Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf f18f957c-5457-39d4-ab34-18945daac173.roa
File:                     f18f957c-5457-39d4-ab34-18945daac173.roa (download)
Hash identifier:          TL5dj92XwukzZyRw67SqTa+zzaQMZ1+Y/z5xLhzfndY=
Subject key identifier:   A4:55:9B:81:6C:37:6B:EA:48:30:C1:D1:B4:B0:24:83:12:C3:15:BD
Certificate serial:       010D0C9F4328576D51CC73C042CFC1667776BB9C
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f18f957c-5457-39d4-ab34-18945daac173.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 129.250.113.96/29 maxlen: 29

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:76:bb:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=2779991a-c87f-4241-80b0-37814e68f85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ee:8e:e6:01:61:ac:e7:e7:29:4f:e7:eb:5c:
                    9e:46:ff:88:e3:54:d2:ef:08:13:6c:1d:b1:01:2f:
                    9c:e4:b3:63:eb:26:17:6f:12:e2:02:9d:1d:20:0e:
                    8b:9f:b3:ab:5b:57:cc:c3:5a:b4:07:99:4f:34:38:
                    0e:2e:c5:69:e7:5b:74:93:7e:86:95:ad:2a:81:f9:
                    16:4f:a7:08:65:fc:27:5a:49:f9:6f:04:7e:c1:a2:
                    d5:d6:ae:0c:2b:de:be:e0:27:d3:34:0a:88:9c:f4:
                    e1:ad:5b:5c:cd:c0:3b:11:16:ee:30:bc:9f:02:ba:
                    b5:ce:81:7a:be:b6:62:fd:37:61:27:97:70:43:ec:
                    7f:f9:0e:8e:a2:bc:70:81:bc:cd:7b:d7:32:3e:2a:
                    fb:27:8a:b7:f2:2c:ed:9d:29:e2:89:79:dd:42:9d:
                    5b:51:7e:f6:4f:d7:6b:e8:8d:e4:74:c8:2e:ea:c5:
                    f3:4d:df:d9:96:a5:06:b0:96:46:7f:9e:36:ab:54:
                    89:7b:18:cf:7c:ff:94:88:9d:bc:6f:db:07:7e:ea:
                    55:3a:de:54:2d:f9:40:43:74:57:46:21:cf:e5:92:
                    ee:33:fe:4b:81:ca:e3:1e:c8:42:7c:df:4f:a2:d9:
                    9a:0d:aa:f6:27:07:92:b2:72:33:0b:e6:09:b3:c0:
                    40:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A4:55:9B:81:6C:37:6B:EA:48:30:C1:D1:B4:B0:24:83:12:C3:15:BD
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f18f957c-5457-39d4-ab34-18945daac173.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.113.96/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:79:16:c8:d3:81:4a:bb:aa:b4:bf:74:82:bd:7a:bf:0c:f4:
         d3:f7:ec:a0:6e:92:c3:f8:5f:b5:ba:aa:eb:22:a8:09:99:99:
         ff:70:0c:37:c1:34:db:87:d0:da:43:70:32:ce:b5:e5:1a:5d:
         53:48:06:05:fd:d3:9f:4f:9a:e7:4a:d3:10:ad:f9:a5:10:03:
         b1:63:cb:b1:7d:77:01:bb:f5:db:78:10:13:b7:ac:9f:76:b4:
         8a:2d:8b:17:3b:31:09:65:bb:40:5e:02:c4:5c:66:0d:58:4c:
         d0:a0:b2:90:8c:5f:cc:23:02:2e:9e:25:f2:87:d2:29:0f:3b:
         20:e0:45:4f:bc:42:07:96:c1:25:9f:f3:f8:b6:7b:dc:ac:8e:
         02:9c:e5:df:d3:19:dc:82:2d:e4:be:f1:d4:89:70:14:95:15:
         ad:d4:7a:6f:8f:7e:90:b8:4b:f8:c8:66:3b:ea:27:63:d1:07:
         dc:2d:be:8b:ec:3f:4f:ef:85:f7:1d:cb:b8:3d:ce:b2:58:2b:
         e3:0a:5e:15:53:94:9d:8a:87:29:21:ff:f0:19:83:12:88:46:
         e9:ee:cb:c2:47:94:6c:ee:a8:5b:0a:23:d2:cd:cc:0b:65:11:
         93:a1:81:8b:2c:c6:dd:c5:5d:62:d8:78:f9:bc:83:78:9b:41:
         83:a4:2e:c4
-----BEGIN CERTIFICATE-----
MIIGQDCCBSqgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZnd2u5wwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODEwMTUwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJDI3
Nzk5OTFhLWM4N2YtNDI0MS04MGIwLTM3ODE0ZTY4Zjg1YzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOHujuYBYazn5ylP5+tcnkb/iONU0u8IE2wdsQEv
nOSzY+smF28S4gKdHSAOi5+zq1tXzMNatAeZTzQ4Di7FaedbdJN+hpWtKoH5Fk+n
CGX8J1pJ+W8EfsGi1dauDCvevuAn0zQKiJz04a1bXM3AOxEW7jC8nwK6tc6Ber62
Yv03YSeXcEPsf/kOjqK8cIG8zXvXMj4q+yeKt/Is7Z0p4ol53UKdW1F+9k/Xa+iN
5HTILurF803f2ZalBrCWRn+eNqtUiXsYz3z/lIidvG/bB37qVTreVC35QEN0V0Yh
z+WS7jP+S4HK4x7IQnzfT6LZmg2q9icHkrJyMwvmCbPAQKUCAwEAAaOCA1YwggNS
MB0GA1UdDgQWBBSkVZuBbDdr6kgwwdG0sCSDEsMVvTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2YxOGY5NTdjLTU0NTctMzlk
NC1hYjM0LTE4OTQ1ZGFhYzE3My5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFA4H6cWAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDALBgkqhkiG9w0BAQsD
ggEBAIF5FsjTgUq7qrS/dIK9er8M9NP37KBuksP4X7W6qusiqAmZmf9wDDfBNNuH
0NpDcDLOteUaXVNIBgX9059PmudK0xCt+aUQA7Fjy7F9dwG79dt4EBO3rJ92tIot
ixc7MQllu0BeAsRcZg1YTNCgspCMX8wjAi6eJfKH0ikPOyDgRU+8QgeWwSWf8/i2
e9ysjgKc5d/TGdyCLeS+8dSJcBSVFa3Uem+PfpC4S/jIZjvqJ2PRB9wtvovsP0/v
hfcdy7g9zrJYK+MKXhVTlJ2Khykh//AZgxKIRunuy8JHlGzuqFsKI9LNzAtlEZOh
gYssxt3FXWLYePm8g3ibQYOkLsQ=
-----END CERTIFICATE-----
Generated at Fri Dec 2 06:00:07 2022 by rpki-client.