Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf e8eeaba3-f011-357f-8808-510e2d2fab7b.roa
File:                     e8eeaba3-f011-357f-8808-510e2d2fab7b.roa (download)
Hash identifier:          oNJq3FCTxV5WEmL1ijTRQCMAcxKjiohZIEorP7t9mdQ=
Subject key identifier:   DD:48:C8:EF:95:F5:3E:17:2E:9E:D9:9C:F6:0F:A2:A0:67:65:FF:3B
Certificate serial:       010D0C9F4328576D51CC73C042CFC1664253345E
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e8eeaba3-f011-357f-8808-510e2d2fab7b.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 130.94.64.0/20 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:53:34:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=3c1d7fae-b99b-4c1b-a96d-1e558ce07891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:fc:91:96:d6:bc:37:1d:ea:74:ac:c8:97:
                    f4:1f:d5:e5:a2:51:e2:46:a1:ed:21:42:14:37:fc:
                    bc:cb:3b:8a:31:a8:66:c6:91:88:76:8b:75:4b:0e:
                    34:5d:c3:b6:c9:cb:ac:70:1c:9a:ea:9d:f8:cb:74:
                    56:b0:1a:aa:7e:24:f9:11:1b:60:33:c2:94:5b:47:
                    40:46:a3:d7:48:75:50:6c:8d:c9:d9:b6:6e:92:a5:
                    e8:0c:4f:5e:08:8f:5b:4b:de:fe:4e:0b:82:ac:70:
                    73:a0:a6:f2:a8:bc:96:3b:c1:09:d5:08:52:27:ab:
                    e4:ef:79:31:87:dd:83:1c:87:ca:46:02:be:f7:e3:
                    35:27:99:2f:e5:8a:f4:cb:f9:e1:dd:ab:db:48:1f:
                    d0:9a:00:1b:62:74:88:cd:5b:5a:33:f0:43:22:b4:
                    9b:35:a3:00:0d:08:a2:7c:c5:f4:47:45:de:6f:d5:
                    a8:ee:3e:0f:55:3b:29:0a:8e:53:29:35:44:f8:64:
                    28:57:08:fc:c6:ac:a8:0d:32:87:bb:41:24:2c:5d:
                    6e:f6:31:aa:4e:4d:6b:f7:36:ea:34:18:72:04:9c:
                    9e:a5:e4:5f:ec:61:b6:cc:92:9c:64:3a:aa:2f:c1:
                    cf:11:9c:cb:96:78:8b:1b:aa:f5:29:02:ae:f7:09:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DD:48:C8:EF:95:F5:3E:17:2E:9E:D9:9C:F6:0F:A2:A0:67:65:FF:3B
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e8eeaba3-f011-357f-8808-510e2d2fab7b.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.94.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:bf:44:0c:8d:25:6c:a9:9b:32:b1:b8:1d:0a:11:97:15:f6:
         cb:17:77:53:12:24:7c:6e:c3:40:72:36:f2:18:33:71:a1:b5:
         a4:df:11:5e:2b:51:ef:5d:58:53:00:ce:fa:e1:3c:80:f7:d1:
         ec:a6:40:e6:2d:ed:aa:1f:81:ae:ec:41:96:78:1b:b8:82:4a:
         e8:81:aa:3a:49:c4:92:4e:a2:fa:df:7e:06:08:51:82:99:ae:
         8a:10:61:f9:5f:72:1e:2d:4e:a3:11:5b:2e:4d:d3:ad:da:af:
         38:83:cd:5b:a7:0e:70:0b:b8:0a:42:b3:17:07:5c:61:25:67:
         f4:18:37:5f:26:c1:60:f0:93:61:fb:63:48:dc:e4:97:ff:98:
         44:40:e0:45:cd:5f:b3:b9:60:96:66:56:e4:37:6f:61:c0:51:
         b7:7f:18:db:88:70:5e:bd:7d:7c:02:5c:75:7c:60:11:e9:24:
         68:d9:30:c8:a4:5e:66:6d:81:6f:2d:cf:71:53:1f:b8:3d:da:
         1a:a6:a6:7a:24:7e:e8:22:08:94:71:18:3a:0c:ce:90:d5:2d:
         52:58:f9:d1:56:7e:94:f8:95:44:38:fc:1a:89:90:4e:ba:9d:
         a9:81:de:f5:79:2b:ca:7f:f1:97:f9:e0:16:7f:5c:a4:18:4a:
         9f:37:d6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:34:28 2022 by rpki-client.