Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/

$ rpki-client -vvf f91a7bad-1747-3416-9d88-197cc26bb5a1.roa
File:                     f91a7bad-1747-3416-9d88-197cc26bb5a1.roa (download)
Hash identifier:          yUIl3dFyEH3NFrroNhHJixPEKkYEJEw3UrjjZ4rW9Qs=
Subject key identifier:   36:CB:37:26:CE:7E:F1:9E:62:6F:11:E8:85:7C:A8:13:81:1E:4F:FA
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F86C2698C
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f91a7bad-1747-3416-9d88-197cc26bb5a1.roa
ROA valid until:          Apr 10 04:00:00 2028 GMT
asID:                     2914
IP address blocks:
    1: 129.250.15.208/30 maxlen: 30

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:86:c2:69:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=3a9e88ba-f200-4df1-a372-fb7f8c934775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:87:60:cd:b1:b2:e5:2d:63:61:8b:26:9d:
                    65:65:15:87:10:d2:6f:ff:b5:74:f1:16:64:c4:66:
                    57:aa:7a:1c:5e:3b:a2:88:d3:2c:dd:d5:5f:4c:0d:
                    81:05:d5:bd:1a:df:6d:20:6d:4e:ca:24:ed:c9:85:
                    de:62:27:38:bc:84:e8:de:bd:2c:e3:4a:07:04:c5:
                    0d:fe:0c:51:3e:6c:45:c3:13:84:7b:d5:3c:83:3b:
                    87:6c:4d:ca:21:23:18:84:ba:0b:cc:9f:8c:09:59:
                    fe:cc:92:e6:3c:21:d7:bb:a3:53:a4:c2:82:fc:6f:
                    e8:00:b2:a9:bc:74:3c:43:e1:5f:b8:79:59:92:e6:
                    39:43:94:b7:e4:9c:4b:74:b8:c0:79:33:86:67:56:
                    98:42:51:12:6a:3f:d7:db:a6:e0:e0:65:a8:62:3d:
                    61:4d:ba:c8:0a:1f:80:79:75:4f:1e:95:94:99:d9:
                    d5:66:68:1a:19:51:88:6d:a3:f0:ea:40:9f:73:ad:
                    71:62:6b:78:bf:82:cd:31:61:17:73:f4:26:6c:1b:
                    c9:f6:25:dd:d2:dc:0e:32:f6:59:73:c6:0a:57:93:
                    19:b7:a6:84:7c:07:df:f9:34:25:68:32:bd:f2:c8:
                    74:96:47:28:04:f6:88:4f:f3:2d:90:b8:3e:e2:48:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                36:CB:37:26:CE:7E:F1:9E:62:6F:11:E8:85:7C:A8:13:81:1E:4F:FA
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/f91a7bad-1747-3416-9d88-197cc26bb5a1.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier: 
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.15.208/30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:c9:31:ae:6b:a5:a5:cb:dd:91:75:28:3b:ea:55:62:81:0a:
         d0:9b:fa:0f:2a:c4:32:33:07:5e:78:29:81:af:e2:1c:3a:2f:
         a3:b0:09:a5:de:63:c8:63:5a:04:fe:12:69:b3:bf:d3:a8:53:
         3f:2b:23:c9:a0:64:2d:2d:55:d8:5a:e4:79:18:c3:ac:2b:ed:
         c9:8c:33:4b:fb:59:41:66:71:bd:d5:c7:03:51:6b:f6:25:1f:
         63:d4:7e:08:ab:61:c4:43:75:1c:3a:29:67:20:e9:6d:03:d8:
         a1:95:80:93:28:c8:b7:b0:df:d6:a6:9e:6e:2a:40:a0:6d:26:
         13:8f:c4:9e:d1:ae:58:8d:73:9c:2d:1a:6d:3b:33:03:d6:75:
         0b:6e:a2:c3:fe:e5:64:14:52:19:0f:1e:61:ca:67:92:41:a2:
         76:dc:6b:7c:8c:6c:3b:07:c1:ed:bd:b5:b6:0b:2d:d6:88:1a:
         d3:b0:45:67:a6:e7:40:63:d1:21:70:53:70:1e:b8:c8:cd:1e:
         68:75:e2:cf:59:15:31:0f:52:33:3d:2f:f2:88:7d:41:44:40:
         15:96:c4:70:0f:7e:ab:a4:28:3f:26:dd:ad:3a:86:5e:8e:a0:
         a4:ad:bc:96:54:74:54:4b:43:87:2f:d7:cb:00:3b:e5:b7:ed:
         e6:3f:71:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 06:34:33 2022 by rpki-client.