Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/bd72c2e1-6559-337b-9221-5d92474944a6.roa
File:                     bd72c2e1-6559-337b-9221-5d92474944a6.roa (download)
Hash identifier:          0aIqp8E1HL8OGlksmxoeRCu3bhbeo8GgGQyRNCDyhjo=
Subject key identifier:   59:A5:6E:3E:DD:3D:84:3A:68:4E:FB:49:2D:5C:72:43:7D:1B:FB:5F
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328583A712505A44D7B39519B4EEC00
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/bd72c2e1-6559-337b-9221-5d92474944a6.roa
ROA valid until:          Jun 30 04:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 134.202.36.0/22 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:71:25:05:a4:4d:7b:39:51:9b:4e:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Jun 30 04:00:00 2021 GMT
            Not After : Jun 30 04:00:00 2023 GMT
        Subject: CN=9538814d-4b81-45e1-9c1f-74d7fbe8e84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:08:33:47:5d:89:d1:95:84:51:88:d4:34:a9:
                    41:3d:4c:bd:92:9f:25:64:4e:7a:85:5e:c8:96:07:
                    64:5f:d7:02:de:40:da:4c:02:2d:8c:78:7b:45:56:
                    bb:6f:17:b6:90:cd:94:2e:d8:4d:5a:0f:50:48:f4:
                    87:9e:b4:ae:24:27:69:03:d5:1b:b2:af:71:68:59:
                    84:69:71:87:f9:2b:11:e3:a0:53:aa:81:48:3e:a3:
                    33:35:29:48:31:07:a6:4f:f7:d2:3d:30:a8:53:c6:
                    93:06:1c:d4:c4:59:5a:26:13:b9:a3:c6:eb:dd:ca:
                    47:34:30:4d:f9:ea:73:91:ad:73:f6:82:24:4f:54:
                    03:ee:3a:45:5a:81:51:52:0e:01:0b:e0:16:98:e4:
                    53:e6:ae:89:1e:39:2b:f3:41:19:c9:90:ff:21:9a:
                    7d:8e:67:b9:a3:b4:dc:ec:ff:14:36:f7:e5:c1:ed:
                    ed:2e:6c:c4:2c:e1:6a:51:bc:47:0e:5c:cf:a7:f0:
                    04:1b:46:88:59:0b:fe:66:7e:e8:f2:63:58:fe:f4:
                    9e:4e:b2:d4:03:dd:73:2f:eb:00:84:0b:85:35:7f:
                    22:b8:db:bf:a3:f6:1f:45:ca:03:98:55:7f:28:ea:
                    e4:06:16:e9:e4:a0:29:65:1f:ba:db:97:3b:6f:55:
                    8c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                59:A5:6E:3E:DD:3D:84:3A:68:4E:FB:49:2D:5C:72:43:7D:1B:FB:5F
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/bd72c2e1-6559-337b-9221-5d92474944a6.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier: 
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c1:4c:a6:ba:95:6e:e7:0c:e5:13:3b:86:92:f1:03:fc:09:
         3b:8f:42:65:f5:a3:d0:d8:a2:e4:93:ce:13:2e:47:f5:b7:10:
         97:e4:fe:08:e1:c7:8a:3f:59:9a:51:65:7b:90:a2:d1:7d:42:
         55:1a:07:68:06:98:92:70:7e:db:f8:66:26:db:c8:36:3c:2d:
         ec:c9:33:a4:20:9d:77:2d:05:0a:64:21:3d:4f:32:ed:cd:54:
         c0:50:aa:78:f7:b8:bd:8d:9a:39:08:3a:7b:b4:e7:28:aa:4b:
         08:82:ff:24:a7:68:54:ef:02:b5:38:69:fa:c0:ef:d0:47:6f:
         aa:92:10:9c:2a:72:70:2c:fb:dc:dd:45:51:6c:8c:a3:35:ee:
         3c:ae:74:12:e4:e0:fd:58:48:65:d6:e2:7b:4c:38:6e:bf:10:
         7e:24:d5:3f:e4:a7:04:a2:9d:81:ef:e7:ac:a5:76:86:22:f3:
         23:77:a6:7c:53:00:aa:e9:0b:2e:d9:8a:97:2a:a0:48:8e:42:
         93:f1:ad:69:f2:1f:97:35:25:45:f8:fd:3b:fe:ca:48:b8:88:
         c9:62:0c:17:dc:48:4c:dc:3f:4c:62:b0:2d:5d:01:83:0b:8b:
         40:20:fa:1d:f1:1b:2a:81:ec:52:eb:c6:8b:c9:18:5d:bd:2b:
         e4:67:89:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDpxJQWkTXs5UZtO7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi
N2VhMB4XDTIxMDYzMDA0MDAwMFoXDTIzMDYzMDA0MDAwMFowLzEtMCsGA1UEAxMk
OTUzODgxNGQtNGI4MS00NWUxLTljMWYtNzRkN2ZiZThlODRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnggzR12J0ZWEUYjUNKlBPUy9kp8lZE56hV7I
lgdkX9cC3kDaTAItjHh7RVa7bxe2kM2ULthNWg9QSPSHnrSuJCdpA9Ubsq9xaFmE
aXGH+SsR46BTqoFIPqMzNSlIMQemT/fSPTCoU8aTBhzUxFlaJhO5o8br3cpHNDBN
+epzka1z9oIkT1QD7jpFWoFRUg4BC+AWmORT5q6JHjkr80EZyZD/IZp9jme5o7Tc
7P8UNvflwe3tLmzELOFqUbxHDlzPp/AEG0aIWQv+Zn7o8mNY/vSeTrLUA91zL+sA
hAuFNX8iuNu/o/YfRcoDmFV/KOrkBhbp5KApZR+625c7b1WMhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFmlbj7dPYQ6aE77SS1cckN9G/tfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2
YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvYmQ3MmMyZTEtNjU1OS0z
MzdiLTkyMjEtNWQ5MjQ3NDk0NGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2
NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh
YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1
NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChsokMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErBTKa6lW7nDOUTO4aS8QP8CTuPQmX1o9DYouSTzhMuR/W3EJfk/gjh
x4o/WZpRZXuQotF9QlUaB2gGmJJwftv4ZibbyDY8LezJM6QgnXctBQpkIT1PMu3N
VMBQqnj3uL2NmjkIOnu05yiqSwiC/ySnaFTvArU4afrA79BHb6qSEJwqcnAs+9zd
RVFsjKM17jyudBLk4P1YSGXW4ntMOG6/EH4k1T/kpwSinYHv56yldoYi8yN3pnxT
AKrpCy7ZipcqoEiOQpPxrWnyH5c1JUX4/Tv+yki4iMliDBfcSEzcP0xisC1dAYML
i0Ag+h3xGyqB7FLrxovJGF29K+RniWU=
-----END CERTIFICATE-----
Generated at Thu Dec 8 08:34:30 2022 by rpki-client.