Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ee30fa32-4a28-35fa-b541-e38595370daf.roa
File:                     ee30fa32-4a28-35fa-b541-e38595370daf.roa (download)
Hash identifier:          zvItWYv6UKyBb3XTGvnjX3k470L92VzOcArYX/SXXgE=
Subject key identifier:   AA:FA:AF:0A:65:B3:E2:65:44:09:9A:15:97:50:3F:EF:9E:87:A7:19
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328583DC93A2FDE62940284CAFDB900
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ee30fa32-4a28-35fa-b541-e38595370daf.roa
ROA valid until:          Dec 31 05:00:00 2023 GMT
asID:                     398712
IP address blocks:
    1: 23.227.72.0/22 maxlen: 22

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c9:3a:2f:de:62:94:02:84:ca:fd:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Dec 31 12:00:00 2021 GMT
            Not After : Dec 31 05:00:00 2023 GMT
        Subject: CN=7b67e1f7-73c6-4287-84f7-47a0d3fa1cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:63:a6:8f:68:2d:9b:f6:3a:c9:0f:5e:06:
                    ba:2e:06:a4:12:01:dc:aa:c7:f7:8f:ea:a3:db:d8:
                    81:01:9b:53:0e:5a:78:1f:b8:55:2c:7f:49:84:23:
                    6b:ab:a9:c1:f9:c5:4d:03:71:47:64:c0:f7:d0:b6:
                    12:1c:bc:5b:60:4f:12:54:60:0a:d2:81:8c:48:69:
                    d3:76:79:8f:8a:3e:0a:00:44:62:96:1e:44:98:91:
                    93:54:32:e8:0d:fe:14:2e:01:ab:63:0e:5c:64:1f:
                    73:93:5e:01:a5:4d:77:a0:3a:8c:b0:11:49:4c:27:
                    bb:41:a5:b1:2c:b3:6d:9c:f9:71:4b:04:5f:4e:44:
                    d6:bc:95:9a:a8:ad:31:56:b6:88:79:13:9f:fe:4b:
                    f1:c1:d2:32:ec:14:45:7f:3f:2d:f5:5e:d0:cd:26:
                    b8:58:b2:2a:b3:63:e4:07:33:0e:b6:2b:f0:1c:06:
                    05:7f:57:41:2c:24:ce:f9:79:42:d0:95:e6:8b:55:
                    37:ac:09:6e:d0:46:0f:37:78:17:7e:82:31:ed:53:
                    43:8d:c2:78:df:99:0e:a4:e3:ca:be:ac:67:6d:45:
                    19:34:d4:73:28:8f:65:1a:fa:cd:96:4c:26:1b:77:
                    0f:12:e8:8c:c9:8f:08:99:7c:14:22:f3:21:9f:9c:
                    a8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AA:FA:AF:0A:65:B3:E2:65:44:09:9A:15:97:50:3F:EF:9E:87:A7:19
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/ee30fa32-4a28-35fa-b541-e38595370daf.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier: 
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:fa:75:f4:48:6b:6e:6c:e1:54:c2:cc:82:0a:ff:5b:17:82:
         56:5b:1c:01:18:66:9f:ab:93:76:60:62:83:9e:45:42:a3:6f:
         4f:4e:a0:a9:2a:6e:88:44:3a:64:ac:dd:0b:09:73:1c:a0:60:
         fb:61:62:8f:f7:c5:73:bb:7a:4d:74:a3:44:c7:4e:dd:75:ee:
         b2:a9:2e:21:9f:2a:32:67:6a:84:4e:97:63:ea:bb:55:8a:f9:
         2f:2f:e5:ce:5d:cd:c6:70:da:fa:ce:fb:96:26:07:85:6d:2b:
         42:90:37:62:f4:f3:7a:ab:2b:8a:5f:8d:cc:4d:13:e5:81:40:
         21:8a:31:71:45:c6:77:ee:f8:c5:5f:0b:fa:95:5d:fc:e0:4d:
         6c:4a:7d:7f:32:42:15:4e:fa:f0:6d:8a:57:2e:7e:c4:d6:37:
         22:f0:bb:63:b4:02:b6:28:32:fa:75:fd:d4:a3:33:a2:75:6d:
         1e:d1:57:0a:23:53:38:91:d3:d4:49:4c:e6:38:bc:7a:b2:a3:
         27:3d:8b:c5:51:22:87:e9:5e:ea:7b:61:55:6f:55:86:d0:98:
         71:02:17:ae:10:87:bb:bc:47:15:e7:7f:e4:ac:1d:67:3d:89:
         3b:0e:2a:64:f0:3b:00:0e:9b:0d:8b:eb:b1:8b:ff:b2:66:f6:
         f6:af:07:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3JOi/eYpQChMr9uQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi
MDRkMB4XDTIxMTIzMTEyMDAwMFoXDTIzMTIzMTA1MDAwMFowLzEtMCsGA1UEAxMk
N2I2N2UxZjctNzNjNi00Mjg3LTg0ZjctNDdhMGQzZmExY2JkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvxjpo9oLZv2OskPXga6LgakEgHcqsf3j+qj
29iBAZtTDlp4H7hVLH9JhCNrq6nB+cVNA3FHZMD30LYSHLxbYE8SVGAK0oGMSGnT
dnmPij4KAERilh5EmJGTVDLoDf4ULgGrYw5cZB9zk14BpU13oDqMsBFJTCe7QaWx
LLNtnPlxSwRfTkTWvJWaqK0xVraIeROf/kvxwdIy7BRFfz8t9V7QzSa4WLIqs2Pk
BzMOtivwHAYFf1dBLCTO+XlC0JXmi1U3rAlu0EYPN3gXfoIx7VNDjcJ435kOpOPK
vqxnbUUZNNRzKI9lGvrNlkwmG3cPEuiMyY8ImXwUIvMhn5yoUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKr6rwpls+JlRAmaFZdQP++eh6cZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3
YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZWUzMGZhMzItNGEyOC0z
NWZhLWI1NDEtZTM4NTk1MzcwZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi
ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw
YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2
N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+NIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFr6dfRIa25s4VTCzIIK/1sXglZbHAEYZp+rk3ZgYoOeRUKjb09OoKkq
bohEOmSs3QsJcxygYPthYo/3xXO7ek10o0THTt117rKpLiGfKjJnaoROl2Pqu1WK
+S8v5c5dzcZw2vrO+5YmB4VtK0KQN2L083qrK4pfjcxNE+WBQCGKMXFFxnfu+MVf
C/qVXfzgTWxKfX8yQhVO+vBtilcufsTWNyLwu2O0ArYoMvp1/dSjM6J1bR7RVwoj
UziR09RJTOY4vHqyoyc9i8VRIofpXup7YVVvVYbQmHECF64Qh7u8RxXnf+SsHWc9
iTsOKmTwOwAOmw2L67GL/7Jm9vavBzI=
-----END CERTIFICATE-----
Generated at Fri Dec 9 15:11:08 2022 by rpki-client.