Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/

$ rpki-client -vvf a914b17d-42d0-379c-96d3-bedfec26269c.roa
File:                     a914b17d-42d0-379c-96d3-bedfec26269c.roa (download)
Hash identifier:          +UnBFnQgpqiljevnojovdgEe+mMYLLtGgxirmJ+jFLs=
Subject key identifier:   F4:35:DB:FE:AE:81:48:E4:C5:0B:74:83:3D:72:3A:C4:5B:0B:60:11
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328583E7B87E8A3A21C1FAE5736A200
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/a914b17d-42d0-379c-96d3-bedfec26269c.roa
ROA valid until:          Dec 12 05:00:00 2022 GMT
asID:                     398549
IP address blocks:
    1: 2605:dd40:8210::/48 maxlen: 48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:7b:87:e8:a3:a2:1c:1f:ae:57:36:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Jul 26 12:00:00 2022 GMT
            Not After : Dec 12 05:00:00 2022 GMT
        Subject: CN=f49933f5-4ef1-48ef-b4de-a9e05510b08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f0:09:f1:a1:3e:46:cb:b4:19:2f:12:33:1c:
                    04:57:46:fa:fb:2c:00:7e:dc:ba:b5:cb:e0:42:92:
                    e4:a9:30:4a:f9:c6:2f:d1:a7:e5:8a:70:ea:de:85:
                    0d:a3:9d:62:d3:8d:c2:ed:84:0c:ba:b7:ca:6d:25:
                    d9:85:e0:9c:2b:53:eb:38:dc:87:d7:ad:e9:77:f8:
                    31:f8:48:d4:c3:d0:eb:55:2c:52:f9:4c:f0:7d:6e:
                    ee:03:13:ed:d3:c2:5a:03:5b:62:04:99:8e:4d:a3:
                    37:25:d5:b4:5c:66:b9:26:df:36:7b:32:8f:b2:d5:
                    c3:b1:90:18:61:f8:2a:3c:db:99:be:f2:82:b3:6f:
                    b1:95:ea:e7:bd:16:07:4b:06:ed:cb:03:ef:71:3b:
                    0f:db:6d:37:4d:a2:21:99:04:d9:1b:d5:8d:68:0e:
                    69:d9:6d:6f:99:f6:8b:85:a2:35:95:fd:96:39:da:
                    cc:6a:84:d6:ec:f8:2e:08:74:56:c7:62:cf:5b:60:
                    bc:54:33:02:6a:29:cc:75:bb:ec:0b:ad:0b:d8:7a:
                    e1:d3:4b:6d:b4:12:e6:4e:f9:e6:fa:3e:19:48:9b:
                    a6:3e:4a:07:07:f1:97:03:2d:2b:09:81:7e:33:3e:
                    a4:be:3a:ce:10:97:18:09:7a:85:1d:a3:1f:f9:d8:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F4:35:DB:FE:AE:81:48:E4:C5:0B:74:83:3D:72:3A:C4:5B:0B:60:11
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/a914b17d-42d0-379c-96d3-bedfec26269c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier: 
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8210::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:56:34:29:78:48:61:47:d5:48:c6:0d:e7:9c:27:5e:a4:c4:
         6c:c1:38:b1:9d:79:55:a6:da:8d:06:91:ac:e2:9a:e1:84:53:
         dd:55:99:a3:fe:ae:b4:ed:d4:40:7d:f0:a2:ad:a6:87:c4:eb:
         27:e9:a9:02:1a:19:a4:d7:bf:86:41:82:a6:2f:08:e6:ca:6b:
         f7:f4:1e:58:79:22:0a:3d:53:de:20:9d:ef:20:9f:0b:32:ff:
         a6:2d:41:af:85:4e:f3:a3:4f:dc:19:5b:ef:12:21:2b:af:d7:
         d3:f7:7c:f0:2d:6c:2a:a2:cc:f4:42:9a:04:fd:08:fe:d1:55:
         60:1e:2f:8f:2f:54:04:4b:98:23:fc:dd:74:ae:41:e1:45:6e:
         79:e2:9b:49:8b:1b:50:58:8e:e4:6a:be:0c:40:86:27:0d:71:
         ce:8a:eb:2a:ad:78:58:54:65:fc:69:d1:b7:65:a8:d5:04:a5:
         d3:c7:20:ab:9f:81:1f:07:3e:e5:4c:3f:4a:4c:3c:c8:55:25:
         66:81:55:a0:c4:db:94:fd:18:80:36:a3:6d:9b:98:21:b0:05:
         ed:99:3d:20:c8:b7:c8:8a:b7:42:45:68:b3:78:62:66:13:a3:
         ce:c8:1d:d2:8e:c7:b5:ae:41:5f:92:1b:f6:46:73:eb:ba:ca:
         ad:9c:ea:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 19:52:01 2022 by rpki-client.