Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4faa49ca-c0ef-30cb-8bca-0b83e2fc9fc8.roa
File:                     4faa49ca-c0ef-30cb-8bca-0b83e2fc9fc8.roa (download)
Hash identifier:          KriF20W+bGEXRQQMRy1xfslvM+XBj8SbjyObDOoxKzk=
Subject key identifier:   92:B1:B3:51:93:8C:53:5A:40:3A:0F:C6:38:B9:1A:AD:04:6D:9B:90
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328583DF06576200DE213B53F171980
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4faa49ca-c0ef-30cb-8bca-0b83e2fc9fc8.roa
ROA valid until:          Aug 19 04:00:00 2024 GMT
asID:                     1239
IP address blocks:
    1: 158.62.198.0/23 maxlen: 23

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f0:65:76:20:0d:e2:13:b5:3f:17:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb  9 14:22:45 2021 GMT
            Not After : Aug 19 04:00:00 2024 GMT
        Subject: CN=86826f21-a098-47bb-9fdd-4a0acf783145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:32:91:2d:43:84:7b:16:21:5e:e3:69:42:06:
                    8c:3e:3f:2b:7a:4b:33:60:b4:22:0e:7b:3c:bf:de:
                    a0:34:1c:51:aa:d3:c4:1f:a2:4d:1e:02:92:cc:80:
                    53:59:72:af:e7:cb:b8:37:f9:c1:72:73:00:fe:f4:
                    b2:04:25:6b:70:c2:17:5e:ef:6d:47:d0:26:b6:e4:
                    b9:ee:57:d1:c6:bf:f2:88:87:2a:b9:d2:49:85:4e:
                    3d:a7:69:10:61:d3:7f:b9:61:d8:27:52:6d:07:53:
                    b6:c2:e8:18:fd:5c:58:98:df:11:66:19:18:68:ae:
                    7b:33:71:51:b2:1a:5d:39:65:d0:ed:11:4e:a1:ad:
                    78:d1:bb:11:c1:9f:d1:a1:80:59:1b:6b:9c:46:be:
                    4e:da:1a:49:25:3b:a3:7d:f8:2a:89:d3:c0:12:80:
                    53:d2:86:64:c7:ae:0c:75:94:04:3e:5e:78:85:6a:
                    bb:bb:ce:77:aa:13:08:1d:53:1c:5b:c6:11:14:c9:
                    8b:ab:3a:17:bb:d4:8c:65:54:fc:0e:2c:0d:05:a0:
                    ec:a4:51:1f:59:ec:4e:cc:bc:e5:3b:a0:ff:84:ee:
                    40:56:48:d0:07:3b:7c:27:82:fa:f1:de:55:37:92:
                    50:3f:1f:e0:01:09:a9:f7:c1:c5:e7:db:ef:2c:4a:
                    1e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                92:B1:B3:51:93:8C:53:5A:40:3A:0F:C6:38:B9:1A:AD:04:6D:9B:90
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4faa49ca-c0ef-30cb-8bca-0b83e2fc9fc8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier: 
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.62.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:83:56:59:d3:3d:c8:56:b9:13:e9:5d:b5:b7:75:db:65:03:
         76:30:13:79:28:54:46:c7:05:4a:ae:46:8f:3c:37:65:d1:d6:
         4c:5d:d6:fd:4d:06:a4:6c:5d:56:83:03:4f:60:aa:da:49:14:
         66:09:cd:5a:49:76:b1:cf:33:eb:ee:d9:30:2d:ee:70:00:3d:
         4f:1a:53:26:88:80:ef:72:c9:0b:46:37:f8:62:53:94:ce:06:
         94:2f:27:40:d2:1a:1c:25:f3:16:70:61:ac:5e:5a:de:c3:55:
         bc:cc:3c:10:71:4c:db:19:3e:9d:32:00:87:cf:2c:31:00:af:
         98:2e:f1:ea:27:27:4f:23:8d:4f:89:f6:c2:61:2a:16:54:5b:
         11:29:a2:1b:c2:0b:82:b2:8c:89:79:8c:f9:8d:ba:4d:6c:e6:
         02:28:6a:93:91:86:a3:2c:15:ec:19:6a:6b:cb:d0:c7:b1:ba:
         16:49:7c:35:03:8c:b4:4c:f4:69:71:f4:75:d6:40:cb:e9:31:
         3c:67:02:70:6e:11:3e:9c:48:f6:33:fe:12:a8:30:8d:98:3e:
         dc:f5:13:99:10:50:b9:f9:56:61:96:4f:9f:c4:34:96:7a:43:
         1c:cf:44:32:81:3e:f8:27:c8:67:d2:c0:ea:60:3b:67:db:bf:
         b8:36:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 10:28:26 2022 by rpki-client.