Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/c4f3724e-65f3-341c-b55a-a1f9dfecfaaf.roa
File:                     c4f3724e-65f3-341c-b55a-a1f9dfecfaaf.roa (download)
Hash identifier:          RwXKxSh7ZUSgymQEI/4YjbDIEhzrNj1xIi5AqxJSr9U=
Subject key identifier:   7F:AD:BD:CF:49:E5:5E:99:A9:8D:75:5D:24:1F:FF:C8:5F:DC:94:F8
Certificate issuer:       /CN=b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a
Certificate serial:       010D0C9F4328583CDDD6B00B3401C6F36C158A80
Authority key identifier: 17:C7:42:F1:4F:6E:98:39:C0:8E:99:BB:AB:53:4B:F0:27:8C:9F:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/c4f3724e-65f3-341c-b55a-a1f9dfecfaaf.roa
ROA valid until:          May 13 04:00:00 2024 GMT
asID:                     400295
IP address blocks:
    1: 174.136.249.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:dd:d6:b0:0b:34:01:c6:f3:6c:15:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a
        Validity
            Not Before: Dec 27 05:00:00 2021 GMT
            Not After : May 13 04:00:00 2024 GMT
        Subject: CN=e4df15a1-364f-4619-8f5d-5eb20cf68a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7d:f4:e9:04:9c:52:11:2b:41:51:e7:f5:5a:
                    63:77:71:93:b4:f8:f2:c8:02:11:dc:6a:fa:e8:be:
                    6d:dc:b6:90:7b:fc:1b:85:39:f6:40:05:3d:6c:ce:
                    32:34:55:ca:49:e9:c7:bf:81:00:08:7e:e2:6d:09:
                    db:c4:8a:03:f5:07:10:c3:77:c6:0f:57:57:03:90:
                    26:cf:ae:35:cc:7f:77:cf:f9:06:a6:81:0a:dd:62:
                    b8:49:f3:9a:8f:ed:65:f7:c9:3a:d4:77:c9:3b:19:
                    a3:69:fc:47:0d:e0:bd:77:96:1c:09:e6:b1:5f:11:
                    f3:86:d3:e9:a1:6c:95:f9:09:09:9d:49:f2:9b:bc:
                    a5:65:32:7c:87:49:02:ae:e5:c4:85:05:ea:38:cc:
                    05:84:09:09:ce:3b:fd:34:f7:15:e2:cc:2c:a2:e0:
                    94:f9:8f:c7:26:96:4b:20:0f:6b:da:84:e6:b6:17:
                    12:30:09:3b:1a:17:c1:cb:15:49:31:40:59:49:88:
                    80:de:07:00:2a:d1:e2:76:b5:9f:13:bc:1a:81:a2:
                    ab:7d:13:1a:01:c7:e3:22:6c:62:9a:7f:d1:0e:97:
                    32:fa:b9:b7:4f:f3:1a:8a:48:6e:de:42:71:4e:ea:
                    62:af:22:08:f4:32:60:54:9e:9f:9d:f1:80:64:cb:
                    c8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                7F:AD:BD:CF:49:E5:5E:99:A9:8D:75:5D:24:1F:FF:C8:5F:DC:94:F8
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/c4f3724e-65f3-341c-b55a-a1f9dfecfaaf.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.crl

            X509v3 Authority Key Identifier: 
                keyid:17:C7:42:F1:4F:6E:98:39:C0:8E:99:BB:AB:53:4B:F0:27:8C:9F:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4fbbf33-f4c5-4a0f-8198-f5ab79a69a6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ed:26:13:a1:74:e5:67:e6:c7:2c:ea:ff:90:3a:cf:cc:83:
