Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa
File:                     4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (download)
Hash identifier:          xO0Qkm5d0aObHJ0rO0V9sFF44wkvWZSyLgZuMFELcbk=
Subject key identifier:   E6:50:D4:FC:4B:00:3F:63:D3:4D:99:1B:E2:B9:28:9C:01:77:23:E6
Certificate issuer:       /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1
Certificate serial:       010D0C9F4328583CB9644070B20C041C20876E40
Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa
ROA valid until:          Jan 26 05:00:00 2032 GMT
asID:                     400287
IP address blocks:
    1: 104.255.96.0/21 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:b9:64:40:70:b2:0c:04:1c:20:87:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1
        Validity
            Not Before: Jan 26 05:00:00 2022 GMT
            Not After : Jan 26 05:00:00 2032 GMT
        Subject: CN=579d3712-cfa7-4d2a-8044-52e5676cd20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:ce:9f:47:d5:ce:af:57:b1:44:87:2d:c9:
                    3a:f8:34:8d:1b:dd:00:23:28:2f:1e:3b:e4:63:46:
                    0b:64:b0:56:6c:d9:ef:e1:78:bd:ec:e2:bc:93:7b:
                    3f:2f:f7:ee:a7:61:1e:44:35:fd:ed:f9:54:28:a5:
                    94:03:4e:f4:f0:a2:38:6e:be:2d:af:1e:4a:4a:ba:
                    9a:51:9b:a3:d6:c1:15:1d:b4:43:09:00:20:aa:99:
                    ee:66:a7:56:bd:aa:1e:8d:02:b8:65:2a:34:c1:71:
                    54:66:c2:f9:10:5d:d3:c7:f9:a1:21:15:91:64:61:
                    ac:d6:62:50:51:db:e0:37:b1:7f:ee:e5:d1:af:51:
                    75:c2:95:ba:f1:09:b8:02:f4:1f:a0:6b:5a:5f:9d:
                    84:1a:a6:11:e4:e9:3a:5a:03:f7:a7:3d:0d:7f:c6:
                    ef:8e:ec:48:10:b1:2d:9c:39:d4:5d:83:7f:65:07:
                    7b:ab:fd:4e:c6:44:67:48:54:67:aa:9b:36:d4:a8:
                    9d:85:96:3f:b3:7b:17:41:e3:b0:74:e4:f6:70:dc:
                    be:22:3b:5f:4c:16:e0:78:41:e0:d4:89:72:fe:c4:
                    12:36:ec:4b:70:e9:46:fb:0d:4c:8e:b8:f4:33:ae:
                    b4:8d:da:65:82:48:90:19:e1:41:a0:f6:34:d3:e7:
                    24:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E6:50:D4:FC:4B:00:3F:63:D3:4D:99:1B:E2:B9:28:9C:01:77:23:E6
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl

            X509v3 Authority Key Identifier: 
                keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:5f:23:e3:2c:b5:e1:a3:6f:fe:c8:38:d4:71:1a:25:f6:bc:
         ed:fb:49:2f:00:ec:6b:c0:61:fa:51:8f:84:ed:57:4d:38:be:
         76:1f:f0:81:e3:0a:47:05:ec:33:f6:e1:8f:3b:46:0a:b3:fd:
         6a:c5:19:3f:9a:6e:2c:6e:f1:a9:00:ef:9d:cb:45:5b:ea:bd:
         e7:e2:7d:36:74:39:32:e9:71:ba:93:17:04:2b:29:f5:c4:80:
         26:c1:22:55:33:a4:13:82:c6:1c:33:22:6d:3e:5b:17:4e:73:
         b2:bc:9c:a4:98:c9:57:d4:f8:19:68:35:ca:b7:de:fe:18:1f:
         23:5a:fd:f3:41:29:c9:c5:aa:bf:7d:ea:56:b0:ab:44:9d:b0:
         4a:26:b2:e0:b9:05:f2:db:aa:bb:a8:70:94:19:88:27:87:d4:
         87:cf:f3:11:b5:29:fd:bb:f2:85:9f:e4:ce:ae:77:64:e2:60:
         11:c3:f8:7f:8a:11:26:f0:2e:df:72:3c:b2:38:80:0f:ea:fd:
         22:62:6e:5b:a7:8a:bd:77:1a:e2:45:eb:83:c1:1c:5d:3c:5c:
         84:f6:cd:62:52:c1:2d:32:88:f4:40:21:68:6e:ef:13:e0:5d:
         af:9e:03:9e:67:70:1e:f6:f8:60:60:f0:bc:d8:dc:c7:06:0f:
         b9:db:f9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 15:10:01 2022 by rpki-client.