Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/982ab640-7a3e-3ba8-bc9c-0d7448b20820.roa
File:                     982ab640-7a3e-3ba8-bc9c-0d7448b20820.roa (download)
Hash identifier:          1d8GChRdNFDM4BVrHBZ92P3Uv0NzKEhDJlVKNsm70Zw=
Subject key identifier:   48:EC:9E:B1:0F:FB:4B:77:FD:70:98:42:18:66:D4:3C:F3:32:42:0E
Certificate issuer:       /CN=293ffb60-5163-4ccd-8c12-c520cba4608b
Certificate serial:       010D0C9F4328583A5C6A85AB753ECCB7D8C81B00
Authority key identifier: 6D:A3:88:72:CF:F2:A2:88:34:FF:26:E8:6E:73:11:06:0D:DF:B1:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/982ab640-7a3e-3ba8-bc9c-0d7448b20820.roa
ROA valid until:          Sep 26 04:00:00 2023 GMT
asID:                     42495
IP address blocks:
    1: 208.76.214.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:5c:6a:85:ab:75:3e:cc:b7:d8:c8:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293ffb60-5163-4ccd-8c12-c520cba4608b
        Validity
            Not Before: Jan 13 05:00:00 2021 GMT
            Not After : Sep 26 04:00:00 2023 GMT
        Subject: CN=24b9d0fb-6c15-4d6f-a2a0-770381e8b75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:78:da:80:0f:3a:8a:d4:a1:45:e5:33:20:2c:
                    e3:12:06:23:cb:9e:ce:71:3d:0f:66:06:d5:03:73:
                    46:0f:e9:40:06:79:69:86:d7:37:a5:4e:37:1c:9d:
                    36:e0:fa:4f:7c:b4:05:fd:65:bf:1c:09:be:f6:fa:
                    00:49:3c:72:d9:04:fd:47:82:0f:e8:2d:24:d8:c4:
                    c8:ef:33:59:a4:73:15:5f:a0:73:ad:7c:e4:32:25:
                    9c:72:8c:90:85:c1:25:b6:ac:42:56:37:c5:19:ef:
                    b8:58:6c:0f:cc:96:13:5d:81:46:a9:ae:d5:4f:0c:
                    57:5e:7b:c5:b5:9d:8c:bc:8b:04:ca:45:a7:ee:0f:
                    0a:3c:0c:f2:f2:50:18:1a:8d:b3:45:62:fd:c4:56:
                    b0:d2:ef:bd:46:c4:80:3c:c3:e0:23:f4:b3:60:78:
                    90:60:30:68:4c:4d:40:41:f9:d1:68:ed:d4:d4:d6:
                    1f:85:fe:7c:a9:76:71:8d:71:83:01:31:59:8d:34:
                    ec:e8:43:23:37:d9:58:41:7a:ee:be:38:3e:97:7b:
                    4b:f1:6d:fe:28:c2:82:15:e3:18:15:6a:91:77:68:
                    2b:1e:b8:fb:49:10:e6:f4:ee:f2:1f:18:07:4a:55:
                    e6:13:0c:5b:30:5f:bd:1a:f9:83:ab:93:90:eb:07:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                48:EC:9E:B1:0F:FB:4B:77:FD:70:98:42:18:66:D4:3C:F3:32:42:0E
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/982ab640-7a3e-3ba8-bc9c-0d7448b20820.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/293ffb60-5163-4ccd-8c12-c520cba4608b.crl

            X509v3 Authority Key Identifier: 
                keyid:6D:A3:88:72:CF:F2:A2:88:34:FF:26:E8:6E:73:11:06:0D:DF:B1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c4:26:d0:7e:2c:61:9f:6e:7c:f6:1a:33:1c:01:2b:82:4c:
         c6:14:88:43:63:f1:3c:2d:e6:c9:20:e8:a5:00:0b:ea:af:03:
         c9:f1:a3:59:be:34:ac:b1:c9:b3:df:72:29:52:59:3a:4a:50:
         f4:b9:a7:08:45:70:fe:64:d3:9b:85:93:79:7f:f3:29:c4:ca:
         7a:f6:76:d5:fc:f4:8b:5c:5c:99:47:b6:06:92:fd:b0:c0:6d:
         7c:b9:f7:f7:62:bc:3b:e3:63:71:5e:df:d8:16:f8:bd:2f:8e:
         06:c6:5b:51:19:87:bc:3f:01:8e:98:25:6c:05:63:e3:8d:7f:
         1e:65:e8:85:f4:55:47:be:c7:7a:b7:44:4f:87:9f:46:4a:2c:
         7e:1c:ad:58:bf:e9:5d:b6:04:fc:89:2f:a2:93:20:6a:2c:be:
         4e:f7:c6:80:28:43:e7:84:1e:15:38:41:f9:4c:89:6e:13:aa:
         38:f5:af:10:26:96:02:09:8b:e6:40:62:f6:da:d6:37:e1:7e:
         f7:71:31:39:4f:96:93:41:8c:c6:46:88:12:58:ec:85:4a:d0:
         0d:1a:3f:ad:a1:13:79:7f:11:a1:a7:3b:5e:3a:27:16:af:44:
         7e:63:46:b8:09:6d:18:56:85:8e:51:ed:18:ce:0b:8a:d0:5b:
         ab:a6:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 07:19:56 2022 by rpki-client.