Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/6d77179e-7a38-37d7-a8b9-33c836a847b7.roa
File:                     6d77179e-7a38-37d7-a8b9-33c836a847b7.roa (download)
Hash identifier:          6ADa4yG7XdqUEiBsWdByQ0g6Kf11wbBNytQS7/CYF4Q=
Subject key identifier:   A9:36:1A:C4:93:E4:5E:15:45:32:E5:22:F0:39:C9:7E:45:0B:51:FE
Certificate issuer:       /CN=a5e2d89d-6269-4405-9578-836517825b32
Certificate serial:       010D0C9F4328583BA444C805A6F01FD459EF8700
Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/6d77179e-7a38-37d7-a8b9-33c836a847b7.roa
ROA valid until:          Jan 22 05:00:00 2024 GMT
asID:                     1239
IP address blocks:
    1: 67.223.112.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:a4:44:c8:05:a6:f0:1f:d4:59:ef:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32
        Validity
            Not Before: Oct 19 04:00:00 2021 GMT
            Not After : Jan 22 05:00:00 2024 GMT
        Subject: CN=083af925-bb46-4dac-aa47-35aa90381ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:6d:93:ed:f8:34:3d:79:fe:4a:38:92:a1:
                    79:b6:0a:98:23:81:30:04:f3:27:fa:f2:9c:37:e1:
                    53:ce:5d:8a:d5:bf:7b:66:8f:b0:0b:76:66:c3:6e:
                    b5:1e:e7:ca:8b:73:df:b5:6d:bc:89:8a:3f:3b:65:
                    2e:25:39:f3:a4:2c:23:b3:b1:c5:6d:ff:fc:91:37:
                    8e:87:1e:4d:b3:a5:b2:24:1a:eb:f2:62:d3:27:15:
                    bc:0f:be:20:8a:36:60:46:04:3c:7a:40:a9:b8:5b:
                    9f:c2:78:fa:09:de:84:4d:5f:8b:82:8a:ff:7e:ec:
                    cb:6d:a6:32:7f:f4:bc:87:05:d0:f2:29:33:07:98:
                    9f:f9:d8:71:01:ed:fa:f4:8c:31:89:cd:ac:a6:29:
                    01:39:31:73:e4:f9:3d:6d:ca:7b:d4:00:9a:69:b7:
                    0e:4b:87:03:30:a8:da:33:96:4f:a0:1f:44:b7:b3:
                    a2:bc:08:d9:38:a3:1e:f7:28:30:ae:69:c6:f3:29:
                    29:e1:67:24:17:ce:8a:8f:95:8a:70:f5:b9:8a:8f:
                    8d:7b:db:85:30:17:fc:d2:ac:8d:e5:e0:15:11:45:
                    5d:63:c6:5b:c2:b7:04:24:31:8a:47:e8:71:90:4a:
                    15:57:e0:f5:5b:7c:5a:d8:2c:f2:93:d8:c2:70:b2:
                    bd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A9:36:1A:C4:93:E4:5E:15:45:32:E5:22:F0:39:C9:7E:45:0B:51:FE
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/6d77179e-7a38-37d7-a8b9-33c836a847b7.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl

            X509v3 Authority Key Identifier: 
                keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.223.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:3c:78:22:ca:00:b7:9c:03:84:01:97:98:b8:81:50:6a:41:
         a8:49:e1:c8:90:1e:16:95:b5:8a:24:a2:28:5d:ef:8c:53:2c:
         28:f3:e4:34:8e:01:d1:7e:c3:16:8d:05:12:00:44:75:86:33:
         8f:57:4c:4c:d2:93:5e:1a:37:88:82:85:8d:64:a2:42:67:a7:
         fe:f9:09:38:f9:24:e5:8f:e5:2d:41:44:e1:cf:0f:e3:26:7b:
         07:93:56:94:da:e3:fe:9b:b0:55:95:19:52:19:84:0e:52:68:
         c2:62:ba:e4:07:f6:af:9d:e5:d7:b9:25:63:e0:8b:7c:0e:04:
         a7:61:6a:fb:6c:48:6e:ec:20:fa:9f:60:9c:31:fb:9a:75:44:
         13:6a:a6:44:02:15:f4:9a:58:e5:7b:fd:83:af:e6:40:94:32:
         6b:56:13:db:a4:26:3e:5c:56:61:2d:0a:28:73:a2:e1:44:35:
         be:e7:78:59:75:b3:1b:68:e8:00:15:17:ee:3f:8c:3b:50:90:
         c1:f3:a5:49:44:58:ee:79:e4:14:e9:59:b3:7e:31:02:75:3b:
         cc:99:3c:af:17:73:b3:52:17:80:68:30:17:60:c7:79:7c:5f:
         6a:4d:b0:a4:b3:b6:dc:e6:f6:1d:31:d8:e1:15:6a:2e:4b:00:
         ac:6f:ed:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 10:27:25 2022 by rpki-client.