Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f649c2ef-d35d-3869-82c2-f44b12f82522.roa
File:                     f649c2ef-d35d-3869-82c2-f44b12f82522.roa (download)
Hash identifier:          XdqRF+rP6YOpVfG9RUNct3nOt3BfhlUx3ntcA+sJK5I=
Subject key identifier:   D1:5C:FE:F8:5D:15:1B:B7:65:0D:3A:92:AB:85:AE:7A:48:FE:FD:2A
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E5E2E69DF
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f649c2ef-d35d-3869-82c2-f44b12f82522.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 199.164.210.0/24 maxlen: 24
    2: 199.164.210.0/26 maxlen: 26

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:5e:2e:69:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=6c7fead8-61e1-471b-a6b9-0eff49fa0a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:0c:0c:12:5f:71:86:15:52:2c:f4:b4:df:
                    af:7a:83:ab:ea:54:1e:d8:3a:b4:9d:fd:1e:7c:f3:
                    78:bb:5a:7e:73:47:04:06:55:9d:0d:dc:e4:f9:47:
                    ca:ca:67:29:79:db:92:a2:e7:91:ca:78:1c:c7:08:
                    f4:54:ce:5e:c9:b7:5b:56:7f:dc:67:57:18:31:bf:
                    b7:6a:e6:9c:df:48:2e:c9:cc:43:4f:99:64:31:de:
                    5f:06:38:27:b8:f0:6e:fa:67:66:0d:65:73:11:2b:
                    f0:3f:ff:2c:33:13:18:50:27:26:e3:e2:45:d9:da:
                    21:98:3c:a1:40:26:bc:e6:25:99:c8:7d:e3:0a:9c:
                    82:0d:6b:55:7b:31:f4:e4:12:b5:91:ae:01:1c:1f:
                    fe:81:3d:1a:39:2e:4b:ae:01:d8:49:7b:5d:07:e2:
                    c5:82:c1:e2:c0:81:3f:6a:64:83:0a:47:ef:e4:6d:
                    8f:c8:7d:ad:46:82:c7:68:67:2e:34:b5:0a:4a:b1:
                    ef:68:2e:f8:42:12:2f:2e:98:14:d7:cb:2b:63:0c:
                    9e:5a:6e:cf:4d:cf:93:53:81:6e:95:2b:3d:24:cb:
                    ad:0a:18:08:78:94:1d:02:a1:8f:ec:d5:ca:0f:d7:
                    a5:6c:58:37:11:ae:29:90:ec:7a:2a:76:30:0a:10:
                    ae:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D1:5C:FE:F8:5D:15:1B:B7:65:0D:3A:92:AB:85:AE:7A:48:FE:FD:2A
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f649c2ef-d35d-3869-82c2-f44b12f82522.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.164.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:9d:9a:df:5f:72:9f:1f:8f:7c:04:87:98:52:8b:3c:32:13:
         c6:6b:fb:5a:41:9c:a9:6b:e3:37:62:f5:e4:a1:0b:99:b0:7a:
         8d:45:30:3c:93:23:57:90:95:cc:ef:80:f8:27:a6:ce:d0:b1:
         73:f5:12:0b:31:fb:eb:39:a5:59:d0:29:f1:e0:69:20:04:6a:
         37:da:b4:d4:05:15:4a:8b:80:d1:f5:34:e9:08:ed:a6:50:25:
         57:e8:47:3e:a1:d0:aa:4d:d4:f1:93:fb:df:e8:0e:61:1d:28:
         83:f7:f2:10:70:2e:3a:35:cb:e7:17:09:3a:c3:9a:22:20:8d:
         8b:f4:cb:44:88:38:24:29:fc:4f:f6:f2:8f:39:11:85:86:15:
         82:fe:15:b5:cd:8c:fc:e2:af:3a:e5:1a:3e:d6:14:16:e8:8d:
         58:66:bf:b9:26:66:cd:9a:5f:a1:df:60:78:e1:aa:97:cc:66:
         49:e7:6d:09:b1:7d:05:e0:4b:87:0f:b8:af:4d:b5:f9:1a:74:
         e2:b0:64:91:31:ff:ca:85:20:ff:d8:89:02:40:03:1b:eb:18:
         99:ea:dd:77:0e:a4:8a:3d:20:33:ee:6c:bf:ed:86:e7:90:67:
         f6:ef:32:83:20:e7:4b:12:47:d7:5c:5e:2c:b2:a7:82:2b:78:
         c8:e2:0e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 19:20:19 2022 by rpki-client.