Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/99e77285-3c2b-3fae-96c0-463d87b57b40.roa
File:                     99e77285-3c2b-3fae-96c0-463d87b57b40.roa (download)
Hash identifier:          dDykB8q5gOvjdnbUn1doLoJOYoKBZV6fxasjW5qM/CY=
Subject key identifier:   CD:1F:3D:88:97:78:E8:C7:18:D3:0A:EB:B7:8A:01:30:E0:FC:54:1A
Certificate issuer:       /CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
Certificate serial:       010D0C9F4328583F549C147E9FC9ED31AABE6CB8
Authority key identifier: C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/99e77285-3c2b-3fae-96c0-463d87b57b40.roa
ROA valid until:          Jan 07 05:00:00 2031 GMT
asID:                     399214
IP address blocks:
    1: 23.141.104.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:54:9c:14:7e:9f:c9:ed:31:aa:be:6c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f0e7ce9-55d4-4382-b894-aaca89f2dfd1
        Validity
            Not Before: Sep 22 18:54:08 2022 GMT
            Not After : Jan  7 05:00:00 2031 GMT
        Subject: CN=1fbf17af-84ce-40e0-badd-828117ea2cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:14:10:00:7c:e2:c2:ca:01:6d:4e:2e:31:d9:
                    0a:5c:d3:17:5d:4a:72:31:e1:f0:00:fc:6a:01:85:
                    82:fb:0d:47:ae:a0:6c:eb:cf:3e:6e:eb:5a:cb:7a:
                    43:ac:e1:12:13:90:b0:6d:4c:f1:46:f6:e1:f2:92:
                    2f:06:f3:fd:f1:68:88:87:3b:f4:ef:26:c7:2f:78:
                    46:18:3a:0c:51:a2:33:78:0d:5f:36:bb:91:0c:81:
                    2e:a1:0a:91:49:76:f8:8f:8e:91:d6:7c:b6:85:95:
                    63:cd:53:28:e0:c7:31:8b:8f:f2:c3:e5:83:fc:76:
                    50:fa:09:cd:63:36:17:53:e7:82:9b:f1:6a:94:2b:
                    9c:5d:6d:6c:82:23:eb:e6:2d:c0:9a:22:4f:62:93:
                    eb:d3:f4:49:4b:a7:62:f1:99:18:c9:37:c0:6f:f3:
                    0f:3f:f9:f7:67:e6:9b:fc:01:bb:b5:4c:7e:6f:20:
                    3e:0a:71:d8:c4:db:5b:74:68:25:a0:94:65:5b:4e:
                    a5:ad:ee:f9:80:db:2d:c1:a7:39:29:64:74:a9:3e:
                    d3:7f:59:34:b6:21:fc:76:84:60:67:7a:c6:7d:7f:
                    7b:4a:2e:8f:ad:46:f5:d9:88:83:f8:47:aa:fa:da:
                    9b:24:b0:aa:96:f8:df:bd:4e:64:86:d7:98:f4:26:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                CD:1F:3D:88:97:78:E8:C7:18:D3:0A:EB:B7:8A:01:30:E0:FC:54:1A
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/99e77285-3c2b-3fae-96c0-463d87b57b40.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.crl

            X509v3 Authority Key Identifier: 
                keyid:C7:0C:91:93:7D:6D:69:77:4A:31:59:ED:C6:EA:84:A3:F4:F7:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f0e7ce9-55d4-4382-b894-aaca89f2dfd1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:37:ec:5c:c5:21:a6:d2:eb:ae:b0:49:00:f9:35:3e:1c:f3:
