Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/

$ rpki-client -vvf df20c266-ec55-3d8f-a0ec-53359fd344b9.roa
File:                     df20c266-ec55-3d8f-a0ec-53359fd344b9.roa (download)
Hash identifier:          5gbn7f/DcEu3fMJKwIWgpZUdIwIjTg+rLUWBYA1IsnM=
Subject key identifier:   17:66:7E:81:30:83:FE:EA:5E:0D:BD:BC:0A:CB:9C:71:21:B1:10:6E
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328583EE58F091ECE3D82CDD6461A00
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/df20c266-ec55-3d8f-a0ec-53359fd344b9.roa
ROA valid until:          Nov 16 05:00:00 2024 GMT
asID:                     398549
IP address blocks:
    1: 2605:dd40:9005::/48 maxlen: 48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:e5:8f:09:1e:ce:3d:82:cd:d6:46:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Aug 14 12:00:00 2022 GMT
            Not After : Nov 16 05:00:00 2024 GMT
        Subject: CN=c520cac2-578d-40eb-9fde-d880327acb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4d:ee:28:ed:19:61:b3:f5:2c:11:48:83:5a:
                    a4:2f:8f:de:c9:2f:a1:32:11:fb:23:0b:17:59:68:
                    6d:02:62:66:93:4e:1e:c3:dd:7c:6f:9f:76:f1:df:
                    70:14:b6:6b:93:a0:0c:c3:62:df:06:e9:81:4d:d0:
                    b2:1c:a8:58:b0:98:3f:f3:ea:cf:a9:bc:3c:c8:1d:
                    93:91:34:e0:08:6a:c9:8c:13:64:57:3f:8f:71:66:
                    9f:3c:4a:63:f3:a3:f2:49:a8:22:49:09:57:c8:89:
                    86:7a:fa:f9:de:9e:66:bf:ea:19:87:70:db:c6:19:
                    76:ba:86:c0:6c:07:39:9e:15:a6:2a:19:1b:d0:2f:
                    2d:8c:34:9a:b9:9d:14:52:2f:89:14:c2:b3:12:39:
                    e0:f8:2c:b0:b4:4a:29:a1:c9:d0:57:57:ff:a0:ed:
                    ad:65:9f:8c:1a:d2:d6:89:4f:d9:7d:83:7f:c2:ee:
                    c4:87:2c:af:ef:a0:9d:25:08:15:fe:2f:4b:39:12:
                    f7:03:cb:29:86:4e:3c:39:1c:38:fd:ac:a9:21:ab:
                    86:ca:9b:99:96:9c:b4:49:73:c7:34:56:e2:fd:33:
                    76:f2:c9:f5:e6:66:b9:7b:14:45:77:2d:61:f6:e6:
                    76:51:8c:f5:1e:3d:d0:f6:79:b5:01:05:8f:ba:2b:
                    be:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                17:66:7E:81:30:83:FE:EA:5E:0D:BD:BC:0A:CB:9C:71:21:B1:10:6E
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/df20c266-ec55-3d8f-a0ec-53359fd344b9.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier: 
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:9005::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:33:93:54:d2:5c:00:36:25:39:0a:76:82:6e:c1:96:04:b0:
         cf:fb:31:aa:53:58:ee:8f:24:02:06:0e:d4:0f:d5:7c:32:25:
