Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa
File:                     8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa (download)
Hash identifier:          +BKztgCv6YWmfQZ/CV+t/nWbPAKr+o5CN5L42ig0gcE=
Subject key identifier:   88:A5:0E:5C:39:83:4A:6A:78:71:E5:BF:C4:94:9F:FF:97:17:24:48
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328583BBD461C850412AC192C454380
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa
ROA valid until:          Jan 31 05:00:00 2024 GMT
asID:                     399629
IP address blocks:
    1: 64.190.113.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:bd:46:1c:85:04:12:ac:19:2c:45:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Jul  6 04:00:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=639f069f-110e-4486-89d3-8b27b43f8744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:73:2d:f8:30:ec:be:4c:13:00:78:5e:9c:
                    07:93:9f:84:a5:5d:f3:62:b6:1a:ef:b9:5f:d7:32:
                    3a:f8:7a:02:5a:cb:51:f1:de:30:09:96:3d:7e:f8:
                    d7:a5:68:d2:0e:e2:e2:47:14:5c:e3:b1:e2:60:9b:
                    22:b7:23:95:f9:b9:a1:f1:91:9e:2b:88:77:9e:50:
                    16:ab:7f:ad:a5:5c:91:89:e6:ca:11:3d:8f:9e:c0:
                    bc:3d:d4:7e:7b:3c:cb:c5:84:a0:3e:e0:75:52:18:
                    5d:d7:fa:dd:65:c8:6e:8c:79:b0:e8:03:a0:09:94:
                    30:d6:5f:e3:b4:24:88:17:8c:ec:47:6a:06:83:b0:
                    03:0a:aa:18:d6:a6:9f:6f:2b:03:c7:ea:bd:6b:13:
                    b3:b9:45:f6:e6:61:53:3f:43:f0:54:6e:60:93:af:
                    e6:86:40:94:24:f4:1e:1b:23:e3:cd:56:0b:73:c0:
                    a1:53:5f:0b:ae:d7:01:32:9d:0e:bc:6d:4a:db:0d:
                    0e:ec:84:fc:7c:6a:a7:c7:c7:fb:ea:70:dc:e4:21:
                    01:06:7a:f6:9c:c0:b1:72:43:8a:b0:95:41:f2:7c:
                    c2:7e:4a:5a:78:9f:a4:b4:67:3e:a0:a3:18:d8:25:
                    12:4d:4f:1e:90:d0:d7:97:8a:43:6d:a1:08:68:74:
                    e7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                88:A5:0E:5C:39:83:4A:6A:78:71:E5:BF:C4:94:9F:FF:97:17:24:48
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/8ef3c8e2-967a-31de-88cd-6cbdf5b5c664.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier: 
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:88:75:a0:09:25:b1:02:4b:5e:eb:14:4e:1a:64:9f:bb:eb:
         a5:05:54:ef:19:49:90:7f:b2:ec:31:b7:d7:b8:09:f5:ef:da:
         5b:a1:23:fc:66:f3:c4:9e:22:66:a3:ae:b0:90:91:18:ee:db:
         b2:2f:f2:68:a1:ac:1e:c6:12:84:d1:90:fe:96:7f:2d:a1:3b:
         18:d2:21:34:3d:f6:e1:f9:0b:40:ad:76:72:fd:e3:b7:80:0c:
         fa:3d:49:16:a7:06:f4:ef:9b:97:4d:b4:aa:f1:ca:30:5a:f3:
         65:7e:dc:ce:33:a2:7a:47:23:e3:e4:3a:ff:a2:f9:62:8a:80:
         0d:4c:5c:57:db:47:48:05:1b:9e:2f:31:ed:8b:9c:0a:99:7a:
         ca:8b:c6:ac:83:ba:98:5a:e0:14:f8:5e:ff:20:b9:5c:ec:f5:
         ef:78:e4:a4:7e:d6:65:be:2d:f8:5c:f4:be:30:fa:2b:12:f9:
         ac:62:11:e9:ff:6c:34:25:db:2a:f7:00:e4:7d:10:42:e8:f9:
         b5:dc:84:a4:fb:8b:cd:3e:52:73:dd:a2:e6:ce:4e:aa:8f:a5:
         0d:b0:a2:ca:f8:c5:08:b1:0f:06:6a:c4:9d:8c:12:0f:d2:c5:
         be:7d:ca:e6:22:1d:77:14:95:c2:c8:ab:b4:db:93:22:ce:03:
         9e:8a:39:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 15:11:10 2022 by rpki-client.