Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/8a137b33-1e24-344d-9382-3fa47ed2a3c3.roa
File:                     8a137b33-1e24-344d-9382-3fa47ed2a3c3.roa (download)
Hash identifier:          nqzTjkfYAzXlDx0NjRwcxOUYNwfqK/aGYRhQQLU46po=
Subject key identifier:   10:30:67:69:43:A3:C6:31:AC:0D:67:DE:30:DB:A6:47:91:59:B8:A9
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328583DA96ED706D384016492D616C0
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/8a137b33-1e24-344d-9382-3fa47ed2a3c3.roa
ROA valid until:          Jul 26 04:00:00 2030 GMT
asID:                     400384
IP address blocks:
    1: 162.221.148.0/22 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a9:6e:d7:06:d3:84:01:64:92:d6:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Sep 25 18:17:59 2020 GMT
            Not After : Jul 26 04:00:00 2030 GMT
        Subject: CN=9da6c558-b739-4fd5-b408-019b3de54a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:19:69:ea:d6:f2:22:c8:57:45:a2:fa:60:00:
                    b8:9c:d6:36:32:12:a1:0e:e3:98:46:5f:2f:ac:e4:
                    b1:b5:ec:76:d2:13:85:46:f1:37:ff:86:ec:ff:4d:
                    b3:88:d4:66:6e:3f:c2:d6:10:eb:16:07:5e:b7:30:
                    b8:a6:40:32:c1:0e:a5:65:90:06:83:80:80:b6:67:
                    ce:70:87:bd:77:f5:3f:cf:df:44:92:8d:1b:3a:ee:
                    5c:58:10:ef:e0:ba:0d:48:15:f3:e0:ae:6c:2a:30:
                    7e:38:09:0f:5c:02:93:e7:32:a0:97:8b:4a:d8:1a:
                    7d:cf:80:bc:2c:05:d6:b5:a0:11:82:e7:b3:1f:a8:
                    40:a0:a5:4e:aa:a9:e0:c6:49:a7:3b:48:1b:0d:7c:
                    a6:2f:fc:ea:8b:fd:a1:ef:39:6a:bb:71:70:23:87:
                    79:45:d9:c0:0c:6a:cd:71:98:01:4b:de:76:6d:e8:
                    0f:69:44:15:a6:c6:82:d5:5f:cc:f2:db:c0:c4:4b:
                    b8:61:11:64:0e:23:f9:70:1e:49:ff:d4:61:29:18:
                    fd:04:d0:27:41:7d:e7:70:09:b4:6b:33:e4:7d:2b:
                    f0:2c:d8:0b:c4:44:9a:67:c8:73:93:46:b9:a1:93:
                    0d:84:6f:65:76:a7:fe:00:b4:3c:dd:e0:61:ec:d0:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                10:30:67:69:43:A3:C6:31:AC:0D:67:DE:30:DB:A6:47:91:59:B8:A9
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/8a137b33-1e24-344d-9382-3fa47ed2a3c3.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier: 
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:cb:66:f9:bd:fa:02:5b:09:fd:bb:dd:07:59:69:12:3f:
         81:06:69:c0:2b:a5:42:a4:97:06:96:86:93:4c:90:7c:79:9d:
         08:bf:74:e2:cc:0d:15:9b:c3:f4:f1:e1:a6:cc:dc:a2:fd:bc:
         1c:70:70:8f:ba:00:61:b5:bb:39:e2:fd:79:72:9e:df:75:f7:
         47:22:19:48:98:af:51:0e:93:41:90:d1:c6:ce:de:0c:0a:f6:
         ac:50:cd:96:7e:0a:9e:d2:63:fa:98:8c:18:c6:49:2d:71:61:
         34:f0:94:d8:bd:24:19:6e:d7:73:64:42:aa:32:eb:44:ee:9c:
         8b:03:bf:4d:0c:f5:55:69:00:6c:b5:e0:69:b1:0a:dd:64:4d:
         0e:02:94:29:db:1d:c6:54:ae:62:cd:9b:9a:a6:f3:4b:57:1a:
         c6:21:ec:bc:85:da:79:8c:f0:69:06:c9:c3:28:63:18:d7:e9:
         d6:86:3a:b2:ab:12:f6:94:e1:c0:cc:da:5c:d8:02:39:85:d7:
         6f:f2:02:55:5e:26:17:ac:ae:85:3f:44:a5:75:46:31:32:b8:
         bb:55:dd:e1:84:98:e8:24:97:d6:d3:54:df:df:ad:52:fe:d3:
         fe:66:54:ba:5b:62:ef:c6:4d:b1:39:50:1a:90:99:57:14:bc:
         2a:04:2a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 04:22:21 2022 by rpki-client.