         04:67:65:7e:16:6a:bd:5c:63:f5:2a:79:5c:3c:94:01:a5:e0:
         0a:7a:89:f4:bb:f5:b8:a2:6c:3c:12:b3:40:20:79:43:e3:30:
         02:16:d6:9d:e9:19:2e:b5:52:d8:52:07:aa:4d:07:1d:3b:8f:
         f6:14:e7:fb:08:e3:cc:86:7e:f0:ad:db:b8:f8:e4:b9:9e:80:
         89:81:8e:e4:8b:45:0a:04:25:ab:28:db:64:4f:04:2a:9a:84:
         9a:0c:7f:b9:70:34:96:a8:6c:c3:a5:ae:84:d9:e6:28:ea:48:
         7a:69:68:36:c6:fb:62:25:59:07:c7:00:3d:4c:87:75:93:d8:
         fd:5f:5c:ef:a0:6b:3c:ed:a2:7b:a6:1b:04:74:bd:f3:1d:d1:
         81:4c:35:5d:05:af:e6:dd:69:ce:86:e9:db:7a:84:79:35:8d:
         a4:cc:03:25:d9:8f:0a:ed:49:a4:68:3b:11:71:75:fb:29:7e:
         c8:02:f3:59:fd:e8:a7:9f:68:f9:bc:bb:e4:83:12:10:03:73:
         9d:0d:e9:48:cc:3e:23:47:80:4d:f4:e5:07:7c:a1:df:73:38:
         7a:32:87:1e:c8:9e:ab:79:a4:87:20:aa:60:59:65:20:5b:60:
         66:9a:ca:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9UnBR+n8ntMaq+bLgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmYwZTdjZTktNTVkNC00MzgyLWI4OTQtYWFjYTg5ZjJk
ZmQxMB4XDTIyMDkyMjE4NTQwOFoXDTMxMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MWZiZjE3YWYtODRjZS00MGUwLWJhZGQtODI4MTE3ZWEyY2JlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghQQAHziwsoBbU4uMdkKXNMXXUpyMeHwAPxq
AYWC+w1HrqBs688+butay3pDrOESE5CwbUzxRvbh8pIvBvP98WiIhzv07ybHL3hG
GDoMUaIzeA1fNruRDIEuoQqRSXb4j46R1ny2hZVjzVMo4Mcxi4/yw+WD/HZQ+gnN
YzYXU+eCm/FqlCucXW1sgiPr5i3AmiJPYpPr0/RJS6di8ZkYyTfAb/MPP/n3Z+ab
/AG7tUx+byA+CnHYxNtbdGgloJRlW06lre75gNstwac5KWR0qT7Tf1k0tiH8doRg
Z3rGfX97Si6PrUb12YiD+Eeq+tqbJLCqlvjfvU5khteY9CanvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM0fPYiXeOjHGNMK67eKATDg/FQaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBl
N2NlOS01NWQ0LTQzODItYjg5NC1hYWNhODlmMmRmZDEvOTllNzcyODUtM2MyYi0z
ZmFlLTk2YzAtNDYzZDg3YjU3YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmYwZTdjZTktNTVkNC00MzgyLWI4
OTQtYWFjYTg5ZjJkZmQxLzJmMGU3Y2U5LTU1ZDQtNDM4Mi1iODk0LWFhY2E4OWYy
ZGZkMS5jcmwwHwYDVR0jBBgwFoAUxwyRk31taXdKMVntxuqEo/T3CpAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yZjBlN2NlOS01NWQ0LTQzODItYjg5NC1hYWNh
ODlmMmRmZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF41oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADw37FzFIabS666wSQD5NT4c8wRnZX4War1cY/UqeVw8lAGl4Ap6ifS7
9biibDwSs0AgeUPjMAIW1p3pGS61UthSB6pNBx07j/YU5/sI48yGfvCt27j45Lme
gImBjuSLRQoEJaso22RPBCqahJoMf7lwNJaobMOlroTZ5ijqSHppaDbG+2IlWQfH
AD1Mh3WT2P1fXO+gazztonumGwR0vfMd0YFMNV0Fr+bdac6G6dt6hHk1jaTMAyXZ
jwrtSaRoOxFxdfspfsgC81n96KefaPm8u+SDEhADc50N6UjMPiNHgE305Qd8od9z
OHoyhx7Inqt5pIcgqmBZZSBbYGaaypA=
-----END CERTIFICATE-----
Generated at Thu Dec 8 06:42:34 2022 by rpki-client.