Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf f806a993-f067-3d1e-94cd-7a6d56f88e6f.roa
File:                     f806a993-f067-3d1e-94cd-7a6d56f88e6f.roa (download)
Hash identifier:          Vl+LI6e+e1JyoaB+4LvspSfY66M0aZrrprTH4w5naCw=
Subject key identifier:   42:B6:19:6C:73:9B:E0:A1:86:C3:C2:EB:11:00:42:20:C7:D3:7D:89
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F82127BAA
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f806a993-f067-3d1e-94cd-7a6d56f88e6f.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 207.55.128.0/18 maxlen: 18

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:82:12:7b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=fc803088-a867-40d0-9226-74862dd9bb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:24:f6:fa:63:1d:93:33:56:5e:93:5a:5a:8e:
                    0e:08:dc:90:58:86:0a:4c:c5:87:18:da:21:e6:16:
                    26:2c:c1:99:2d:3c:42:4c:fc:dc:54:34:2b:52:a1:
                    a3:e4:ce:be:6c:8a:dd:50:0e:e5:7a:ca:7d:3e:09:
                    d8:fa:d7:79:83:33:b2:0c:b2:50:9e:af:9e:32:40:
                    63:c2:d9:b3:fe:d0:81:96:d5:69:30:89:19:e9:85:
                    1a:bc:8d:70:0a:99:e1:33:52:86:69:18:f7:07:b7:
                    19:8a:ff:8b:1f:c6:31:af:9f:55:09:54:73:40:12:
                    bd:d2:ea:82:8a:6e:cc:3a:5a:6b:56:e5:ef:66:77:
                    38:44:9b:a8:53:f1:4e:58:d2:7d:f0:6a:4b:a6:91:
                    15:fe:2d:7c:ea:49:99:92:b0:dc:94:2b:c0:47:8a:
                    70:1f:7b:b2:7c:ce:c0:f9:a9:df:8b:0a:30:01:0e:
                    a5:02:2b:39:31:13:c2:5f:3e:69:31:37:3b:98:be:
                    82:6b:de:a7:c7:ac:ae:68:6c:47:1c:4c:88:dd:e4:
                    a8:3d:5c:dd:b5:c1:51:f4:4d:d2:1c:2b:57:84:88:
                    be:ff:8a:a9:4b:07:55:06:bd:9c:c7:34:7f:0a:c2:
                    7d:d2:95:64:a1:a0:4c:7f:d1:ce:0d:6d:7e:37:32:
                    de:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                42:B6:19:6C:73:9B:E0:A1:86:C3:C2:EB:11:00:42:20:C7:D3:7D:89
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f806a993-f067-3d1e-94cd-7a6d56f88e6f.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.55.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:6c:df:d5:2b:ef:0a:16:b4:e9:17:2d:47:aa:08:b1:9b:42:
         62:e7:5b:77:32:86:bd:b9:0a:5d:46:13:dd:74:e4:9d:15:b1:
         9f:a5:f9:45:c8:8f:f4:d3:b5:a4:09:8e:42:9a:38:3d:e1:cb:
         71:f6:ad:ef:b9:41:2b:b6:ef:d4:3d:f6:0e:15:c6:35:bd:88:
         c4:b4:cb:70:6d:43:f5:89:cb:1b:ac:b4:ee:a9:ba:10:65:7d:
         c0:25:41:b5:3d:9f:7b:44:f9:27:98:cd:94:f5:0d:b9:83:65:
         4d:66:ee:7e:07:48:e6:0b:f0:27:99:10:34:6b:ec:f2:1a:d8:
         cc:9a:b3:08:cb:39:ae:97:9d:fa:e9:84:4e:b7:5e:b2:7f:56:
         9f:8f:3d:8e:99:b8:ec:01:86:10:12:9d:10:85:76:d5:2b:5b:
         ce:7f:cd:43:97:0a:0c:90:9b:f8:9d:b3:ff:b3:5d:db:30:6b:
         85:35:c8:37:e4:20:a1:39:37:ea:12:48:ab:df:f0:63:c9:22:
         78:7c:f1:af:01:40:2d:9d:c5:9c:e6:bc:d3:f5:fa:b5:76:5c:
         ab:9c:d6:9e:67:87:4d:c0:58:3c:1c:78:b2:7e:21:a7:8f:1e:
         e8:a7:e2:12:57:1c:3d:1e:ea:71:ba:f5:c8:ac:a0:d7:01:1d:
         8e:af:88:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:34:28 2022 by rpki-client.