Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf f004bf8f-bf5c-3bf4-b86d-3774e0dfbdfe.roa
File:                     f004bf8f-bf5c-3bf4-b86d-3774e0dfbdfe.roa (download)
Hash identifier:          TlWr194soTZ4l7wnaouzaAXBEyy9k/zyiozA26hz9aw=
Subject key identifier:   10:88:AA:B7:FC:92:0A:E0:53:DE:6C:3B:8C:91:E9:8F:85:CB:61:3E
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E391DE9E4
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f004bf8f-bf5c-3bf4-b86d-3774e0dfbdfe.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 198.64.0.0/15 maxlen: 15

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:39:1d:e9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=c53f43d5-5c79-43ea-86d8-0549ea3f839f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:c0:cb:d3:1f:fc:63:be:d2:c9:36:cb:c8:
                    86:f2:fa:c7:5c:f1:6e:64:ae:b6:fc:90:89:d8:bd:
                    9d:a4:89:e1:d4:cf:60:f6:cb:35:0c:24:3e:82:7b:
                    c4:75:5a:4c:35:ab:af:8a:db:9b:54:66:20:92:8d:
                    e4:a9:b9:01:b7:5d:f1:5c:63:d0:09:af:c7:b8:ac:
                    8e:ed:54:8f:08:7e:f0:a7:d7:92:8e:06:8f:dc:01:
                    1d:59:28:4e:80:b7:38:4c:98:8e:85:99:2b:2e:df:
                    d6:5d:9c:55:7a:5f:3a:50:fc:8b:82:52:a9:d4:70:
                    bc:65:8c:5f:39:76:69:7b:b6:7d:20:09:3c:71:25:
                    7a:7e:6a:51:81:04:73:2b:53:c0:4f:c4:46:ce:ba:
                    8b:d7:e8:27:78:94:65:fc:4e:71:da:f0:e5:5f:9a:
                    44:aa:a6:a3:8f:cb:03:d9:ee:35:67:eb:00:7b:36:
                    28:0c:d3:3c:f1:ac:00:3c:cf:60:1a:6e:17:78:86:
                    1c:f4:de:86:46:2e:dd:09:95:2a:ab:49:e9:bf:06:
                    72:c3:3d:ed:d6:1b:c3:a9:e4:12:13:59:29:e1:49:
                    93:cf:6c:71:85:a1:f8:ac:1a:6d:1c:a0:19:8c:44:
                    d7:0e:eb:37:52:c9:97:8c:2e:4e:1e:47:c8:11:d3:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                10:88:AA:B7:FC:92:0A:E0:53:DE:6C:3B:8C:91:E9:8F:85:CB:61:3E
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f004bf8f-bf5c-3bf4-b86d-3774e0dfbdfe.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.64.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b7:6a:31:11:bc:8c:97:a5:56:4f:53:88:b3:1b:25:83:c0:
         19:a9:1b:91:10:a5:d1:5b:d2:f6:78:54:a5:88:1d:9e:d6:46:
         a4:89:44:d9:14:0e:e6:63:58:b2:d0:95:a4:79:dd:96:c8:c7:
         7e:7e:0d:06:e8:25:9e:0a:d4:6d:90:51:4d:06:16:96:c1:b5:
         82:b5:51:9e:49:0c:91:59:63:48:57:53:82:fd:41:29:0b:f5:
         66:e7:9d:f4:c2:ce:69:c9:b6:05:61:b7:a8:42:b8:52:ee:48:
         31:df:be:66:cc:68:bc:aa:d6:6f:68:a3:ca:73:5e:4d:a0:04:
         20:9c:34:66:32:b9:b8:6d:a7:2e:f5:d7:27:1b:41:82:4e:1c:
         c6:c5:90:72:a8:53:46:4d:fe:d1:4c:b5:f4:fa:8b:56:7a:02:
         fe:3f:2d:f5:d4:8a:a0:b7:92:3b:c0:fb:31:ae:b6:4a:0b:09:
         ff:71:8e:74:f2:8b:3f:d5:e3:3c:c4:6a:b7:f0:49:b0:64:38:
         34:b0:67:47:44:08:7f:aa:47:61:66:4a:97:7d:95:eb:28:4e:
         e3:98:3f:da:57:27:ae:a3:13:fb:90:68:5e:a0:7b:49:e0:6d:
         55:cd:77:73:94:32:dd:66:eb:d6:1b:c6:58:45:9f:b6:db:19:
         29:df:bc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:34:33 2022 by rpki-client.