Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f78918-0e29-30b9-b217-8c44605d97e2.roa
File:                     35f78918-0e29-30b9-b217-8c44605d97e2.roa (download)
Hash identifier:          3PD1DBIS8mddkHOiAGALt6PG6XQ97QncmMU00GAKpug=
Subject key identifier:   47:C5:DC:78:2C:D4:D6:E1:3D:8C:14:94:39:78:89:44:0A:0B:70:39
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328583DC93CACF5D98CB2024CD57980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f78918-0e29-30b9-b217-8c44605d97e2.roa
ROA valid until:          May 04 04:00:00 2027 GMT
asID:                     400258
IP address blocks:
    1: 70.186.18.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3c:ac:f5:d9:8c:b2:02:4c:d5:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  4 04:00:00 2027 GMT
        Subject: CN=169f5052-3fac-41a8-a9b3-05d24377be6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:c6:a0:be:bd:ba:17:20:37:63:83:26:1e:
                    04:ec:79:9b:a4:37:58:4d:67:30:c1:0b:1e:60:61:
                    97:fa:fe:bb:52:37:12:55:93:a6:3c:41:d6:ae:46:
                    50:5c:2e:8c:e6:3f:62:90:1c:71:34:85:a3:74:20:
                    ac:12:88:ec:0d:a6:e5:7d:d5:39:8f:c8:a8:43:e0:
                    e4:d6:a7:e7:81:86:92:7d:e8:43:f6:b2:45:2c:0c:
                    12:62:4a:04:c7:ac:d4:8a:29:f3:2c:ba:da:5e:2c:
                    2a:08:3e:44:83:bd:1e:59:93:0b:7f:11:e5:ea:5a:
                    74:8f:39:46:ef:ca:af:50:00:36:35:e2:58:8b:4c:
                    75:b7:91:36:1b:12:ab:66:8d:6c:ca:81:67:d0:97:
                    be:0f:6b:5a:54:72:43:d1:df:88:46:e8:20:07:79:
                    c0:f7:f7:bf:f0:eb:60:ef:f9:d6:3e:b5:24:de:3c:
                    83:65:cf:47:a3:49:4b:18:56:c3:7b:f3:88:f9:eb:
                    e4:ee:5b:5a:e7:1d:ac:de:48:2d:a3:08:45:c0:8a:
                    d4:7f:e1:f8:95:4e:97:22:b1:bd:1e:a2:90:b0:1d:
                    d4:2a:2e:05:09:47:fc:27:9e:83:81:5d:38:a1:f7:
                    4a:aa:1f:9c:9a:85:fe:9c:48:b4:75:b5:80:96:74:
                    29:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                47:C5:DC:78:2C:D4:D6:E1:3D:8C:14:94:39:78:89:44:0A:0B:70:39
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/35f78918-0e29-30b9-b217-8c44605d97e2.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier: 
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.186.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:74:6f:fe:86:c3:fc:bf:a8:b2:dd:a1:3f:85:3a:b7:61:c9:
         5d:24:ba:d6:56:ac:1d:18:45:bc:8b:41:32:f1:ac:0d:2f:55:
         95:65:0e:78:1e:f4:ae:b3:23:ab:40:5b:17:1a:e8:43:93:54:
         d0:72:81:ec:43:6c:c3:43:47:87:78:45:9c:ee:26:82:ad:91:
         7a:d5:93:fd:76:58:b9:ce:94:ea:e0:ce:3a:7e:1e:f9:12:2b:
         1d:e9:5e:27:1d:36:ae:89:43:86:ed:d2:7e:70:e0:27:36:41:
         87:57:80:d9:5e:84:64:dd:0e:26:da:b3:8a:a8:f7:c6:ab:70:
         f9:bb:35:63:2c:fe:0d:9f:1d:8c:a0:48:87:9b:8d:42:79:f3:
         55:df:39:ed:4e:83:f3:11:2d:3d:db:6d:93:f1:e7:e5:db:03:
         59:b3:99:74:c0:f2:0b:b9:ed:2d:6a:a7:78:2e:f1:08:d5:92:
         b3:84:c4:ae:2b:4e:f2:b4:77:6a:67:f4:7b:93:7e:0e:d8:3a:
         2e:95:56:38:9b:98:54:62:f3:94:23:33:85:1c:fb:ee:ee:de:
         a1:60:60:09:9a:f4:f1:fa:c3:7c:ce:3f:cb:e6:73:92:ee:c5:
         82:a7:f4:28:c1:6d:13:16:0e:07:34:ac:8a:9e:02:16:a5:7b:
         f3:36:aa:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 03:08:06 2022 by rpki-client.