Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/

$ rpki-client -vvf c468ce9c-5490-339e-a2a1-dec0ea6b9829.roa
File:                     c468ce9c-5490-339e-a2a1-dec0ea6b9829.roa (download)
Hash identifier:          rTCxQDRaKJcUJzNOwFkV+MASpzHBvC2Z54AzxRwatQk=
Subject key identifier:   1C:C4:00:04:3C:4C:70:C3:27:E1:88:0A:3A:67:BC:87:53:BF:D5:2B
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328583BE3A06814F1CEA981806D02A8
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/c468ce9c-5490-339e-a2a1-dec0ea6b9829.roa
ROA valid until:          Nov 14 05:00:00 2023 GMT
asID:                     398549
IP address blocks:
    1: 2605:dd40:8200::/48 maxlen: 48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:e3:a0:68:14:f1:ce:a9:81:80:6d:02:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Nov 11 05:00:00 2021 GMT
            Not After : Nov 14 05:00:00 2023 GMT
        Subject: CN=d666344d-0f41-4a33-8279-09e85d9b2749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:02:ae:52:09:82:b6:35:e1:f1:30:6b:c0:56:
                    b7:83:21:62:95:87:92:98:f9:0a:3d:48:ef:14:48:
                    f3:5e:77:35:80:b3:a5:84:e4:89:db:9d:23:94:f4:
                    d9:b5:9e:07:b8:6a:c5:6a:c7:68:ea:c9:56:d2:3f:
                    92:9b:98:3a:33:70:3b:bd:5a:56:49:51:56:62:e2:
                    96:6d:5a:43:7b:b0:53:79:9b:6e:25:d2:a0:c6:40:
                    6b:04:86:42:c6:a6:8d:a0:f1:2d:93:20:81:37:2c:
                    0d:e6:95:af:da:58:7e:3f:24:90:03:2d:44:fd:13:
                    73:de:e3:b0:4b:63:35:5a:57:21:c9:2f:53:b7:3d:
                    6a:fa:63:dd:2a:63:cf:25:6a:1c:4a:9e:8d:b7:16:
                    27:12:b7:6a:f7:2c:28:9f:6a:e9:9d:68:52:cf:40:
                    b6:3a:37:5e:0c:d3:83:65:d4:36:99:1b:e8:0c:82:
                    22:21:dc:1b:6d:96:10:89:5b:71:94:1c:eb:16:db:
                    03:8c:a0:f4:c8:59:92:85:6e:7d:db:ca:4c:5a:5a:
                    99:0d:96:c6:c4:ef:56:e4:2c:08:19:e7:74:f3:f9:
                    d6:3d:6e:a5:d0:2a:b3:c5:6e:93:85:0c:ba:0c:62:
                    b5:d0:65:f4:fd:4a:30:cf:dc:81:55:5b:7c:3a:ec:
                    c9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1C:C4:00:04:3C:4C:70:C3:27:E1:88:0A:3A:67:BC:87:53:BF:D5:2B
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/c468ce9c-5490-339e-a2a1-dec0ea6b9829.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier: 
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8200::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d5:b3:50:fd:41:b3:4a:ac:bb:56:4d:37:e2:9c:c2:73:eb:
         31:50:70:fe:53:d4:91:2b:7b:aa:bb:43:4f:d4:82:94:43:b3:
         4e:22:fe:fa:9a:45:20:3b:7f:8d:78:cd:43:91:14:ad:b4:f3:
         cd:58:0d:ce:89:4c:43:2f:8f:88:27:0c:71:05:19:24:fa:89:
         a7:b4:90:7d:2c:b3:fc:fd:a4:7e:53:12:27:80:9b:e4:3e:ed:
         11:db:40:8b:d8:d2:b1:e5:85:19:7f:d2:91:e3:56:a1:a4:69:
         12:62:79:62:40:2c:be:ce:4c:bc:fb:1c:37:f0:24:c6:fb:5f:
         44:9a:e4:0b:9a:90:08:96:53:14:18:09:6a:0a:1c:bc:67:68:
         c2:f7:41:c5:eb:0a:13:13:d3:cc:8a:2c:40:e3:4a:ac:e7:dc:
         a6:9d:df:d6:3d:1f:41:69:82:40:66:f8:84:26:f8:bd:3f:6e:
         ad:d4:75:1e:b0:56:81:6d:a8:ec:84:92:e8:1e:7b:c7:1c:79:
         98:29:94:25:36:e8:18:45:39:8c:ba:00:3e:31:8b:7f:1d:cd:
         0c:91:f9:be:61:97:72:12:0b:9d:29:8c:7e:15:1d:08:95:2b:
         d0:be:1f:89:f0:69:36:25:fe:1f:c2:6c:32:63:8d:b9:c1:72:
         08:48:44:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 19:52:01 2022 by rpki-client.