Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2555be96-5aae-3d9f-821c-ec6c2e1be1c3.roa
File:                     2555be96-5aae-3d9f-821c-ec6c2e1be1c3.roa (download)
Hash identifier:          or5/RwCp4XO5fmqXEr7XNVQgu+LRrRP7e9VEg9SD6BM=
Subject key identifier:   AF:42:7C:F5:63:48:1C:A9:0C:C6:73:2F:6A:76:74:9E:0B:3A:09:07
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DC93CB01347DE69AA1D155500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2555be96-5aae-3d9f-821c-ec6c2e1be1c3.roa
ROA valid until:          May 04 04:00:00 2027 GMT
asID:                     400258
IP address blocks:
    1: 70.186.19.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3c:b0:13:47:de:69:aa:1d:15:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  4 04:00:00 2027 GMT
        Subject: CN=0d23dd79-c2a4-4f16-9728-48eae48d5ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:8e:04:5c:06:16:55:05:d8:63:ca:e3:af:
                    35:2c:27:0d:05:26:02:b8:f8:1a:c0:04:86:05:57:
                    bb:ab:c1:16:c0:22:1d:b0:09:14:9b:62:35:46:e4:
                    48:33:7e:e5:92:a8:ca:b3:3f:8d:59:30:bd:39:93:
                    1d:75:1f:2b:e4:80:77:5f:a5:08:09:9b:97:6c:c2:
                    b3:fc:46:90:9f:17:57:a6:c9:a0:24:72:25:f2:e9:
                    49:5e:de:b3:3a:d6:c4:83:8c:77:58:c7:0c:c8:ca:
                    bf:49:e1:76:3d:2a:65:21:67:bb:4c:13:47:70:9e:
                    38:b1:c3:4b:3c:85:a8:37:ba:72:97:fb:e3:b9:22:
                    1e:41:63:9f:27:a1:11:17:aa:97:77:0e:58:dd:30:
                    3c:10:d8:05:41:44:b8:68:76:d2:c6:41:2f:45:91:
                    5b:4b:23:48:53:25:d1:be:43:ee:1a:61:c7:dd:62:
                    f6:3e:11:fd:c5:fc:ce:1d:d9:07:e1:ef:ee:9f:4a:
                    7d:eb:c6:b4:70:7c:39:15:9f:28:d7:a8:a8:ee:6c:
                    21:98:6d:cb:29:44:f7:e0:1c:90:58:b4:5c:cb:8c:
                    6d:8e:41:b6:2a:15:42:a9:d7:d3:70:1a:a9:14:79:
                    14:fd:2b:d9:18:17:58:b3:70:bc:f1:4a:a0:19:33:
                    38:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AF:42:7C:F5:63:48:1C:A9:0C:C6:73:2F:6A:76:74:9E:0B:3A:09:07
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2555be96-5aae-3d9f-821c-ec6c2e1be1c3.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier: 
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.186.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0f:b0:3e:5b:81:6c:01:17:16:b4:92:72:e5:14:28:32:c0:
         fb:cc:25:4f:10:75:f1:86:95:85:21:2b:8d:26:ba:c5:35:94:
         96:ae:c4:b8:bb:5e:e7:aa:7f:18:86:20:76:a6:46:46:04:46:
         47:1a:4c:91:20:d6:00:28:80:5d:da:25:5f:47:3a:b2:81:95:
         c2:7d:a6:2f:2c:ab:60:f3:a5:3a:1a:dc:3c:c4:f9:30:69:a6:
         d4:35:6a:a0:df:15:92:fc:5b:20:13:b2:f4:ab:bd:eb:0d:2b:
         c0:40:84:a4:be:27:31:38:bc:24:8c:b8:c8:61:7a:53:54:cb:
         a0:58:43:dd:fa:a0:9b:9c:79:7e:2f:99:b9:fd:2f:40:60:8a:
         c6:aa:56:cb:4d:62:c4:1c:98:d4:fb:8c:79:6c:66:e2:9c:d4:
         cb:1f:85:a2:e4:45:70:25:83:05:15:61:ee:bc:1a:dc:17:46:
         5d:d1:d1:e4:40:c5:40:e0:a1:d3:d1:85:5b:78:21:f8:4b:fb:
         93:70:85:24:aa:9b:0f:5b:a7:2f:8e:c6:83:aa:3b:8b:61:f4:
         e2:0b:cd:bd:08:fd:b1:91:36:9e:49:17:6c:02:17:6b:d1:94:
         54:97:31:19:a2:74:42:6a:9e:8c:da:60:24:bd:70:0a:18:12:
         28:42:29:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 15:09:49 2022 by rpki-client.