         28:59:39:00:b0:6d:0c:9d:88:f7:81:91:85:31:22:7f:6d:d0:
         b4:ca:0d:64:59:ef:ff:9b:f9:e6:4b:d3:c3:2e:5a:37:ee:30:
         91:eb:0f:64:29:e0:1c:4d:44:2d:72:e8:0f:bd:0e:bc:cc:91:
         22:91:90:90:fe:36:98:5e:ce:77:2f:b6:11:f5:c8:01:91:84:
         9c:a2:4d:4c:ca:69:d1:67:40:63:a1:15:0c:43:4a:d8:83:10:
         30:7d:af:ab:96:52:45:6b:ec:d5:88:41:2a:a2:05:fc:30:ab:
         0e:a6:04:c2:87:3b:c1:b9:fd:f0:37:f3:7f:3d:95:1e:3a:9d:
         a5:22:53:2c:3d:b6:25:c6:c4:fd:2a:b4:b0:c7:89:e3:88:96:
         dc:c7:d7:38:af:e9:99:c0:f8:3e:2d:e2:95:a1:87:fa:ff:af:
         c5:18:24:f2:c4:91:bf:a2:d1:28:2f:16:bb:ee:c3:7b:f7:62:
         ab:19:70:0a:c6:8f:a6:7a:0e:e7:c7:3e:4c:57:89:42:5a:9d:
         1c:49:d6:10:98:fd:cd:7d:07:99:49:f9:09:62:c6:6d:b8:85:
         50:b5:bb:36:05:c4:bf:11:1b:98:c8:40:fb:95:57:c6:54:f4:
         9b:4b:af:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzd1rALNAHG82wVioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjRmYmJmMzMtZjRjNS00YTBmLTgxOTgtZjVhYjc5YTY5
YTZhMB4XDTIxMTIyNzA1MDAwMFoXDTI0MDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZTRkZjE1YTEtMzY0Zi00NjE5LThmNWQtNWViMjBjZjY4YTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX306QScUhErQVHn9Vpjd3GTtPjyyAIR3Gr6
6L5t3LaQe/wbhTn2QAU9bM4yNFXKSenHv4EACH7ibQnbxIoD9QcQw3fGD1dXA5Am
z641zH93z/kGpoEK3WK4SfOaj+1l98k61HfJOxmjafxHDeC9d5YcCeaxXxHzhtPp
oWyV+QkJnUnym7ylZTJ8h0kCruXEhQXqOMwFhAkJzjv9NPcV4swsouCU+Y/HJpZL
IA9r2oTmthcSMAk7GhfByxVJMUBZSYiA3gcAKtHidrWfE7wagaKrfRMaAcfjImxi
mn/RDpcy+rm3T/Maikhu3kJxTupiryII9DJgVJ6fnfGAZMvIfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH+tvc9J5V6ZqY11XSQf/8hf3JT4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGZi
YmYzMy1mNGM1LTRhMGYtODE5OC1mNWFiNzlhNjlhNmEvYzRmMzcyNGUtNjVmMy0z
NDFjLWI1NWEtYTFmOWRmZWNmYWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRmYmJmMzMtZjRjNS00YTBmLTgx
OTgtZjVhYjc5YTY5YTZhL2I0ZmJiZjMzLWY0YzUtNGEwZi04MTk4LWY1YWI3OWE2
OWE2YS5jcmwwHwYDVR0jBBgwFoAUF8dC8U9umDnAjpm7q1NL8CeMn1AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGZiYmYzMy1mNGM1LTRhMGYtODE5OC1mNWFi
NzlhNjlhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroj5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGftJhOhdOVn5scs6v+QOs/MgyhZOQCwbQydiPeBkYUxIn9t0LTKDWRZ
7/+b+eZL08MuWjfuMJHrD2Qp4BxNRC1y6A+9DrzMkSKRkJD+NphezncvthH1yAGR
hJyiTUzKadFnQGOhFQxDStiDEDB9r6uWUkVr7NWIQSqiBfwwqw6mBMKHO8G5/fA3
8389lR46naUiUyw9tiXGxP0qtLDHieOIltzH1ziv6ZnA+D4t4pWhh/r/r8UYJPLE
kb+i0SgvFrvuw3v3YqsZcArGj6Z6DufHPkxXiUJanRxJ1hCY/c19B5lJ+Qlixm24
hVC1uzYFxL8RG5jIQPuVV8ZU9JtLrwE=
-----END CERTIFICATE-----
Generated at Wed Dec 7 03:08:12 2022 by rpki-client.