Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b39d48de-cdbc-367d-a5bf-db343e4bd856.roa
File:                     b39d48de-cdbc-367d-a5bf-db343e4bd856.roa (download)
Hash identifier:          q1qIPhTRSDkNbN4xg+gj8FEu5f6bNBiCoJEO+3DEl2Q=
Subject key identifier:   43:FC:43:DA:8D:B5:C7:E8:13:10:F3:BA:DB:A9:87:7C:DC:9A:61:10
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328583BCC234EBC2C8CB67C065E477E
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b39d48de-cdbc-367d-a5bf-db343e4bd856.roa
ROA valid until:          Feb 05 05:00:00 2024 GMT
asID:                     1239
IP address blocks:
    1: 198.145.96.0/20 maxlen: 20
    2: 198.145.72.0/21 maxlen: 21

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:cc:23:4e:bc:2c:8c:b6:7c:06:5e:47:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Oct  7 04:00:00 2021 GMT
            Not After : Feb  5 05:00:00 2024 GMT
        Subject: CN=0a9de556-aace-4cb8-a461-82ae15927056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2b:8c:39:c8:84:b2:ae:d1:df:a9:6d:43:67:
                    4d:e4:a8:ca:17:2f:b5:5d:c3:3e:8c:0d:0c:8e:bf:
                    1d:87:72:ef:23:e4:75:2e:49:40:e3:8d:8d:32:d3:
                    1d:cd:cd:f0:fc:1f:40:38:8f:b1:ac:f7:0c:d5:9f:
                    0d:b3:6a:2e:f8:2d:a6:dc:7f:af:30:cd:7b:6a:dd:
                    0f:8b:4b:46:70:e4:1a:ed:51:0e:ad:8e:f7:7c:3c:
                    67:f8:f6:d8:48:d9:2c:70:b7:15:16:61:e9:31:1b:
                    00:54:6c:0d:11:f5:91:22:a3:1e:e1:dd:56:26:f0:
                    5b:ef:3b:87:dc:18:ed:53:7c:26:78:42:32:f5:20:
                    e9:52:48:0a:54:5c:e9:73:ee:f1:95:b0:d7:d3:10:
                    fd:1f:1e:3c:b6:7c:8f:17:22:ad:7b:2f:96:2c:de:
                    10:78:14:09:62:4b:d8:c0:25:b6:12:68:59:59:ca:
                    4c:cd:bd:fd:05:c1:e5:1b:8f:45:c9:bf:5e:b6:c1:
                    4f:f6:47:26:62:35:5d:49:d7:5e:5c:f7:e8:ce:f9:
                    ba:19:53:68:69:7f:1b:66:fb:7a:c6:35:0f:e4:fc:
                    d5:db:b1:0c:8e:1a:91:59:98:e7:1a:9f:19:49:b3:
                    80:7f:db:7c:3d:a4:24:dd:0a:0f:5c:9f:5b:7f:f6:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                43:FC:43:DA:8D:B5:C7:E8:13:10:F3:BA:DB:A9:87:7C:DC:9A:61:10
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b39d48de-cdbc-367d-a5bf-db343e4bd856.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier: 
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.72.0/21
                  198.145.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:44:26:64:ac:0b:07:e8:28:dc:ff:05:47:68:d9:ca:e8:a0:
         ea:e8:d0:fc:80:66:7e:91:12:13:18:25:9f:6d:29:91:5f:aa:
         13:dd:8b:ad:88:45:03:a9:4f:09:38:69:d2:39:70:c4:06:86:
         18:ef:81:69:fd:fe:19:2d:cd:c4:e8:e1:87:da:dd:da:75:4e:
         da:92:aa:1d:16:a3:b0:45:cd:07:85:0e:fc:90:5e:e8:7b:a2:
         28:2a:21:ff:79:68:da:21:17:2b:a7:33:f8:3c:30:f7:89:b2:
         ea:39:75:05:01:da:21:61:39:11:ef:76:2f:bf:fd:da:da:e9:
         1f:98:e7:a9:21:37:0c:21:42:c5:4d:22:a3:36:b4:98:90:c5:
         e6:5a:4e:64:56:ae:e9:8b:d5:34:f5:65:b2:71:5b:8a:b1:14:
         70:03:dd:16:c5:23:f9:14:99:c4:0b:b4:88:34:cc:24:a5:89:
         e5:f2:5f:c9:21:92:28:06:93:01:56:57:5a:59:51:bc:c4:97:
         5c:4d:cf:d3:32:03:34:25:f6:fe:bf:86:19:35:4b:05:f1:55:
         fa:24:d7:94:cf:d9:0a:aa:60:72:a4:a1:43:da:1c:ab:f9:5f:
         5d:0b:ac:59:3a:cd:4d:e8:90:4b:53:e6:a5:28:59:77:bc:38:
         de:12:b5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 09:50:41 2022 by rpki-client.