Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f0b768bf-5029-3a0c-b94c-eebc77442ace.roa
File:                     f0b768bf-5029-3a0c-b94c-eebc77442ace.roa (download)
Hash identifier:          oUSuHGKAACEgkWPtCmCpJ33vbBczxhTuLdVhH8L2z4E=
Subject key identifier:   FC:CE:A7:A1:53:E7:25:9C:72:71:45:F2:65:15:4E:F2:DA:89:E2:AD
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F8B0F44E4
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f0b768bf-5029-3a0c-b94c-eebc77442ace.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 198.58.2.0/23 maxlen: 23

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:8b:0f:44:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=0feea536-c556-4e72-b343-29b91b90699f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:bd:db:95:57:03:b2:62:f4:78:44:f8:84:
                    fc:f8:92:a4:7c:19:1d:91:ce:8e:c2:87:98:e8:52:
                    eb:9c:50:2d:a2:70:09:62:8c:10:0f:10:8f:42:28:
                    f7:0b:46:cf:55:b6:df:f8:b4:c6:4d:70:28:ca:50:
                    db:7e:aa:b7:9b:ee:b9:6f:8b:10:de:ce:b2:ac:4d:
                    7f:ef:18:11:fa:06:71:47:c9:53:97:90:3d:2a:1a:
                    d8:3c:57:14:96:03:78:58:83:40:dc:f0:6b:2b:bc:
                    89:e7:23:2e:5e:15:b3:ce:e6:c3:c3:d1:16:7b:a4:
                    a7:33:37:1f:c6:46:14:04:65:6c:fe:fa:ae:e8:e0:
                    4d:9d:ea:92:53:52:9a:5d:70:9d:03:28:d8:c8:c8:
                    d4:e2:ef:de:f3:7f:a5:b3:a2:10:08:d9:69:c4:12:
                    b5:3b:52:5f:96:0b:78:af:8f:4a:48:69:28:42:cb:
                    33:1b:ff:5b:7d:f9:34:e4:c5:d8:fb:9e:3c:85:d4:
                    f0:ad:c5:ed:ff:63:ba:da:83:6c:da:11:1a:97:93:
                    36:60:64:8d:30:0e:b4:7e:b2:36:3b:0b:04:8d:09:
                    5e:5a:4c:e8:38:2f:9e:37:79:2a:15:ad:47:08:40:
                    83:4a:6c:62:d4:dd:df:ba:0b:80:80:11:a2:d8:a0:
                    c6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FC:CE:A7:A1:53:E7:25:9C:72:71:45:F2:65:15:4E:F2:DA:89:E2:AD
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f0b768bf-5029-3a0c-b94c-eebc77442ace.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.58.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:74:b4:37:ac:54:9a:95:51:bb:7b:e0:f4:ef:ef:a1:81:37:
         6d:e2:76:3f:5b:45:3a:6c:90:79:91:22:be:5c:50:02:f1:10:
         76:6d:78:7f:19:dd:51:60:cf:6d:6c:23:5b:6a:18:db:ca:46:
         1e:22:2e:e6:8a:c9:22:ef:4f:77:6e:5f:ff:6b:89:82:98:92:
         7e:48:0f:0b:cc:fd:af:a5:15:83:a3:bd:f8:fc:d1:9e:83:1f:
         56:2f:6e:bc:69:6a:7b:e5:33:85:70:43:31:6d:9a:f3:58:b7:
         07:93:98:72:a7:22:64:0a:99:d1:81:ec:f4:ae:f8:7c:42:d3:
         74:c7:ae:02:c7:4e:14:5a:53:d4:16:d7:f2:41:c1:10:8f:f6:
         65:fe:be:4c:a0:6e:a5:77:d1:c5:2e:44:8f:78:ae:02:03:21:
         4b:2f:df:4e:35:13:37:bb:9d:0c:2f:94:2c:b2:25:5f:8b:e4:
         cc:0f:0f:22:80:5d:51:1a:a3:ec:db:91:4e:75:1f:08:7a:fb:
         16:35:23:1b:b8:45:0b:f7:44:3f:e2:73:48:d3:b7:86:7f:ef:
         80:7b:ae:03:a7:f8:a9:e0:97:08:aa:e6:b2:ed:0e:06:f5:50:
         be:20:66:66:95:a0:20:e0:56:18:dd:58:c9:eb:4b:ef:8c:79:
         e7:da:54:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 20:00:16 2022 by rpki-client.