Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa
File:                     60adbf7d-4503-31a4-a156-6bae4b601738.roa (download)
Hash identifier:          tWsh6C1szyUtNfeDsy/E51Ah/Ol5uWB/84gn6GOROxU=
Subject key identifier:   85:2D:73:52:DF:1D:73:4A:2C:60:25:82:50:E2:42:B3:3B:28:5F:87
Certificate issuer:       /CN=c66b7cab-031d-4c4c-8595-19848efd3058
Certificate serial:       010D0C9F4328583D6E1032131EEE5F0B08E85744
Authority key identifier: B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa
ROA valid until:          Jul 04 04:00:00 2027 GMT
asID:                     400339
IP address blocks:
    1: 147.136.240.0/21 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:6e:10:32:13:1e:ee:5f:0b:08:e8:57:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66b7cab-031d-4c4c-8595-19848efd3058
        Validity
            Not Before: Apr  1 04:00:00 2022 GMT
            Not After : Jul  4 04:00:00 2027 GMT
        Subject: CN=b0ac13d4-b076-4c1a-be2d-f0d735af09a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:8a:d3:63:54:22:11:73:bc:95:62:92:a1:
                    3f:13:f5:03:99:0d:99:0a:e8:4b:db:1d:e6:de:4a:
                    2e:77:17:c7:7a:7c:f0:34:69:46:2e:0c:75:25:3e:
                    2c:af:78:81:5e:49:3c:5c:41:a2:61:59:47:51:81:
                    9c:03:74:f1:2b:63:1f:b8:b2:9e:28:a0:22:07:e2:
                    20:f3:f2:50:94:f7:63:d2:a9:f9:f6:ca:50:93:ee:
                    cd:18:66:32:42:ac:89:71:be:10:ce:e2:c2:68:b0:
                    42:8d:bb:00:71:79:a3:42:8a:6d:19:b2:65:28:40:
                    cc:8f:2d:26:6e:98:2e:f2:b9:a5:02:4c:db:92:0b:
                    53:eb:c8:04:2b:ba:7a:d1:dd:cf:b2:7c:f3:e0:c3:
                    f7:57:a2:47:38:ee:c1:e3:eb:a6:4e:ac:a6:e8:7c:
                    25:f8:cb:24:f2:2d:61:df:17:52:b3:2e:80:70:3a:
                    03:4b:bb:00:78:d8:79:59:6d:5b:59:6c:76:14:99:
                    55:29:22:c9:7c:2d:31:8c:b2:62:2b:ac:c7:5e:bb:
                    79:d3:4e:f5:15:8c:de:51:ff:a1:63:03:12:47:17:
                    c5:6b:fb:59:40:0e:b0:fd:46:38:50:29:38:f5:96:
                    26:0e:4b:5e:17:0c:6a:39:57:bf:34:05:32:6e:4b:
                    14:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                85:2D:73:52:DF:1D:73:4A:2C:60:25:82:50:E2:42:B3:3B:28:5F:87
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/60adbf7d-4503-31a4-a156-6bae4b601738.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058/c66b7cab-031d-4c4c-8595-19848efd3058.crl

            X509v3 Authority Key Identifier: 
                keyid:B7:C5:02:AC:4D:E6:B8:C7:69:C9:D5:F6:04:F7:1A:A5:14:48:76:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c66b7cab-031d-4c4c-8595-19848efd3058.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.136.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:ad:53:50:0d:4c:0d:73:27:60:44:9a:6f:c3:4d:31:0b:3c:
         2c:45:93:be:d6:5e:2c:e3:78:c9:a9:0e:fc:b0:fe:43:62:85:
         a9:4e:48:68:d1:ff:48:f3:9d:65:05:dd:70:28:eb:9d:0a:ee:
         3b:21:d0:f4:d7:cf:3d:c4:d4:6d:84:f8:53:a0:77:04:dd:40:
         d6:ab:6c:a2:4e:37:2f:dd:7e:9b:d0:7b:0f:1e:5a:ce:5d:55:
         6c:f4:4a:a2:72:24:bf:d4:bb:32:5a:98:51:80:bf:6b:a8:09:
         04:43:db:79:bd:bd:f2:0e:b0:be:00:73:ad:8b:b2:b6:4e:d1:
         bf:5f:c9:c1:18:4d:75:bc:40:21:a9:f7:da:0a:f5:2f:ac:c5:
         7b:46:18:46:77:85:9f:91:51:6b:7b:cc:c5:32:4d:4f:0b:c6:
         0d:1b:51:e8:b7:6e:78:e8:28:dc:6a:3a:23:91:81:80:09:34:
         5d:14:51:ab:80:dc:fb:72:9d:33:54:49:99:5a:00:42:fa:a6:
         07:95:6f:bd:8d:8e:25:65:cf:19:e9:fe:75:49:06:4a:fe:91:
         73:82:88:67:28:2e:af:4b:fb:59:a0:ac:c0:36:ff:c0:e2:28:
         9e:f8:e4:68:fb:99:07:5f:d4:0f:e0:31:6d:74:df:6c:03:2a:
         52:f5:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 02:31:01 2022 by rpki-client.