Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/9f84bbae-d781-39b8-9b96-b6742b7265bc.roa
File:                     9f84bbae-d781-39b8-9b96-b6742b7265bc.roa (download)
Hash identifier:          SRDHXFnkmp1qSCBEBbUBuqaV8j6FHJk5njJPu+B/LLc=
Subject key identifier:   26:14:F7:E4:F2:D8:F7:C6:70:DE:36:F9:C6:EF:0A:52:ED:8C:F8:69
Certificate issuer:       /CN=0bbd7116-cabc-49d5-9974-d2b462e020b9
Certificate serial:       010D0C9F4328583C35A5D8BAE5924489364D0600
Authority key identifier: B4:E1:76:78:98:DF:2D:20:43:6D:AA:88:45:BE:C7:A5:17:F4:83:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/9f84bbae-d781-39b8-9b96-b6742b7265bc.roa
ROA valid until:          Mar 14 04:00:00 2024 GMT
asID:                     400283
IP address blocks:
    1: 2602:fbf9::/40 maxlen: 40

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:35:a5:d8:ba:e5:92:44:89:36:4d:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bbd7116-cabc-49d5-9974-d2b462e020b9
        Validity
            Not Before: Dec 10 05:00:00 2021 GMT
            Not After : Mar 14 04:00:00 2024 GMT
        Subject: CN=23123e5f-821e-4c25-a84c-d7618d5e8dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5d:06:75:49:31:82:89:d1:24:84:d2:fe:26:
                    bc:99:f8:ce:a9:85:cf:13:00:0f:b0:16:4f:ca:79:
                    66:5e:ab:52:2c:a4:58:ee:42:b1:fb:eb:67:98:9d:
                    e7:8c:2a:e0:4b:23:89:99:ef:5d:b6:91:f4:3c:59:
                    b8:cf:a2:b6:a4:57:24:12:d3:b6:a8:f1:90:38:73:
                    e6:4d:c9:13:9f:1e:b0:97:19:b2:fe:1c:b2:c1:f9:
                    03:ff:7c:c2:a9:64:da:0c:fe:a7:68:61:c0:d2:5b:
                    d1:9a:b3:f9:9c:69:40:0f:60:ed:ea:91:7e:0e:91:
                    73:2d:d5:51:74:d8:80:e7:61:e5:9b:9a:1f:5e:04:
                    9e:9f:ae:73:7b:9e:1c:7b:be:fa:15:9b:bb:1d:93:
                    5e:79:cf:53:5c:84:59:4d:87:f3:ba:86:64:2c:00:
                    54:90:6c:6f:27:6a:42:fb:72:8e:b9:66:96:18:56:
                    8e:3c:0e:11:11:77:ea:ec:d4:9a:e9:7e:36:47:d7:
                    21:2a:73:b0:0e:4c:2a:f4:bc:95:e2:87:b4:8f:57:
                    0d:d3:dd:1f:98:83:d4:14:ac:bc:8b:43:9b:1e:76:
                    89:70:47:62:6e:d8:61:78:2a:32:c1:b5:67:73:cf:
                    18:7c:6a:5a:7d:03:3d:5f:8d:2b:2c:2d:fa:40:27:
                    6a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                26:14:F7:E4:F2:D8:F7:C6:70:DE:36:F9:C6:EF:0A:52:ED:8C:F8:69
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/9f84bbae-d781-39b8-9b96-b6742b7265bc.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9/0bbd7116-cabc-49d5-9974-d2b462e020b9.crl

            X509v3 Authority Key Identifier: 
                keyid:B4:E1:76:78:98:DF:2D:20:43:6D:AA:88:45:BE:C7:A5:17:F4:83:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0bbd7116-cabc-49d5-9974-d2b462e020b9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf9::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:a5:b3:a0:41:34:d1:7b:51:15:2c:e2:d9:d1:60:7f:1b:aa:
         43:e1:86:c3:07:68:84:3e:b4:44:1e:c0:6c:20:06:5a:9e:d2:
         26:91:4f:07:14:84:80:90:3f:cb:d8:ee:b0:e3:e1:ca:11:c1:
         74:31:24:3c:09:5f:e4:72:73:59:2d:13:2c:94:2e:bc:fa:63:
         4e:6a:00:6f:56:cd:65:6d:e3:7a:e0:81:5a:f6:0c:86:ee:c3:
         ab:99:15:ad:a4:c4:11:ae:e9:b4:db:0f:e3:78:d5:4d:03:0f:
         ab:2e:31:65:44:67:41:4f:60:d0:91:f1:ee:6b:ab:7d:46:27:
         4e:67:1b:17:9d:70:5c:5a:6b:2f:2c:7f:d4:94:ee:74:4b:1e:
         83:be:26:d3:d6:e7:0b:e5:b8:dd:b9:07:5d:bb:00:65:9a:35:
         e7:9f:02:71:9c:34:f9:f4:f5:a7:ec:45:9d:0a:6c:bf:71:2e:
         2c:f9:fc:dc:05:11:3b:08:0b:e2:49:15:18:be:5d:89:30:70:
         10:d1:89:06:28:ac:cf:d2:8d:39:24:aa:bb:0c:58:29:94:b9:
         bb:42:26:41:63:78:87:c7:25:6c:8a:68:7f:b2:4f:e9:47:49:
         f1:8d:63:38:d8:80:b1:d8:59:20:08:31:ab:1a:58:c5:37:2c:
         28:70:0b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 15:11:09 2022 by rpki-client.