Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ed606120-4139-395c-9ebb-8e2795fe5f5c.roa
File:                     ed606120-4139-395c-9ebb-8e2795fe5f5c.roa (download)
Hash identifier:          ZVwKQ3Wq0DHIvPybej1mXQs8KihEl31PvTv7AcAbldA=
Subject key identifier:   DE:FF:2B:97:46:E4:7C:0E:97:2F:67:E0:26:4B:11:13:EC:F4:11:46
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16642D064A4
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ed606120-4139-395c-9ebb-8e2795fe5f5c.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 157.238.0.0/16 maxlen: 16

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:d0:64:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=d03af5dc-9879-4b5a-a380-e11fdf95732c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:ed:a2:8c:7a:eb:f8:43:40:01:7d:86:60:
                    2b:30:f0:68:54:16:65:2b:9f:1c:35:4e:00:36:56:
                    a3:df:26:21:3d:37:12:b9:65:c3:e5:ae:37:d4:e4:
                    b6:fb:e3:de:70:06:2f:ce:fb:5c:3b:e0:a8:81:34:
                    bf:75:88:27:4f:1a:f1:56:f9:b1:33:b2:fd:7d:b7:
                    c6:09:fb:65:4a:f5:54:ee:8d:d4:2a:c1:2e:77:4e:
                    d7:76:11:e0:c2:48:7a:81:28:e9:b1:8c:f6:bf:e6:
                    35:23:fc:5b:d6:6f:a7:6d:57:be:6e:11:b0:e9:cd:
                    8e:bb:0f:49:3a:38:9a:b3:1f:88:cb:b9:4f:73:d1:
                    d5:b0:4f:51:d1:13:f8:3d:b0:cc:9d:4c:46:4b:6e:
                    74:37:0c:68:3d:3b:e6:38:6b:eb:f4:50:17:8c:85:
                    86:1b:58:d3:41:26:10:2c:24:07:da:ef:a9:3a:20:
                    cf:c1:80:05:67:72:13:a5:03:5b:08:9e:6d:19:9d:
                    84:95:5e:96:90:15:84:17:a2:46:29:3c:92:1e:14:
                    d8:3b:b3:37:b6:2b:53:90:77:6a:8c:3a:47:f8:1b:
                    97:af:d3:01:25:a9:a2:35:ec:36:74:01:27:d6:35:
                    89:c8:bd:cc:3d:3d:27:ef:ec:39:13:83:b1:4c:a4:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                DE:FF:2B:97:46:E4:7C:0E:97:2F:67:E0:26:4B:11:13:EC:F4:11:46
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ed606120-4139-395c-9ebb-8e2795fe5f5c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.238.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:56:38:ba:0c:34:bf:66:af:30:7f:24:65:45:58:c8:86:eb:
         39:bc:df:a5:46:51:4e:91:c4:d7:27:f0:4d:9f:a0:a2:34:78:
         77:af:39:b7:59:75:db:b1:9b:7e:3c:08:eb:be:66:b0:55:67:
         6d:89:20:9a:2c:95:d2:33:af:67:7b:b6:71:0c:f8:94:1e:3c:
         fa:5a:56:a3:fc:7c:78:25:b4:77:0b:77:3e:15:88:d1:ea:ed:
         39:63:3c:ed:d3:9b:c1:f9:75:e9:94:f9:23:7d:bb:91:91:a4:
         bc:69:82:9d:ad:fd:12:87:1e:17:5d:a2:73:12:5a:cd:0e:8c:
         59:f9:72:a6:67:0b:bd:8e:15:58:e6:49:f7:e2:06:a8:45:09:
         17:56:2c:2f:a6:84:67:3d:4a:0d:fb:8b:d2:89:0c:02:81:be:
         c4:9b:ca:46:97:87:5b:24:6e:c5:28:de:68:f7:74:0b:03:63:
         39:c7:90:91:ba:ea:66:a5:66:db:e7:f5:31:48:47:c6:7e:3c:
         db:ca:9e:24:d7:6a:cf:56:fa:40:c9:dd:65:13:c9:39:06:14:
         54:1e:97:b3:29:d9:84:ad:29:45:9b:2f:70:8c:f3:eb:5e:50:
         e4:0e:7e:b1:69:f4:d6:8e:8a:b0:db:6d:50:fd:c8:10:70:a3:
         4a:44:b8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 18:40:07 2022 by rpki-client.