Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/b0cfe959-a4d1-3bea-802f-61976aba045a.roa
File:                     b0cfe959-a4d1-3bea-802f-61976aba045a.roa (download)
Hash identifier:          KUyfWhB9rjixhVADNidJBZzCv0aVnJW5KMi/ZVMAOyE=
Subject key identifier:   61:1B:94:15:A1:FE:B2:AA:EB:30:FB:1A:73:53:E2:E1:FB:4A:0A:6A
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F4328583CE2F5FE413357EFE60E666F80
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/b0cfe959-a4d1-3bea-802f-61976aba045a.roa
ROA valid until:          May 15 04:00:00 2024 GMT
asID:                     1239
IP address blocks:
    1: 207.170.168.0/23 maxlen: 23

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e2:f5:fe:41:33:57:ef:e6:0e:66:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Mar 15 04:00:00 2021 GMT
            Not After : May 15 04:00:00 2024 GMT
        Subject: CN=22a3e3f2-fc9f-4c16-b1ba-417c96468fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:a5:a2:dd:fc:9d:65:88:ca:fd:62:0d:6a:
                    0e:a2:13:76:5b:b1:f5:0e:30:1e:f6:cc:d7:63:b3:
                    89:85:36:b4:13:41:b0:ac:53:31:11:40:02:41:a7:
                    ce:35:d6:55:12:da:fe:6a:e7:64:99:46:c6:37:d0:
                    31:70:12:3e:e8:71:d5:44:c6:c3:e8:98:16:4d:0f:
                    e2:58:b1:ae:2e:51:c0:af:78:17:2f:97:9d:9b:8f:
                    e4:fa:fd:b8:27:81:02:c9:11:cf:47:25:f0:57:0d:
                    5a:12:40:ed:1f:76:2c:f4:a1:e0:23:07:42:57:98:
                    b5:aa:8a:39:6d:f9:e5:03:09:31:91:5c:0e:0d:9a:
                    fc:01:2a:23:99:e2:77:71:ae:26:9a:cf:20:78:5c:
                    e6:d8:fb:ed:d3:77:94:c0:44:63:b9:e8:eb:b5:69:
                    a1:81:a3:d4:99:a5:e2:45:85:20:de:dc:bd:da:7d:
                    26:95:34:62:fe:ed:f2:b2:e8:9c:d6:5d:2d:cd:9a:
                    1f:24:e7:23:24:47:5f:59:40:68:b9:56:df:b9:7c:
                    a2:74:03:bb:ac:da:29:72:dc:5b:4b:61:cf:87:5b:
                    cc:1a:bb:77:63:a4:63:c7:b8:57:a4:13:ac:e4:12:
                    02:b2:c1:71:38:d0:bb:40:ed:76:c7:52:b8:61:f5:
                    a9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                61:1B:94:15:A1:FE:B2:AA:EB:30:FB:1A:73:53:E2:E1:FB:4A:0A:6A
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/b0cfe959-a4d1-3bea-802f-61976aba045a.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier: 
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:5c:a8:d9:fb:6d:08:5d:f0:f3:21:04:d9:ee:c3:9c:b1:
         93:1f:21:5e:84:98:d7:b0:a3:0a:98:85:e9:58:c4:2c:e8:3c:
         81:b5:08:c9:6e:93:4c:12:29:e0:ef:d8:e0:13:08:ea:bb:47:
         c1:29:45:6c:a6:de:54:0b:27:66:c6:b9:43:cf:8f:6a:8c:88:
         15:99:f0:f0:d3:b4:44:41:4e:61:8d:7c:56:74:8e:a0:47:a6:
         b4:05:66:39:c7:a2:17:2c:39:b5:c6:98:d1:65:6a:df:73:25:
         3b:e5:80:3d:b3:09:b9:8c:37:ea:7b:21:f8:6c:94:bc:8b:2f:
         a1:90:53:5c:d9:c6:c3:5f:fa:e3:fa:97:d2:89:e0:ad:5e:5f:
         00:af:ce:02:fd:f5:d1:5a:8a:07:b8:2e:a0:ba:31:3c:24:35:
         c9:1b:fc:f8:fe:d4:16:15:cb:c3:5c:cc:a9:03:e2:06:c2:01:
         92:df:5a:a0:66:4e:7d:19:77:7d:6d:5f:74:71:01:76:a7:b7:
         60:ae:50:8c:b7:cc:d5:18:eb:b9:4e:87:df:93:45:5f:37:d7:
         63:4c:05:0e:e1:dc:b8:80:3e:db:fe:6e:6c:8e:1c:e6:3c:8c:
         17:bc:23:d3:83:fc:f4:cb:f6:59:df:9d:d8:27:64:c6:e0:a7:
         0c:6b:ca:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 07:57:41 2022 by rpki-client.