Route Origin Authorization

$ cd rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/

$ rpki-client -vvf 3a2c4273-a1cb-38b1-8a1d-0c6372085fb0.roa
File:                     3a2c4273-a1cb-38b1-8a1d-0c6372085fb0.roa (download)
Hash identifier:          sTMM1g6jyZdMy/5yvCeAskNgsHhDUXtFeexvZNKFoNw=
Subject key identifier:   B8:4E:0D:EF:E9:18:54:B8:BF:2A:BD:1A:86:C1:33:9F:FF:63:EF:94
Certificate issuer:       /CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
Certificate serial:       010D0C9F4328583B12D8165FD53FBD3C5F19B200
Authority key identifier: 39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/3a2c4273-a1cb-38b1-8a1d-0c6372085fb0.roa
ROA valid until:          Dec 01 05:00:00 2029 GMT
asID:                     1239
IP address blocks:
    1: 2605:5fc0::/28 maxlen: 28

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:12:d8:16:5f:d5:3f:bd:3c:5f:19:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
        Validity
            Not Before: Apr 30 04:00:00 2021 GMT
            Not After : Dec  1 05:00:00 2029 GMT
        Subject: CN=a7c02fa0-83f6-44cf-817f-7814f4e88d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:5f:2c:b1:1c:1e:53:1f:dc:c1:76:6f:42:
                    08:3d:1c:f6:fb:8b:a5:55:2f:24:7c:7e:b2:3d:4d:
                    c8:8f:f5:53:ca:5f:49:89:28:a6:c0:6e:9d:00:6d:
                    80:96:d0:a8:5f:cd:54:26:f2:82:c5:e0:4b:40:f4:
                    a5:b1:bb:b3:31:0a:b7:f6:2c:92:7a:9e:51:ce:0e:
                    37:99:e7:27:42:2c:2f:58:4b:29:d7:e8:b3:9d:a0:
                    89:3d:ba:66:c2:a2:ad:1e:24:68:e9:dd:b9:3e:f6:
                    27:6e:ed:a2:45:4c:89:25:6b:c0:93:65:c6:66:b7:
                    cb:1e:76:18:1b:02:cc:f6:bc:d8:9a:62:31:d9:30:
                    d7:f1:18:cc:1f:14:3c:56:ae:77:b9:b8:46:cd:df:
                    b3:66:b4:71:7e:12:a4:4a:38:9c:b2:d9:0e:bb:12:
                    eb:76:c0:02:8c:53:4a:0b:de:09:25:7e:76:4d:08:
                    d8:6b:43:64:a2:8f:28:12:fc:81:40:be:bb:94:ff:
                    dd:9a:37:aa:22:fc:7d:b4:c0:db:9c:47:67:47:09:
                    64:65:03:6f:62:44:49:a6:81:5b:bd:b5:0e:7f:a4:
                    8d:5b:89:d0:17:16:64:c0:5d:34:1a:d6:c8:f2:a5:
                    66:55:5f:11:f9:2c:fe:f0:a6:e2:ad:16:3c:f4:e8:
                    dd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B8:4E:0D:EF:E9:18:54:B8:BF:2A:BD:1A:86:C1:33:9F:FF:63:EF:94
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/3a2c4273-a1cb-38b1-8a1d-0c6372085fb0.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.crl

            X509v3 Authority Key Identifier: 
                keyid:39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:5fc0::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:90:ce:66:96:e7:0e:8b:40:79:9d:a4:49:69:8a:71:81:b5:
         d0:97:6f:f9:b3:11:63:11:3a:10:1d:cf:09:82:04:eb:9e:29:
         57:74:17:a2:1e:3f:14:96:f7:1a:87:61:9a:35:e7:5e:3a:8d:
         8a:d5:f8:0b:a2:21:e8:28:ae:ba:a8:64:cb:55:72:2b:2a:ea:
         cb:c2:74:87:ca:bf:32:38:e1:d4:12:94:8d:4e:75:b3:49:ef:
         53:2e:39:cd:a2:b6:ff:a8:c7:12:be:c3:cf:33:dc:9d:32:71:
         5b:34:b1:73:48:e5:8f:22:97:d3:0d:44:a3:5a:50:c0:9b:e3:
         87:e8:1d:8a:96:c5:99:ad:0d:13:34:da:8c:ab:98:7b:e8:13:
         88:49:6b:6d:87:99:b5:07:28:5a:0e:e6:3c:79:cf:ce:67:59:
         d5:42:b4:55:5e:e8:f5:4e:f8:d4:ba:57:eb:f7:b2:c4:2c:86:
         d6:db:04:55:22:1a:ca:f7:97:d6:07:4e:86:03:ae:83:ab:ce:
         3d:51:89:5e:9f:08:0f:28:be:43:24:2b:07:32:78:53:06:8d:
         e0:22:42:e9:f7:e7:3a:b7:69:9a:a4:cc:09:dd:43:6f:b8:63:
         02:29:4a:56:c8:8c:b6:b9:16:47:52:c3:d7:f7:8e:af:f9:07:
         21:44:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 2 13:30:56 2022 by rpki-client.