         b9:4c:4b:5d:26:d0:99:01:f5:16:89:96:9a:6a:6b:ca:f5:ec:
         1c:e9:12:70:d3:ea:f0:6b:fd:68:6a:49:75:70:f2:2b:cf:eb:
         96:d5:91:75:aa:cc:1d:fd:57:9f:f5:8f:85:69:e5:30:16:36:
         f7:c0:07:0b:55:9f:55:68:8a:58:b2:18:cd:72:24:5f:0f:93:
         c6:fe:8a:88:4a:82:18:bb:89:37:33:69:63:53:49:e0:c3:59:
         62:09:96:59:6f:a3:c5:d8:c4:ce:5f:34:ac:67:d0:14:b6:42:
         f0:c4:5f:9f:c2:a9:45:76:47:7c:33:0f:c2:5d:24:84:be:07:
         d2:0f:8c:e1:86:c2:e6:eb:b4:01:d0:6b:ce:2b:c8:41:cb:b9:
         4f:78:64:1d:75:92:d9:c5:c7:66:39:13:f1:25:dd:bf:78:31:
         89:12:83:38:08:8b:e8:8c:cc:71:c5:5c:31:d9:1e:24:76:4f:
         96:32:fb:f5:0b:27:93:40:25:82:30:d1:ff:3d:e6:cd:a7:d0:
         65:b5:1f:41:c4:b3:a8:78:fc:fa:dc:9f:90:25:e1:dd:7b:49:
         6b:64:2a:a1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWD7ljwkezj2CzdZGGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA4ZWRmM2EtNzNhNS00NjE0LTljNzYtNTcwMmQ1Yzg4
OTc3MB4XDTIyMDgxNDEyMDAwMFoXDTI0MTExNjA1MDAwMFowLzEtMCsGA1UEAxMk
YzUyMGNhYzItNTc4ZC00MGViLTlmZGUtZDg4MDMyN2FjYjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU3uKO0ZYbP1LBFIg1qkL4/eyS+hMhH7IwsX
WWhtAmJmk04ew918b5928d9wFLZrk6AMw2LfBumBTdCyHKhYsJg/8+rPqbw8yB2T
kTTgCGrJjBNkVz+PcWafPEpj86PySagiSQlXyImGevr53p5mv+oZh3Dbxhl2uobA
bAc5nhWmKhkb0C8tjDSauZ0UUi+JFMKzEjng+CywtEopocnQV1f/oO2tZZ+MGtLW
iU/ZfYN/wu7Ehyyv76CdJQgV/i9LORL3A8sphk48ORw4/aypIauGypuZlpy0SXPH
NFbi/TN28sn15ma5exRFdy1h9uZ2UYz1Hj3Q9nm1AQWPuiu+AQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBdmfoEwg/7qXg29vArLnHEhsRBuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhl
ZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAyZDVjODg5NzcvZGYyMGMyNjYtZWM1NS0z
ZDhmLWEwZWMtNTMzNTlmZDM0NGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjA4ZWRmM2EtNzNhNS00NjE0LTlj
NzYtNTcwMmQ1Yzg4OTc3LzIwOGVkZjNhLTczYTUtNDYxNC05Yzc2LTU3MDJkNWM4
ODk3Ny5jcmwwHwYDVR0jBBgwFoAUjiG5m/w/KlKClNSwhb33vM87VUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMDhlZGYzYS03M2E1LTQ2MTQtOWM3Ni01NzAy
ZDVjODg5NzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgXdQJAF
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJIzk1TSXAA2JTkKdoJuwZYEsM/7MapTWO6PJAIGDtQP1XwyJblM
S10m0JkB9RaJlppqa8r17BzpEnDT6vBr/WhqSXVw8ivP65bVkXWqzB39V5/1j4Vp
5TAWNvfABwtVn1VoiliyGM1yJF8Pk8b+iohKghi7iTczaWNTSeDDWWIJlllvo8XY
xM5fNKxn0BS2QvDEX5/CqUV2R3wzD8JdJIS+B9IPjOGGwubrtAHQa84ryEHLuU94
ZB11ktnFx2Y5E/El3b94MYkSgzgIi+iMzHHFXDHZHiR2T5Yy+/ULJ5NAJYIw0f89
5s2n0GW1H0HEs6h4/Prcn5Al4d17SWtkKqE=
-----END CERTIFICATE-----
Generated at Sat Dec 3 18:37:35 2022 by rpki-client.