Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa
File:                     a492bc79-a43d-3b74-a966-215a139f5151.roa (download)
Hash identifier:          DXMkRP/3Z//GzGsWhHsxJDvVYAj6RuATIuZD+qpzln4=
Subject key identifier:   58:76:F4:16:83:50:4C:D7:1D:00:E3:0C:E9:A5:0E:7B:45:90:FF:D3
Certificate issuer:       /CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09
Certificate serial:       010D0C9F4328583E31A5F49E6ADAE95A1C721A00
Authority key identifier: DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa
ROA valid until:          Jul 27 04:00:00 2031 GMT
asID:                     399833
IP address blocks:
    1: 104.250.248.0/22 maxlen: 25
    2: 204.144.124.0/22 maxlen: 25

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:31:a5:f4:9e:6a:da:e9:5a:1c:72:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871ce6b0-1791-44dd-b7f7-f0b38bb30c09
        Validity
            Not Before: Jul 27 17:17:36 2021 GMT
            Not After : Jul 27 04:00:00 2031 GMT
        Subject: CN=56911b30-7b32-4d5d-af95-41cbbdc152b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:63:3a:5c:d4:99:be:89:4a:d8:ac:57:f6:
                    be:f0:ab:32:7b:b9:fc:b2:b7:e3:79:f7:73:e2:e6:
                    6c:92:d5:7d:74:08:3a:4f:df:95:34:07:95:99:57:
                    f1:b2:bf:a0:eb:f7:17:14:c9:dc:c0:8f:b4:3f:81:
                    ec:0e:4d:58:38:b3:bb:5d:54:0d:82:10:04:9d:26:
                    95:6f:41:a0:d1:71:78:36:cb:65:38:e6:56:bb:a1:
                    68:43:80:4e:98:d1:54:5b:1d:b6:72:29:16:78:dc:
                    1f:60:b4:f6:77:b2:ff:14:7b:29:de:12:22:16:28:
                    25:d5:87:09:c6:87:58:64:e6:a7:79:ce:74:b5:f1:
                    0a:77:b0:2e:17:55:06:4d:88:e7:4e:ff:6a:63:e7:
                    08:d0:8f:de:d0:96:e0:44:47:fc:e6:8e:d3:0f:73:
                    23:60:12:26:31:d8:56:f7:0c:9c:b6:e5:00:a1:db:
                    79:be:e6:29:31:b0:d1:ab:df:c9:45:03:76:d1:c9:
                    ad:19:5b:46:4d:9b:b3:b6:a7:b1:de:2a:09:59:40:
                    1f:2e:be:06:2d:de:33:95:cc:a4:03:a6:11:31:9b:
                    04:e4:b5:0d:a1:b4:9d:f4:62:2e:ce:16:12:7d:03:
                    d4:eb:0d:ce:0d:38:91:92:17:89:a8:a5:15:ee:fd:
                    b0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                58:76:F4:16:83:50:4C:D7:1D:00:E3:0C:E9:A5:0E:7B:45:90:FF:D3
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/a492bc79-a43d-3b74-a966-215a139f5151.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.crl

            X509v3 Authority Key Identifier: 
                keyid:DF:3F:C7:D7:52:04:20:9C:7B:26:E5:0F:7E:C0:18:DB:3A:8C:76:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/871ce6b0-1791-44dd-b7f7-f0b38bb30c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.250.248.0/22
                  204.144.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:4d:ca:ec:3e:85:6b:c4:4d:12:15:9e:ab:0c:4c:d0:45:fc:
         2a:cf:5f:bc:1d:fd:87:78:81:17:b0:8a:1b:ca:28:28:78:e5:
         eb:55:bf:ce:4f:d6:9a:2d:b0:7e:0b:eb:1c:d0:7a:d9:ac:03:
         97:29:54:4a:e6:ba:65:3f:02:83:f6:e5:01:90:84:93:b4:41:
         a1:aa:d2:66:40:5f:35:75:de:5b:3f:87:4b:be:f5:b3:52:1d:
         38:1d:c4:3d:7c:21:68:1d:e7:de:d2:91:43:4c:91:e3:41:e5:
         32:fe:8b:36:81:93:4f:8b:dc:a8:51:49:47:c7:b0:8e:b6:b6:
         5e:4e:b9:7c:13:57:6e:37:71:ad:7f:81:51:71:24:73:6d:10:
         62:90:3d:3e:16:37:c7:d6:1c:52:50:1a:e9:26:42:65:af:42:
         aa:91:88:c2:2a:99:2d:a5:cc:7e:f6:e3:55:fb:c4:4e:43:1e:
         34:42:51:52:cf:1f:39:19:d3:06:4e:6f:60:ff:2a:76:0a:84:
         75:91:79:46:d2:a8:31:0a:b5:ac:14:9a:45:d9:b2:a3:90:69:
         a8:0a:89:e9:96:15:47:9b:70:0a:0a:34:5f:45:5d:2b:61:14:
         db:09:5e:87:34:de:aa:8e:a2:4d:e8:e1:f2:09:4c:d2:c0:d3:
         9b:85:d9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 03:09:15 2022 by rpki-client.