Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/62c03e17-f9e7-3f4f-a207-09975859e975.roa
File:                     62c03e17-f9e7-3f4f-a207-09975859e975.roa (download)
Hash identifier:          4dnwk+d0WdO8pI4AM9q2964OqCdHStSlEF9/FJg0z2c=
Subject key identifier:   34:4A:C4:BA:FF:E4:B3:BC:38:2C:A2:EA:0A:80:F9:D8:0D:45:6C:E0
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328583CEEE7A43EDD2963C7CB73FE00
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/62c03e17-f9e7-3f4f-a207-09975859e975.roa
ROA valid until:          May 19 04:00:00 2024 GMT
asID:                     1239
IP address blocks:
    1: 104.156.151.0/24 maxlen: 24
    2: 104.156.149.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:ee:e7:a4:3e:dd:29:63:c7:cb:73:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan  7 05:00:00 2021 GMT
            Not After : May 19 04:00:00 2024 GMT
        Subject: CN=dfa58616-92f2-4216-8ef9-c016fe7137e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:7d:91:94:53:b8:5f:f5:ad:65:cf:9e:b7:81:
                    39:3d:a8:88:e2:64:c2:45:4e:15:5d:87:d0:21:9c:
                    21:e2:d6:3a:1f:48:d8:5a:44:f9:b4:b1:00:45:3c:
                    8a:99:e4:13:38:d8:7c:ab:07:96:9e:fc:23:b2:de:
                    2d:06:2a:18:a2:4c:e9:20:30:8c:54:b5:3f:68:c7:
                    19:e8:1a:97:6f:00:a6:a3:27:18:5b:84:46:fe:74:
                    a7:ce:3a:fe:b5:f9:d6:be:57:1d:c9:5b:28:9f:b0:
                    4a:be:01:d4:7b:9c:a7:4c:99:a7:09:49:b6:cd:41:
                    9f:fc:2b:09:e4:93:50:cf:c3:65:43:e7:b1:c2:36:
                    41:16:2a:f7:7a:da:a3:53:48:cc:8a:2c:f8:f5:b4:
                    35:2e:f0:14:43:9c:ed:d0:8e:c3:6a:de:63:74:3c:
                    0c:80:6d:8f:ee:ff:b6:e3:e1:90:20:86:4d:ef:0e:
                    5e:56:9e:25:a3:22:bf:66:3f:a0:02:d1:89:2d:6f:
                    96:1e:dc:96:94:46:2e:bd:1f:b2:ee:44:a9:18:26:
                    8f:5d:6c:b6:ec:5f:3d:0e:98:e0:96:98:4f:85:34:
                    ed:d3:57:8d:ea:45:9b:62:52:ab:6b:ff:22:c0:10:
                    e0:c8:d8:d6:bb:4b:53:0d:6e:1a:06:2a:f7:4a:2b:
                    02:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                34:4A:C4:BA:FF:E4:B3:BC:38:2C:A2:EA:0A:80:F9:D8:0D:45:6C:E0
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/62c03e17-f9e7-3f4f-a207-09975859e975.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier: 
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.149.0/24
                  104.156.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:56:23:65:b1:14:7b:3d:d6:16:5e:84:80:f5:e7:5b:44:ba:
         54:e9:4e:07:08:cd:b4:1f:0e:62:b1:ba:aa:b0:10:fe:7c:5f:
         b0:bf:eb:d7:83:9c:50:54:1b:fa:fc:8c:f3:b4:46:c5:09:8e:
         e9:0b:7d:db:00:46:81:21:90:b1:2d:49:93:55:60:ee:fb:4f:
         46:01:6e:d9:8f:f3:08:66:ba:76:e3:38:be:4a:5e:a8:0a:62:
         39:a4:ab:91:be:cd:20:29:9d:70:9a:92:9a:54:47:2b:8e:54:
         3d:0c:b0:60:f3:f7:b9:dd:08:b3:e9:f8:42:0a:f7:81:45:68:
         66:81:b6:62:c6:8c:da:3f:64:5c:b1:22:66:74:7d:06:43:d8:
         df:6f:7b:00:c9:d2:db:d3:88:ea:f7:f3:bc:64:7b:f0:9d:05:
         5d:02:7e:51:ce:14:c9:65:d1:7a:5e:17:b8:04:37:c6:92:75:
         90:a8:64:a3:6c:9e:6a:9a:9f:50:44:6e:c6:ca:df:1f:2a:af:
         21:a9:cf:5e:a5:d9:b7:d7:5d:28:91:79:d9:af:d3:7b:c7:31:
         ed:86:d0:cf:77:7d:b3:c1:ac:68:2d:04:dc:72:04:6a:a7:50:
         98:63:a5:42:ec:f2:48:0b:f6:67:a2:9e:e8:3e:38:6c:fb:14:
         9c:7a:67:ac
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWDzu56Q+3Sljx8tz/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4
MGMzMB4XDTIxMDEwNzA1MDAwMFoXDTI0MDUxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGZhNTg2MTYtOTJmMi00MjE2LThlZjktYzAxNmZlNzEzN2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6X2RlFO4X/WtZc+et4E5PaiI4mTCRU4VXYfQ
IZwh4tY6H0jYWkT5tLEARTyKmeQTONh8qweWnvwjst4tBioYokzpIDCMVLU/aMcZ
6BqXbwCmoycYW4RG/nSnzjr+tfnWvlcdyVson7BKvgHUe5ynTJmnCUm2zUGf/CsJ
5JNQz8NlQ+exwjZBFir3etqjU0jMiiz49bQ1LvAUQ5zt0I7Dat5jdDwMgG2P7v+2
4+GQIIZN7w5eVp4loyK/Zj+gAtGJLW+WHtyWlEYuvR+y7kSpGCaPXWy27F89Dpjg
lphPhTTt01eN6kWbYlKra/8iwBDgyNjWu0tTDW4aBir3SisC7wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDRKxLr/5LO8OCyi6gqA+dgNRWzgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz
OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvNjJjMDNlMTctZjllNy0z
ZjRmLWEyMDctMDk5NzU4NTllOTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk
YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3
ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj
Zjk2NzgwYzMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaJyVAwQA
aJyXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAI5WI2WxFHs91hZehID151tEulTpTgcIzbQfDmKxuqqwEP58
X7C/69eDnFBUG/r8jPO0RsUJjukLfdsARoEhkLEtSZNVYO77T0YBbtmP8whmunbj
OL5KXqgKYjmkq5G+zSApnXCakppURyuOVD0MsGDz97ndCLPp+EIK94FFaGaBtmLG
jNo/ZFyxImZ0fQZD2N9vewDJ0tvTiOr387xke/CdBV0CflHOFMll0XpeF7gEN8aS
dZCoZKNsnmqan1BEbsbK3x8qryGpz16l2bfXXSiRedmv03vHMe2G0M93fbPBrGgt
BNxyBGqnUJhjpULs8kgL9meinug+OGz7FJx6Z6w=
-----END CERTIFICATE-----
Generated at Thu Dec 8 09:50:41 2022 by rpki-client.