Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b0d4e31-97af-3895-934e-77be32387641.roa
File:                     2b0d4e31-97af-3895-934e-77be32387641.roa (download)
Hash identifier:          dKd5FmX0A+tYr1c7tM5OGwEhjwdc/l7M+VSsb2du01o=
Subject key identifier:   FA:78:BE:06:C3:F6:53:AD:32:3D:F7:FC:7C:A6:7F:EB:6A:3D:F5:40
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328583F16D86346F1F9A430E22AFB40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b0d4e31-97af-3895-934e-77be32387641.roa
ROA valid until:          Dec 03 05:00:00 2024 GMT
asID:                     20473
IP address blocks:
    1: 173.211.82.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:16:d8:63:46:f1:f9:a4:30:e2:2a:fb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  2 17:30:08 2022 GMT
            Not After : Dec  3 05:00:00 2024 GMT
        Subject: CN=2558fb4d-8af4-4b09-92eb-191afa0c548c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:bf:04:96:13:bb:67:37:eb:11:94:a3:21:
                    7d:06:d6:97:0b:79:30:63:c5:cc:71:a6:3b:97:9f:
                    a7:56:29:06:74:16:c7:99:cd:c9:48:57:be:f6:53:
                    03:90:c0:5e:7f:75:4c:ca:37:28:91:07:84:b0:62:
                    b3:fd:6e:53:38:5f:36:8b:fb:ac:e2:5c:38:fa:11:
                    32:8a:01:5d:ae:26:61:f7:af:6a:88:58:98:04:84:
                    13:a6:2a:28:ff:cb:08:ec:38:bc:73:de:72:4e:e2:
                    45:8a:ba:7b:63:a6:dd:95:04:82:72:bf:b4:03:1d:
                    24:c3:19:cc:ab:bb:10:5d:63:ee:d5:aa:13:ad:55:
                    6b:cd:e9:3c:02:e1:c7:9d:8d:fb:66:c3:5e:ad:2d:
                    3e:88:12:c3:45:b7:fd:4d:47:6f:b9:26:e4:e3:cb:
                    ba:53:e2:2f:6e:61:83:dc:f1:59:4b:af:e1:65:f9:
                    95:3b:7d:48:32:29:7b:73:e6:20:f9:af:d0:fc:25:
                    ae:71:d3:4a:6b:fa:b6:1b:64:b2:e2:d6:2f:95:54:
                    23:f8:02:36:c2:38:45:64:f3:5e:79:56:f4:1e:5d:
                    d1:e2:c1:d5:ca:f0:3a:42:c8:d4:32:ec:d0:0b:d4:
                    1e:63:f3:b1:9f:2c:bb:9e:13:9a:5b:d7:4c:2f:2c:
                    9d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FA:78:BE:06:C3:F6:53:AD:32:3D:F7:FC:7C:A6:7F:EB:6A:3D:F5:40
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2b0d4e31-97af-3895-934e-77be32387641.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier: 
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f0:bd:46:e5:8e:aa:ea:c0:7a:5f:12:e5:b6:c4:5c:7f:60:
         50:1e:e2:65:2b:2e:ad:cf:7f:26:1f:48:da:57:6f:97:b4:59:
         80:66:da:55:a6:91:22:39:a3:60:ad:97:53:96:e1:9f:f7:c4:
         99:d0:4a:fe:e2:ba:a6:b1:e1:d9:b1:84:3f:82:23:89:bf:8d:
         e2:59:38:a1:af:a5:a8:4a:9d:32:b7:00:89:e4:5b:4a:95:65:
         e5:e9:f6:27:7c:3a:70:1a:c5:28:fe:47:3d:b0:83:7f:07:9c:
         7f:0b:cf:f5:74:c7:1e:f5:de:f6:bc:48:b4:26:c4:ae:ca:ec:
         31:97:a2:55:7a:b9:76:7b:dc:d8:a6:a3:a6:05:37:26:a9:15:
         d4:32:87:37:60:28:7b:8a:0d:6e:4c:6a:81:1a:67:98:1b:2e:
         73:ba:87:c7:e7:f5:d6:bc:93:dc:63:3f:52:22:14:73:08:a3:
         27:d9:da:6a:ad:9b:8f:aa:fe:6e:f2:27:03:4f:b5:8f:69:20:
         46:f0:8d:ac:cf:68:dc:2d:a0:cd:c1:70:3b:78:e3:96:cf:b6:
         a0:ff:90:f7:9f:ca:39:17:1d:89:14:bd:10:0a:a1:d7:fd:88:
         24:38:7d:78:a6:ff:3e:c7:a0:52:b3:c8:18:6b:00:45:6e:4b:
         1e:89:0f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 02:54:35 2022 by rpki-client.