Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/7ddfb354-b597-37d0-bfdb-628be097f8f5.roa
File:                     7ddfb354-b597-37d0-bfdb-628be097f8f5.roa (download)
Hash identifier:          jXODgEg+4NI6D8l2g/U/o7HrOJE/8C/2r6LVBP1VhyA=
Subject key identifier:   C9:79:4D:13:D1:12:9C:87:A5:36:E7:63:7A:23:F6:2F:C7:3D:6B:72
Certificate issuer:       /CN=e1029eed-2e88-4036-a7d9-ea093001f5cc
Certificate serial:       010D0C9F4328583BDC785C00E67802176F9CDCC0
Authority key identifier: 05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/7ddfb354-b597-37d0-bfdb-628be097f8f5.roa
ROA valid until:          Feb 11 05:00:00 2024 GMT
asID:                     400148
IP address blocks:
    1: 23.190.16.0/24 maxlen: 24
    2: 2602:fc0f::/48 maxlen: 48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:dc:78:5c:00:e6:78:02:17:6f:9c:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1029eed-2e88-4036-a7d9-ea093001f5cc
        Validity
            Not Before: Nov  8 05:00:00 2021 GMT
            Not After : Feb 11 05:00:00 2024 GMT
        Subject: CN=1dfb522a-b882-45d9-bbfe-cdb7593e646f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f4:72:77:34:12:ec:37:5a:3d:c1:89:62:0d:
                    ff:0d:86:c3:10:4b:74:ae:8c:86:24:b0:02:29:61:
                    2d:ef:13:d8:f8:3d:ea:a7:ee:6c:ed:09:00:37:3f:
                    ba:51:7b:57:0a:21:a2:4b:07:0c:c2:72:d1:dc:da:
                    83:75:cf:6a:b7:93:35:ea:63:48:70:c8:8b:35:b9:
                    6b:10:89:e3:9c:51:e1:e0:e9:15:ba:cb:57:c1:28:
                    55:66:47:2f:19:c8:18:f4:be:32:e3:3f:e0:5a:40:
                    64:92:cf:88:ff:f5:c4:31:06:68:d1:b1:6e:80:f2:
                    a9:66:b8:5a:54:89:69:8f:3b:d7:90:68:b2:a2:2c:
                    07:00:85:8f:2d:d9:23:b2:98:e3:17:2b:f6:b1:80:
                    99:4a:8c:6f:e8:02:51:be:f6:bd:d3:47:04:89:a8:
                    7a:d5:c1:9e:91:1e:15:c6:ac:bb:07:dd:0c:af:80:
                    2d:af:ae:f8:4a:04:fa:1f:b8:83:10:a7:b2:81:ad:
                    08:f5:48:1c:c0:f7:fc:d9:65:a0:ec:dd:d1:50:54:
                    53:bf:fb:5b:06:d3:05:9f:d2:8e:f8:4e:52:2c:41:
                    6e:a7:d2:68:24:74:9e:46:a2:9d:fb:4e:42:46:b8:
                    be:f9:37:df:f1:e2:f2:c8:56:87:59:9d:dd:08:a0:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C9:79:4D:13:D1:12:9C:87:A5:36:E7:63:7A:23:F6:2F:C7:3D:6B:72
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/7ddfb354-b597-37d0-bfdb-628be097f8f5.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.crl

            X509v3 Authority Key Identifier: 
                keyid:05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.16.0/24
                IPv6:
                  2602:fc0f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e1:aa:3f:36:62:e7:57:2b:dc:35:a7:8b:21:90:bb:08:ad:
         ab:fa:eb:9c:20:9f:37:e5:2d:52:0a:d0:af:b8:93:f9:78:04:
         22:05:3f:fc:7a:01:ba:ed:2f:cd:12:9d:ab:d8:c6:70:a0:f1:
         e0:af:bb:7d:ee:6d:c8:1d:eb:35:2c:77:68:a1:93:89:59:9f:
         36:4d:fd:ab:00:e1:8d:58:cb:6d:5f:ab:1c:c5:b4:06:c8:b7:
         63:66:c8:6e:7d:52:7f:d4:11:08:7a:53:09:fc:3e:77:fc:34:
         48:9d:35:cd:b8:ce:a4:01:3a:17:2b:43:db:c8:80:81:8b:4d:
         8c:e6:96:aa:9a:14:35:0a:08:ee:8f:c4:4d:ac:53:7e:75:ef:
         b7:3a:7c:2d:d2:17:e2:12:84:f0:65:1c:64:93:70:32:66:cb:
         4c:82:0a:a9:c8:08:8d:e3:54:e5:67:0a:02:a8:7e:3c:54:11:
         79:b0:41:e2:bb:fd:4f:c7:57:d0:21:fb:e2:5c:05:9b:31:a5:
         d3:67:46:e6:49:7d:d6:01:65:74:02:8c:1c:4f:06:32:aa:76:
         89:bd:91:ed:e5:d8:a2:aa:8d:4b:8e:46:d0:06:a1:f9:fc:cf:
         4d:0e:1b:74:e0:b5:db:8a:11:36:51:fc:06:c3:84:17:99:c7:
         15:f8:60:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 03:08:13 2022 by rpki-client.