Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/182fabfc-a07e-31a3-975e-95bbe026dedd.roa
File:                     182fabfc-a07e-31a3-975e-95bbe026dedd.roa (download)
Hash identifier:          xd6790iQhILwui3jtTJrX3AB7s32XsOG0RLOTOLhE+w=
Subject key identifier:   67:B3:50:A9:F0:41:4D:70:01:C7:0C:39:EB:23:3D:99:D8:C7:F5:BD
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328583A33C69CFF131ACA90E183D640
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/182fabfc-a07e-31a3-975e-95bbe026dedd.roa
ROA valid until:          Sep 12 04:00:00 2025 GMT
asID:                     1239
IP address blocks:
    1: 205.178.140.0/24 maxlen: 24
    2: 205.178.141.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:33:c6:9c:ff:13:1a:ca:90:e1:83:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb  9 05:00:00 2021 GMT
            Not After : Sep 12 04:00:00 2025 GMT
        Subject: CN=7bf63aa0-6c95-4626-89e3-ada62c3e0618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:59:92:a0:cd:3d:92:e0:e6:6c:23:2f:2b:
                    b1:b4:76:3e:fb:3c:e6:d9:61:2e:36:78:fb:71:0d:
                    18:d4:00:8a:da:98:75:fa:0d:1b:cf:5f:e1:1f:2c:
                    a2:2f:6b:d1:12:7a:03:8e:e6:22:5d:d2:e6:5f:bd:
                    a8:6f:9c:a2:29:75:75:38:0e:59:f9:ee:8e:38:57:
                    f2:72:f9:79:dd:1b:3a:d8:b4:44:bb:18:ce:c4:59:
                    a7:d0:ca:ea:66:0b:44:bb:9b:59:43:b3:c6:50:bb:
                    14:09:b8:8c:2f:2b:92:48:77:38:cc:8c:b0:0a:0a:
                    03:d4:9d:e8:57:2c:b8:31:f9:cb:34:50:70:f7:c8:
                    67:38:f7:5b:f5:de:0d:8f:00:dc:ed:1c:9e:5a:88:
                    cd:85:d0:2b:a7:0d:4e:12:0b:81:14:5d:f5:b7:68:
                    a8:7a:06:bb:3c:0a:95:3e:07:8b:5a:fd:d5:4f:6d:
                    dc:aa:1e:27:14:48:71:a8:39:ab:9c:ad:32:64:4b:
                    0b:66:e7:b4:d7:10:11:b1:3e:50:5d:32:88:c6:48:
                    ec:cc:6b:8c:e1:20:08:db:48:2b:d6:a9:b5:bd:fb:
                    bf:b7:f1:fd:ab:f8:30:9a:e3:8b:b3:f2:e4:00:a8:
                    99:1c:be:c8:8c:eb:7d:da:79:15:9f:16:d6:ce:19:
                    81:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                67:B3:50:A9:F0:41:4D:70:01:C7:0C:39:EB:23:3D:99:D8:C7:F5:BD
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/182fabfc-a07e-31a3-975e-95bbe026dedd.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier: 
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.178.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e1:b4:b4:1f:bd:e0:66:cb:ef:7b:a4:a3:33:81:9b:63:88:
         17:3a:f6:a7:30:72:35:f8:1a:dd:3e:1a:81:8a:ea:11:5a:fb:
         48:a0:dd:6a:25:36:71:03:ac:f4:38:19:16:a1:34:be:30:3e:
         2d:86:9c:23:68:10:17:b2:4b:08:27:9b:ac:00:94:d5:2f:34:
         84:cd:db:ff:41:6a:10:d3:88:c1:26:b9:4c:e2:7a:b2:af:47:
         60:4b:8b:19:6d:8b:9a:19:50:20:06:04:d9:44:c3:04:53:ed:
         ad:d6:f7:8a:9d:01:2c:10:f1:a3:bd:12:4a:4f:cf:14:e2:c4:
         35:1a:0c:11:22:14:c6:7c:3e:1a:d2:40:3f:ec:be:0c:82:cd:
         8c:34:b9:88:26:23:21:e3:fc:6a:b7:58:d7:f6:58:4d:bd:9d:
         3d:d0:ac:6f:93:47:4f:c2:76:39:75:51:3c:76:31:b6:78:af:
         f8:24:db:0d:2f:b2:2f:ab:97:63:09:d6:fc:1d:35:5d:5a:88:
         84:17:b6:31:e5:ad:dd:9d:a0:86:9c:23:ca:df:fc:a4:8e:5d:
         a6:eb:af:69:8c:a4:d6:00:25:f1:91:c7:47:42:c3:a2:12:7c:
         f0:96:a4:e0:3e:12:3d:8f:4d:f0:f2:01:8e:98:c3:11:bf:87:
         d1:cd:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 08:35:27 2022 by rpki-client.