Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf e7df21ed-2de4-3c9e-98ae-76712de31cdd.roa
File:                     e7df21ed-2de4-3c9e-98ae-76712de31cdd.roa (download)
Hash identifier:          y78Qu7Brc8iIuWgxOhJWD6faohV4A2GiSx4h+IP4sAQ=
Subject key identifier:   95:B6:7B:C8:CE:D3:AF:85:72:C8:BE:E0:96:03:DA:9D:0A:1A:68:C3
Certificate serial:       010D0C9F4328576D51CC73C042CFC16497259982
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e7df21ed-2de4-3c9e-98ae-76712de31cdd.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 206.52.0.0/16 maxlen: 16

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:97:25:99:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=86c1f7f2-82db-45f7-bbfa-6b610ac17966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bc:69:50:16:d3:bf:aa:cc:7d:26:f0:f7:ed:
                    db:57:54:13:55:6d:02:3d:8d:c3:38:20:12:3a:70:
                    6c:de:3f:cd:18:39:ed:7f:bf:8e:42:16:24:72:20:
                    f7:4c:e7:6f:5d:e0:e7:68:2b:b6:61:02:a3:5c:15:
                    dd:e2:5f:ee:b5:e6:8b:b4:2f:48:c4:ec:3d:73:19:
                    40:60:17:f6:45:8e:36:77:83:66:cf:fc:9a:5c:12:
                    32:1a:df:4e:c4:1b:96:76:d8:cd:0a:c4:e1:df:fa:
                    c9:2e:3a:d9:a7:7a:f2:08:8c:20:f3:78:f4:62:68:
                    4b:6d:fd:fd:5c:02:a8:77:02:42:dc:05:1f:4d:6c:
                    5b:93:7f:de:4b:90:be:3e:39:24:6c:14:bd:6f:7b:
                    5b:8f:cd:68:67:25:4a:82:e4:0d:20:f3:b2:f4:dd:
                    2b:66:b7:97:f7:8f:81:82:1d:cd:6d:c1:c0:60:85:
                    02:d3:9c:aa:19:80:cd:48:a3:cb:f5:23:4e:80:4b:
                    14:9e:ee:ac:23:8c:f1:04:3c:04:5a:99:0d:22:83:
                    6c:eb:db:b0:87:e9:9f:16:b0:40:f4:c8:04:30:63:
                    d6:03:63:fe:d0:5d:ef:b6:fc:19:db:d1:45:08:d3:
                    68:c7:08:89:3b:31:cc:12:b8:9c:54:59:c2:81:b7:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                95:B6:7B:C8:CE:D3:AF:85:72:C8:BE:E0:96:03:DA:9D:0A:1A:68:C3
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e7df21ed-2de4-3c9e-98ae-76712de31cdd.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.52.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:9e:67:4e:ee:6e:01:b0:ec:3f:24:f2:ed:5c:fd:a6:5b:49:
         8f:16:ca:3e:a7:11:b9:e2:ee:5f:fb:b5:96:7c:d4:07:c6:a2:
         2c:fe:cc:9d:c2:f2:ee:59:82:9a:22:be:8f:69:d4:8b:62:b1:
         eb:39:93:cd:97:ed:f7:c3:dd:85:55:a3:02:ec:97:21:cb:fc:
         25:8f:6d:22:c0:01:ff:9a:fb:2e:a8:34:7c:e5:90:ce:09:98:
         80:0a:0d:65:02:99:c6:8d:a5:08:85:ed:5a:8e:7d:82:04:25:
         7b:95:4c:59:01:40:c6:ab:b5:43:57:2c:09:ba:28:87:e6:e3:
         86:f1:3e:94:6a:5b:f3:0d:c3:b2:d7:dd:66:c9:f0:59:d4:b3:
         b9:91:8f:6c:65:6b:6c:bf:02:ae:a5:8a:0b:28:b4:f4:08:00:
         46:60:35:e3:1f:cd:d1:e8:54:a2:a3:d4:02:40:35:c5:5d:8c:
         93:aa:b5:7d:fd:6c:dc:c0:36:bf:0d:52:cb:69:c7:bb:07:15:
         ed:c6:ba:c5:b9:91:b0:1b:c9:75:de:c8:d4:a8:a6:c5:5f:e1:
         73:93:71:88:22:5e:30:41:f6:2e:a3:9d:f2:ac:be:89:c5:08:
         fa:e7:b5:8d:33:41:57:f9:fb:ea:c0:9c:f2:2f:43:20:61:4f:
         73:7a:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:00:09 2022 by rpki-client.