Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/bdc1790a-cecc-3ae3-863f-105e516b77ef.roa
File:                     bdc1790a-cecc-3ae3-863f-105e516b77ef.roa (download)
Hash identifier:          gAfuc15jDL5vdg/clPxmRBnL6S6KwYnjiwujuRn2Qu8=
Subject key identifier:   83:28:38:64:5B:AF:B4:F2:EC:74:8D:2B:AE:95:AE:6E:B1:32:1B:52
Certificate issuer:       /CN=421cece2-8c18-41dd-a133-74ed29168835
Certificate serial:       010D0C9F4328583BFB4F71CAD61481E3DEABE400
Authority key identifier: 07:89:67:D2:68:00:78:72:14:E0:75:D6:C2:41:12:72:10:3E:0D:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/bdc1790a-cecc-3ae3-863f-105e516b77ef.roa
ROA valid until:          Feb 22 05:00:00 2024 GMT
asID:                     400235
IP address blocks:
    1: 2602:80c:f000::/44 maxlen: 64

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:fb:4f:71:ca:d6:14:81:e3:de:ab:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=421cece2-8c18-41dd-a133-74ed29168835
        Validity
            Not Before: Nov 19 05:00:00 2021 GMT
            Not After : Feb 22 05:00:00 2024 GMT
        Subject: CN=c6fc81cb-f232-41a1-945e-bcafa2ed46fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:db:bd:24:64:1a:3e:11:6d:d3:0f:5f:39:54:
                    ef:d1:7b:88:04:cc:1c:19:2b:f2:5a:18:ff:ba:a7:
                    bf:53:d7:06:82:d0:b2:f5:72:77:7e:ed:52:2f:43:
                    ee:a6:4d:46:23:45:0d:fb:22:1a:e3:7d:0f:68:c1:
                    d0:0b:96:a9:2e:d5:82:98:08:ae:cd:25:d1:db:38:
                    d1:34:b4:0c:13:f2:e9:f6:ac:a1:41:38:ef:a4:68:
                    c7:89:c8:f0:1b:a3:bc:67:0c:75:b0:f0:3e:dd:0b:
                    26:ac:28:2d:2a:f4:45:13:5e:ba:48:1a:5a:0b:3f:
                    d7:d3:c1:f5:29:8d:ef:4f:ab:4b:90:95:22:97:83:
                    23:4d:05:ee:65:c5:28:2c:d0:d3:c2:c4:d3:9f:16:
                    01:60:9a:d7:8e:ab:f6:ca:1c:a9:fb:cf:2c:a4:e5:
                    bc:54:48:37:41:8b:00:0b:06:c7:3d:3c:88:89:df:
                    89:8d:33:5c:3e:bb:d0:17:b9:b9:fa:0a:e2:79:a6:
                    05:ed:d7:c4:29:85:6d:43:a7:36:19:0a:63:c1:01:
                    06:79:a7:10:62:32:77:b1:f8:f9:3d:6a:bc:e5:02:
                    de:90:4f:b4:b9:90:a4:21:d2:a8:70:22:b7:2d:06:
                    08:34:d8:d1:3d:40:2d:40:9d:1c:c8:c8:d3:c2:6a:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                83:28:38:64:5B:AF:B4:F2:EC:74:8D:2B:AE:95:AE:6E:B1:32:1B:52
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/bdc1790a-cecc-3ae3-863f-105e516b77ef.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835/421cece2-8c18-41dd-a133-74ed29168835.crl

            X509v3 Authority Key Identifier: 
                keyid:07:89:67:D2:68:00:78:72:14:E0:75:D6:C2:41:12:72:10:3E:0D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/421cece2-8c18-41dd-a133-74ed29168835.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:f000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:28:af:a2:92:9d:74:5e:8c:44:7b:e3:3d:c4:59:09:f1:88:
         12:45:71:34:53:76:e0:7f:8d:bd:f8:5e:72:a9:03:b2:b8:e7:
         eb:bd:04:4c:f7:8d:17:06:73:66:f2:9b:d6:33:c4:3d:f1:7f:
         14:45:cf:c4:a0:f8:2e:61:0a:f4:19:c8:d7:5b:cb:26:00:3f:
         11:c4:05:8d:ee:04:f0:f1:cb:31:07:cc:0c:08:ae:2d:59:88:
         c7:d1:41:c5:cd:8f:44:24:cd:92:e8:20:b2:ff:92:99:32:83:
         f4:0a:af:45:f5:0e:5a:65:39:94:d1:7a:cb:7a:32:b7:96:c8:
         d6:60:af:a7:68:76:05:4e:68:55:d5:b8:8c:cc:0a:27:dc:94:
         77:5f:39:82:de:d4:39:63:96:41:69:32:5c:de:63:1a:1f:e3:
         b6:01:fe:c7:01:76:f0:ba:2f:32:67:23:c8:70:a7:d7:84:d6:
         2b:f3:67:e1:9c:cc:6e:4f:2a:87:fc:5a:60:da:c4:ed:68:14:
         6c:70:c6:e1:d7:2c:03:7b:a7:8e:7d:dc:91:8e:fa:7a:9a:1f:
         f4:7b:4e:35:30:6a:74:1e:8e:4e:c3:3f:95:e4:ab:c8:85:8d:
         4c:c5:0d:4c:94:51:85:91:bc:52:84:29:9c:84:f9:31:85:29:
         07:4d:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 03:07:59 2022 by rpki-client.