Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa
File:                     925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa (download)
Hash identifier:          kzfBT1aXPH/zuZOfIsCoqJasHVWIJy3WzhsE9iVlxOA=
Subject key identifier:   36:01:EC:89:3C:65:4D:94:66:B3:3A:77:0D:F8:4B:04:CD:2F:49:07
Certificate issuer:       /CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f
Certificate serial:       010D0C9F4328583D8AE84AB6EF2D557D27501A00
Authority key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa
ROA valid until:          Jul 14 04:00:00 2024 GMT
asID:                     400427
IP address blocks:
    1: 206.225.0.0/22 maxlen: 24
    2: 2606:ad40::/32 maxlen: 56

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8a:e8:4a:b6:ef:2d:55:7d:27:50:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f
        Validity
            Not Before: Apr 11 04:00:00 2022 GMT
            Not After : Jul 14 04:00:00 2024 GMT
        Subject: CN=7fe08e86-8fe2-4a1d-bdb8-22c4ba981635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:50:72:f4:5d:19:52:d0:7d:5c:73:82:9a:71:
                    57:4b:f4:44:08:82:17:41:2c:a7:7d:f4:58:25:62:
                    61:f9:94:5c:31:dd:14:c5:25:e6:24:39:c7:66:52:
                    b7:82:3f:fd:2f:9d:92:e5:9e:ba:a2:38:57:e3:f7:
                    9b:07:fd:f3:bd:fe:b6:0d:ce:b3:e8:91:8e:0d:d4:
                    df:9d:c3:24:cd:90:cc:9c:49:e3:49:74:9d:a7:fe:
                    79:e2:ce:a2:f5:77:16:d3:0e:52:cb:36:be:e5:b1:
                    7c:77:6a:ea:ac:96:bd:0a:8f:d5:6b:b2:6c:1a:12:
                    de:51:7e:1d:32:63:da:c7:f3:79:2a:4f:66:a5:39:
                    e6:ce:e8:ee:35:61:b3:d6:ae:4d:a8:01:64:e3:e4:
                    76:28:d8:35:13:32:1b:40:1c:9a:90:46:2e:7f:34:
                    4d:1d:2d:fe:68:2d:91:29:ba:41:01:8a:43:9f:49:
                    2f:45:c3:a6:86:f6:13:4b:a6:a0:88:17:41:e6:26:
                    b7:40:fc:f2:69:17:c5:0a:da:9c:dc:d6:cf:9f:5a:
                    0e:85:fa:42:ed:57:18:79:fa:2a:0a:1c:b2:98:2b:
                    00:19:fc:c6:66:92:80:33:42:02:1f:83:27:bc:ab:
                    7f:24:96:a1:0b:16:5f:00:7e:0f:e1:7f:03:a2:2a:
                    5e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                36:01:EC:89:3C:65:4D:94:66:B3:3A:77:0D:F8:4B:04:CD:2F:49:07
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/925c8c6e-7a66-3a2c-940d-56bd56c70f21.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl

            X509v3 Authority Key Identifier: 
                keyid:E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.0.0/22
                IPv6:
                  2606:ad40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b5:13:ac:1b:ab:b5:50:4f:69:9a:f4:ff:78:c3:58:d9:d0:
         ec:56:79:0a:fb:20:7a:3a:a6:87:85:fa:f9:14:ae:5e:f4:6a:
         24:b6:6c:45:55:50:bd:7e:54:d1:96:e5:02:2b:d8:82:40:f2:
         77:62:0c:6c:e6:de:d9:20:7b:13:7f:a7:ee:f5:49:eb:47:76:
         94:9e:66:cc:c0:a2:94:ce:8b:84:55:47:4d:0e:4e:fe:f1:be:
         f2:60:c7:cb:23:a4:6c:3e:ea:54:28:41:89:4c:63:93:1e:0e:
         d9:94:0c:7a:6b:2a:b2:dc:91:66:77:16:ca:26:6f:ed:70:6b:
         ed:a0:82:0a:c9:dc:f9:d1:e4:c5:22:ee:2a:88:a5:a2:33:c8:
         a6:5e:2f:1f:20:18:b9:37:7b:67:f4:6c:b2:37:97:b1:49:77:
         99:77:22:68:87:fe:7f:89:a3:76:51:2f:e1:61:3c:f2:33:f7:
         86:4b:6b:86:c1:e4:a0:b9:8a:4a:b8:72:b9:e2:a4:c6:04:50:
         bb:f1:92:aa:3e:b4:24:0a:28:4b:c4:21:21:f8:bb:0b:c0:51:
         6d:fc:d1:42:4b:e9:c3:c6:c9:bd:85:40:25:70:d4:27:31:8f:
         fd:72:5b:bc:2e:fe:ac:2f:3b:3c:d8:fe:b4:46:a3:fd:7e:65:
         ed:c9:0b:60
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWD2K6Eq27y1VfSdQGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1
NzhmMB4XDTIyMDQxMTA0MDAwMFoXDTI0MDcxNDA0MDAwMFowLzEtMCsGA1UEAxMk
N2ZlMDhlODYtOGZlMi00YTFkLWJkYjgtMjJjNGJhOTgxNjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglBy9F0ZUtB9XHOCmnFXS/RECIIXQSynffRY
JWJh+ZRcMd0UxSXmJDnHZlK3gj/9L52S5Z66ojhX4/ebB/3zvf62Dc6z6JGODdTf
ncMkzZDMnEnjSXSdp/554s6i9XcW0w5Syza+5bF8d2rqrJa9Co/Va7JsGhLeUX4d
MmPax/N5Kk9mpTnmzujuNWGz1q5NqAFk4+R2KNg1EzIbQByakEYufzRNHS3+aC2R
KbpBAYpDn0kvRcOmhvYTS6agiBdB5ia3QPzyaRfFCtqc3NbPn1oOhfpC7VcYefoq
ChyymCsAGfzGZpKAM0ICH4MnvKt/JJahCxZfAH4P4X8DoipevQIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFDYB7Ik8ZU2UZrM6dw34SwTNL0kHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3
YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvOTI1YzhjNmUtN2E2Ni0z
YTJjLTk0MGQtNTZiZDU2YzcwZjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmU2N2EzNzQtZGJkMy00YmZhLWI4
MmMtNmRiZmQ2NGU1NzhmLzJlNjdhMzc0LWRiZDMtNGJmYS1iODJjLTZkYmZkNjRl
NTc4Zi5jcmwwHwYDVR0jBBgwFoAU4EaVkSgTL9WOY7iPKkNSxMOhOY4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJm
ZDY0ZTU3OGYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCzuEAMA0E
AgACMAcDBQAmBq1AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBABK1E6wbq7VQT2ma9P94w1jZ0OxWeQr7IHo6
poeF+vkUrl70aiS2bEVVUL1+VNGW5QIr2IJA8ndiDGzm3tkgexN/p+71SetHdpSe
ZszAopTOi4RVR00OTv7xvvJgx8sjpGw+6lQoQYlMY5MeDtmUDHprKrLckWZ3Fsom
b+1wa+2gggrJ3PnR5MUi7iqIpaIzyKZeLx8gGLk3e2f0bLI3l7FJd5l3ImiH/n+J
o3ZRL+FhPPIz94ZLa4bB5KC5ikq4crnipMYEULvxkqo+tCQKKEvEISH4uwvAUW38
0UJL6cPGyb2FQCVw1Ccxj/1yW7wu/qwvOzzY/rRGo/1+Ze3JC2A=
-----END CERTIFICATE-----
Generated at Wed Dec 7 02:30:46 2022 by rpki-client.