Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf f778cde6-53b3-3b00-999b-c3c4987c127a.roa
File:                     f778cde6-53b3-3b00-999b-c3c4987c127a.roa (download)
Hash identifier:          n7Pre5KZQfNi1pwSzzgOEOE2KK5iTnzaXDV5riTaGW0=
Subject key identifier:   11:FB:56:34:4C:83:A1:2A:B5:35:E8:0D:C6:3F:B0:2C:83:0E:23:31
Certificate serial:       010D0C9F4328576D51CC73C042CFC16642414DF9
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f778cde6-53b3-3b00-999b-c3c4987c127a.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 128.241.112.0/20 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:41:4d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  4 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=bc6042d9-8232-4c8c-ab30-6142220bbfb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0d:f8:f0:56:06:85:c8:83:b2:c5:31:88:ec:
                    7e:46:16:52:7f:ff:61:04:87:2a:75:7a:86:39:7b:
                    17:32:cd:a8:be:31:9a:10:d5:5c:c9:29:ff:52:b4:
                    5c:fa:9d:b1:9a:7d:86:25:b6:a9:8c:cd:8b:ef:21:
                    e2:64:23:78:c5:09:8c:6b:45:e4:f8:ef:26:00:50:
                    c7:ea:fb:cc:4a:fb:09:2a:3a:47:85:d6:c2:7e:11:
                    78:4f:e7:ba:e2:60:d1:96:72:0e:87:6f:ee:bd:11:
                    90:ec:82:94:54:f1:63:1d:6e:c5:08:95:63:68:b2:
                    64:eb:86:5d:90:9b:bf:c0:6a:b2:ee:20:30:b7:16:
                    0a:cd:c9:7e:04:98:f3:f5:fe:5a:0a:8b:c3:b6:e4:
                    00:b0:18:52:e8:d8:4d:ec:2c:10:6b:05:1f:ec:d5:
                    5c:06:c3:06:f1:a0:eb:f1:5f:30:a9:b8:b5:76:4c:
                    6d:1f:92:f6:8a:c6:c9:11:2e:ed:ca:7f:5c:bc:1a:
                    2d:e8:5c:c0:7d:98:ba:ec:4d:88:bd:0f:f6:3a:2e:
                    5e:19:9e:52:10:fd:54:d3:f7:70:2b:d0:ae:df:0f:
                    26:eb:58:a3:0f:c6:79:35:74:c8:a0:e2:76:62:2a:
                    1c:c5:43:9c:29:88:2a:72:f2:e5:19:8e:de:f6:84:
                    a8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                11:FB:56:34:4C:83:A1:2A:B5:35:E8:0D:C6:3F:B0:2C:83:0E:23:31
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f778cde6-53b3-3b00-999b-c3c4987c127a.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.241.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:13:79:27:31:b4:e0:dc:23:ec:ef:e2:8d:2a:14:d1:56:d9:
         a8:a7:e6:2f:fc:b8:92:cc:23:be:7f:4d:57:1e:a7:12:07:3d:
         c7:96:fc:4c:aa:39:39:54:67:e5:b7:75:86:22:f2:56:68:04:
         e8:f1:50:c8:9e:09:fd:31:16:0e:93:38:1d:14:bf:e9:4e:2f:
         e1:bb:eb:d2:dc:41:76:56:f3:38:83:91:46:ac:ea:27:6a:d8:
         29:b5:3a:63:29:48:e4:dd:97:35:77:60:34:9d:7d:f1:97:14:
         ec:9d:b1:b0:ce:f0:7d:cf:0a:a7:71:34:ee:31:4e:74:6f:ea:
         6a:16:fc:ed:74:c2:10:e4:0d:e2:76:69:3b:4b:64:25:a5:a1:
         1e:c1:f6:e6:9c:e8:12:34:32:c5:61:80:de:be:3f:38:c2:ea:
         ab:8f:d9:73:77:75:ec:96:80:39:ef:e6:2a:b1:0a:e4:14:4d:
         bd:aa:ab:6d:1d:09:d5:16:86:a0:c8:0d:e2:f0:c4:dd:30:42:
         26:ba:76:1c:82:8d:02:ed:e5:6b:92:b1:d6:b1:00:9f:26:80:
         5a:45:0f:11:86:1a:d7:24:9c:c6:a0:cd:93:7b:da:3c:45:46:
         e3:c0:68:cb:22:5e:a5:22:f0:55:c9:2c:68:1f:7b:42:e6:04:
         6d:5a:68:2b
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZkJBTfkwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGI0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0ZDk3
ZjAeFw0xODEwMDQwNDAwMDBaFw0yODA0MTAwNDAwMDBaMC8xLTArBgNVBAMTJGJj
NjA0MmQ5LTgyMzItNGM4Yy1hYjMwLTYxNDIyMjBiYmZiMjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMsN+PBWBoXIg7LFMYjsfkYWUn//YQSHKnV6hjl7
FzLNqL4xmhDVXMkp/1K0XPqdsZp9hiW2qYzNi+8h4mQjeMUJjGtF5PjvJgBQx+r7
zEr7CSo6R4XWwn4ReE/nuuJg0ZZyDodv7r0RkOyClFTxYx1uxQiVY2iyZOuGXZCb
v8Bqsu4gMLcWCs3JfgSY8/X+WgqLw7bkALAYUujYTewsEGsFH+zVXAbDBvGg6/Ff
MKm4tXZMbR+S9orGyREu7cp/XLwaLehcwH2YuuxNiL0P9jouXhmeUhD9VNP3cCvQ
rt8PJutYow/GeTV0yKDidmIqHMVDnCmIKnLy5RmO3vaEqLsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQR+1Y0TIOhKrU16A3GP7Asgw4jMTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2Yy
M2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRkOTdmL2Y3NzhjZGU2LTUzYjMtM2Iw
MC05OTliLWMzYzQ5ODdjMTI3YS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUx
LWJlZjc2NzE0ZDk3Zi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5
N2YuY3JsMB8GA1UdIwQYMBaAFIyrXccywtjz5ZNhau64tSCy+RO6MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3
MTRkOTdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBIDxcDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEADhN5JzG04Nwj7O/ijSoU0VbZqKfmL/y4kswjvn9NVx6nEgc9x5b8TKo5OVRn
5bd1hiLyVmgE6PFQyJ4J/TEWDpM4HRS/6U4v4bvr0txBdlbzOIORRqzqJ2rYKbU6
YylI5N2XNXdgNJ198ZcU7J2xsM7wfc8Kp3E07jFOdG/qahb87XTCEOQN4nZpO0tk
JaWhHsH25pzoEjQyxWGA3r4/OMLqq4/Zc3d17JaAOe/mKrEK5BRNvaqrbR0J1RaG
oMgN4vDE3TBCJrp2HIKNAu3la5Kx1rEAnyaAWkUPEYYa1yScxqDNk3vaPEVG48Bo
yyJepSLwVcksaB97QuYEbVpoKw==
-----END CERTIFICATE-----
Generated at Fri Dec 2 07:09:47 2022 by rpki-client.