Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa
File:                     8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa (download)
Hash identifier:          V7HDJak7G7YL0OqP+8YLyKctwOoAQuD9hr/q3bWGi2U=
Subject key identifier:   15:36:A0:0A:37:56:DB:45:B6:1D:9D:0A:2D:F8:A4:E0:3F:D0:B2:EC
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F43285839372296B61BABA8E73B7D4980
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa
ROA valid until:          Jun 13 04:00:00 2023 GMT
asID:                     1239
IP address blocks:
    1: 104.171.160.0/20 maxlen: 24
    2: 162.250.96.0/21 maxlen: 24
    3: 162.254.0.0/21 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:37:22:96:b6:1b:ab:a8:e7:3b:7d:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Oct 20 04:00:00 2020 GMT
            Not After : Jun 13 04:00:00 2023 GMT
        Subject: CN=3e608f8a-3b7f-4f5c-94c0-36c52f2e662c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:83:ca:04:5e:47:74:76:37:7c:28:17:7c:
                    40:de:4a:cf:9b:4b:97:a6:6e:8b:49:51:43:64:7a:
                    0c:ac:ce:54:c4:76:2b:77:6a:aa:58:88:f5:d7:95:
                    49:60:c3:dd:7f:c6:4f:b2:06:67:8b:24:dc:e4:61:
                    e2:4c:c3:89:90:9c:c5:2e:5c:e3:dd:2d:71:ba:22:
                    11:de:99:1d:db:53:3c:1a:14:79:dd:63:71:b2:da:
                    29:e5:fe:82:36:a2:d3:6b:27:f0:75:94:ff:eb:75:
                    3a:41:ea:04:17:61:d3:b6:67:1b:10:19:71:cf:56:
                    3d:36:0e:36:ee:60:2d:a0:6c:37:d1:f0:7c:7b:ef:
                    e8:bf:01:44:75:6f:4b:bd:e3:15:98:14:df:e6:26:
                    04:aa:8b:69:e2:47:d4:9e:f2:e8:83:59:fd:51:dc:
                    41:2a:b8:70:02:1e:0b:62:3e:3a:cb:3e:0b:ab:ce:
                    ee:a1:c5:04:7c:29:d1:d4:c1:6e:8d:d6:55:d8:d1:
                    06:9d:d7:a4:e9:b4:47:37:24:61:36:15:99:3c:cf:
                    1c:9f:0b:2b:bf:f2:02:24:62:14:eb:3f:27:0e:09:
                    dd:d2:d0:f5:f6:c8:46:e6:50:1f:63:b1:bc:bb:6b:
                    47:c9:85:d9:71:56:d5:e2:8c:19:27:e7:e5:13:f9:
                    b6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                15:36:A0:0A:37:56:DB:45:B6:1D:9D:0A:2D:F8:A4:E0:3F:D0:B2:EC
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/8a930d5c-17ff-3a7e-bc6a-0081eaa5570c.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier: 
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.171.160.0/20
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:46:b8:91:7f:17:7f:5d:fb:a1:c2:68:7b:d6:a9:a0:4a:75:
         e3:f3:c3:a3:5c:d5:72:4f:5f:d9:61:91:e2:d9:2c:25:0a:ed:
         76:80:ee:82:cf:9e:07:e5:d4:26:92:5f:fa:c2:38:6a:4f:1a:
         a1:f5:34:69:ce:c6:76:df:c7:cc:60:56:65:45:6b:94:f9:37:
         85:64:76:88:d1:18:22:4e:74:88:44:20:73:90:c4:c8:db:6d:
         5d:f1:97:f3:d8:c1:d3:6a:94:09:a2:7d:7c:6c:23:a6:02:3b:
         80:1a:63:16:10:5b:2e:94:bf:b8:1b:26:63:6b:d2:95:20:49:
         e2:5f:f0:bf:08:a7:25:af:00:ff:86:e9:c6:da:9b:80:7c:6c:
         e4:94:dd:87:b2:96:fb:e3:c2:34:bd:06:b6:ab:86:dd:90:b0:
         04:77:c6:1d:8f:7c:6a:40:ee:f6:3e:cb:d0:4b:fc:56:00:08:
         83:8d:48:06:fb:b9:1b:ee:07:67:1d:f0:e5:23:32:fe:a6:cb:
         7c:f8:f4:81:2a:2f:ba:bc:a3:19:af:86:1e:85:33:b5:6d:9d:
         95:1d:a2:2a:05:bd:d6:91:dd:ac:15:64:6c:91:28:14:ca:95:
         fe:63:33:82:e9:84:6e:c4:17:d2:2e:c0:6b:50:2b:24:6c:95:
         01:b1:15:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 08:34:33 2022 by rpki-client.