Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/

$ rpki-client -vvf 7e1757d5-1075-3128-82db-a7f6e2d1a10f.roa
File:                     7e1757d5-1075-3128-82db-a7f6e2d1a10f.roa (download)
Hash identifier:          GBxw7XP+vi9eCJoUq4WKnEUTeplfjI/MKXY5LTt3zHI=
Subject key identifier:   E4:CC:0A:69:3B:71:74:5C:92:03:B9:A0:41:69:40:02:A6:0F:64:CE
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328583EE58F6EEC50D32A429230E480
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7e1757d5-1075-3128-82db-a7f6e2d1a10f.roa
ROA valid until:          Nov 16 05:00:00 2024 GMT
asID:                     398549
IP address blocks:
    1: 2605:dd40:9006::/48 maxlen: 48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e5:8f:6e:ec:50:d3:2a:42:92:30:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Aug 14 12:00:00 2022 GMT
            Not After : Nov 16 05:00:00 2024 GMT
        Subject: CN=b245ecf8-8d39-4aaf-9b55-4974ec08a3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5a:18:1f:84:17:5b:11:1c:eb:cc:2e:95:eb:
                    ad:be:fb:85:35:c7:f1:eb:30:ab:d1:46:5f:38:a7:
                    cc:d1:cc:d1:0d:20:37:70:4c:c6:d7:8d:c9:b3:7d:
                    ab:73:e5:f6:89:a8:b8:39:27:21:80:a7:57:70:98:
                    3e:b0:37:d7:69:8b:b6:8f:12:5d:ec:49:96:0a:28:
                    72:f7:3c:a9:30:8f:39:04:63:c2:91:b9:2a:cb:c9:
                    10:13:dd:77:03:b9:4f:5b:54:9b:1d:8f:78:d2:6c:
                    c9:26:4d:84:25:4a:a5:55:99:37:b1:fb:b1:5b:43:
                    5c:a1:67:5f:70:51:45:d8:6b:49:f0:24:67:a3:a0:
                    e6:4a:38:42:77:9b:6d:40:bf:9d:82:03:1b:50:ec:
                    a1:fe:2f:f4:e6:ac:32:da:bf:70:45:d0:c4:00:87:
                    55:6b:94:6f:22:01:4f:64:00:43:91:12:5c:1b:cf:
                    0c:d3:4c:4c:fe:85:66:80:63:07:9c:1b:a8:cd:41:
                    d5:1c:9d:fb:37:fb:a9:5c:4f:04:1a:8d:3e:16:1b:
                    b4:ca:31:40:57:64:78:3f:c8:19:3d:d4:5b:10:e2:
                    55:89:ab:fd:e1:5d:59:14:00:6d:c2:54:40:99:0f:
                    84:ee:3f:8a:9d:b7:9b:4e:2e:d7:95:49:1f:85:36:
                    75:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                E4:CC:0A:69:3B:71:74:5C:92:03:B9:A0:41:69:40:02:A6:0F:64:CE
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/7e1757d5-1075-3128-82db-a7f6e2d1a10f.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier: 
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:9006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f0:de:8d:37:10:aa:6e:1c:99:77:9e:52:f0:18:b7:f7:34:
         21:9a:35:7e:33:7a:b2:6e:e7:cd:28:03:3f:e4:73:57:f4:d8:
         69:2f:07:31:ef:92:c0:d1:fa:4e:05:e2:ef:94:8c:48:9b:c1:
         fa:b1:6b:e3:01:b4:59:bc:0d:26:24:f2:2f:2d:e3:46:0d:05:
         55:b5:f9:b8:e9:cb:ab:e3:29:14:e1:f1:58:dc:da:6a:d9:c1:
         19:b1:78:9a:d9:54:44:90:92:1a:af:4b:37:8b:05:60:6d:21:
         24:8d:62:63:84:8d:bd:bd:e7:32:a7:88:75:9a:26:69:40:fb:
         bd:df:56:44:e7:f9:1e:19:66:08:7b:3a:ad:54:79:e6:17:cb:
         4f:b3:8a:ff:01:1c:71:e6:04:a8:3d:15:f9:a7:a8:03:fd:a8:
         34:52:ca:ae:7a:b3:cc:5b:05:04:cd:c7:f5:34:5b:ca:bf:4f:
         2d:91:13:52:f0:93:d0:33:27:c5:c3:bc:a7:ea:c9:12:0f:ba:
         5c:95:9a:1d:84:17:53:3d:51:39:03:7a:b0:fb:2d:52:7f:77:
         b9:46:e9:55:33:86:56:ff:d0:3f:cf:06:92:5c:0f:c3:d7:3f:
         d9:65:f0:79:5b:6c:39:8e:8e:eb:c3:79:67:45:47:72:a0:80:
         c6:96:d5:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 18:00:33 2022 by rpki-client.