Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/fab7771b-833c-3891-b437-65acf0978e86.roa
File:                     fab7771b-833c-3891-b437-65acf0978e86.roa (download)
Hash identifier:          7Vsf39IeOirGeGX+RH/GAKFUZ+rxgpcu2Vpw57QfdVI=
Subject key identifier:   0A:1C:93:75:9D:87:C6:CB:27:B3:C9:21:E9:1B:23:C6:1F:F1:FA:16
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F4328576D51CC73C042CFC173D0CDE406
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/fab7771b-833c-3891-b437-65acf0978e86.roa
ROA valid until:          Jun 30 04:00:00 2030 GMT
asID:                     398493
IP address blocks:
    1: 2602:fd37:1::/48 maxlen: 48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:d0:cd:e4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Jun 30 04:00:00 2020 GMT
            Not After : Jun 30 04:00:00 2030 GMT
        Subject: CN=f442ba29-dc85-4bf7-8f9f-a9219dc46cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:f9:11:76:c2:14:88:02:7f:a9:2e:e6:da:
                    ab:4c:09:26:de:f7:d6:ec:97:8c:01:d8:29:b4:5b:
                    e6:bf:6c:bb:6a:ec:c0:e2:94:b9:5d:b9:45:fc:98:
                    b1:87:f7:fa:ab:6c:f7:7f:7a:82:b9:ed:6a:66:26:
                    55:4e:e0:95:a4:2f:3b:5e:52:f2:9f:df:a4:12:88:
                    7b:5f:78:38:72:be:8d:57:43:a5:d3:e1:98:b7:79:
                    dc:30:89:24:3c:17:be:3f:28:74:90:9b:36:a0:30:
                    00:25:35:5c:65:80:7a:d4:65:72:54:ef:be:11:32:
                    d5:6d:9c:74:61:92:ed:19:8a:2d:89:a4:20:2e:cf:
                    62:77:b4:f4:99:44:21:2c:b3:9c:eb:af:18:b6:24:
                    0b:6f:5b:fa:09:5c:53:f6:cf:e3:3f:1c:ce:18:64:
                    d5:b2:4a:c1:dd:04:e4:74:5e:7c:69:bf:41:2e:46:
                    b7:8e:75:9a:d6:90:b1:cf:17:0c:4b:6e:78:9e:a6:
                    d6:0e:e6:ab:88:92:18:95:dd:15:01:fe:c2:ac:3d:
                    63:4e:d4:8d:7f:56:68:4a:d5:d8:3e:aa:c2:9d:61:
                    6c:1c:02:0b:7f:10:b2:6f:56:4f:80:05:6e:89:1e:
                    94:f7:8f:4d:11:2a:03:21:38:c2:45:1c:91:5b:4e:
                    12:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                0A:1C:93:75:9D:87:C6:CB:27:B3:C9:21:E9:1B:23:C6:1F:F1:FA:16
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/fab7771b-833c-3891-b437-65acf0978e86.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier: 
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd37:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:65:55:f9:08:22:8c:79:55:af:c7:fe:7b:86:6d:5f:35:9d:
         d2:34:60:a9:de:d1:77:e7:00:03:05:e6:ea:b9:c0:94:34:60:
         c5:a8:71:cd:55:e8:85:b9:2f:23:2b:16:46:44:e4:eb:45:c3:
         dc:f6:5c:56:41:05:67:48:ad:cc:d9:40:95:41:91:7b:50:f8:
         82:26:15:98:e3:18:db:c8:1d:c4:f4:19:8e:62:67:8f:43:e1:
         dd:7b:80:03:45:88:eb:ce:0e:c4:27:9a:b5:d5:b6:34:e3:5d:
         da:59:37:74:29:c6:dc:d6:15:a7:e4:b3:64:2c:d5:6b:1e:7a:
         70:2d:88:35:2c:b7:0f:2b:58:b5:af:11:cd:72:f4:7d:f1:3b:
         60:d9:77:c5:1d:1b:7c:57:90:cc:92:23:56:31:ce:a8:39:c6:
         88:e4:02:ee:26:f9:14:f6:b6:c9:5c:b0:1f:74:2e:da:b8:c5:
         2f:aa:4a:66:69:0e:df:67:42:87:b1:38:a1:6e:9f:14:65:55:
         e6:39:06:ab:3f:05:20:60:bc:67:e0:01:6b:c4:74:fa:30:e4:
         55:64:b8:ac:2a:2a:58:bd:9b:df:85:c7:0b:5d:d7:a7:83:0c:
         fa:cb:38:aa:7d:e2:fa:0e:ae:f3:cb:22:7b:2f:35:b8:8a:6c:
         0e:2b:c9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----