:85:90:8b:10:7d:
                    aa:6d:c1:63:48:a9:55:31:e4:51:9a:01:3d:9a:51:
                    6e:f9:a5:05:60:6a:1b:fc:22:82:5a:64:b9:7a:f3:
                    22:f1:f7:23:d1:e1:e7:78:a0:09:80:ea:f2:ca:11:
                    9b:8d:68:10:66:9f:7d:aa:a0:53:9b:9c:8d:70:06:
                    24:be:2d:22:a3:b1:7c:f9:df:b9:56:b3:79:69:6f:
                    0e:ca:e7:1b:cd:6b:9b:b6:6c:96:47:a3:b0:8b:2b:
                    90:f7:6d:7f:ad:94:55:2f:79:6b:41:01:88:6f:e8:
                    2b:23:67:18:3f:80:81:b0:58:1c:1a:a3:e9:50:0c:
                    e7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E8:52:1D:0B:60:AC:00:6B:3C:F6:27:0C:3A:59:B5:85:DD:10:C5:9B
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ddbe4d27-9dd3-3c9c-ae53-3f261ee04547.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:9f:db:c4:1c:7c:ad:03:2e:cd:12:7f:7c:16:87:12:90:cc:
         2e:78:e2:ae:b5:6a:56:f5:2b:2a:2a:e1:a9:48:ba:60:09:28:
         e5:c4:b6:b2:56:0d:94:1a:27:2f:8b:ef:1f:1f:24:78:f2:c9:
         3a:d6:de:01:82:1c:8e:f3:3b:e7:c4:75:33:fe:04:04:32:d3:
         f8:d2:40:f3:2e:6e:91:2f:78:d6:48:13:16:7f:ee:b5:fc:c7:
         89:1e:48:f3:e9:2f:ce:9e:c0:47:97:3b:0e:6f:af:5b:7f:c7:
         a0:f5:1e:7a:f9:2e:aa:7c:53:d4:52:cd:f9:0c:21:69:46:8b:
         a4:a5:54:96:fd:dc:b5:cc:b5:62:0f:79:35:b9:e6:31:06:f4:
         22:08:9d:38:6c:0a:e8:97:63:27:60:27:44:47:87:ce:f0:21:
         b3:16:6d:f9:0b:72:cc:ed:db:83:11:e3:97:eb:55:31:5e:0a:
         62:99:81:30:2a:5f:88:e7:0a:31:38:f8:69:63:fb:28:fe:e5:
         bf:68:b9:e6:6f:69:7a:9c:63:13:3e:89:be:86:97:8a:ac:60:
         03:24:d6:9f:7b:2c:bc:fc:8b:e9:71:4e:e8:eb:1b:e3:d0:12:
         95:d5:1d:30:e6:ec:03:77:4d:15:4c:0a:e5:fb:bc:c3:46:1b:
         66:a3:4a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:00:06 2022 by rpki-client.