Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/49dbb9fa-1b2f-3961-85dc-45741fbf71b4.roa
File:                     49dbb9fa-1b2f-3961-85dc-45741fbf71b4.roa (download)
Hash identifier:          zEtnRBTsU7Zn/C023T5d0lpAPQZUqgfTmnU5lTf5pWY=
Subject key identifier:   01:4E:F3:C0:3E:D1:DA:30:20:D4:C3:2C:88:34:CF:2B:15:E2:42:BA
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328576D51CC73C042CFC16FF1B3DC51
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/49dbb9fa-1b2f-3961-85dc-45741fbf71b4.roa
ROA valid until:          Jan 24 05:00:00 2030 GMT
asID:                     394973
IP address blocks:
    1: 209.9.213.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:f1:b3:dc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jan 24 05:00:00 2020 GMT
            Not After : Jan 24 05:00:00 2030 GMT
        Subject: CN=33531b9e-c424-4092-bd56-bfd548a4b59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:79:20:19:77:ed:f8:4b:00:64:f0:0d:14:
                    b4:e0:1c:95:aa:9b:ea:29:13:be:59:e0:b3:55:5a:
                    20:d8:7a:cb:c8:a9:79:7d:bf:56:33:b3:9d:74:68:
                    45:be:f5:05:2c:61:04:87:c8:12:1e:b0:8a:60:49:
                    9e:43:9b:47:c8:0a:8e:50:dc:11:81:7d:c3:9a:2f:
                    28:3e:5d:6b:3f:b8:03:0e:98:15:c0:fc:68:38:aa:
                    3f:6c:7e:4c:6e:78:68:00:4c:d4:15:7c:c7:18:b5:
                    48:18:6f:25:00:5d:1c:2a:4f:b3:3f:32:8f:60:8d:
                    a2:3e:15:41:8d:b2:46:10:a9:5f:e4:a7:74:c9:72:
                    1a:e3:d4:00:a8:9d:d4:e7:27:5e:b8:bf:08:79:81:
                    cc:4d:3d:da:8d:57:36:d2:58:fe:9f:0a:ab:05:49:
                    c6:7e:58:f8:80:18:ae:4a:38:41:0d:d8:fb:72:6e:
                    8a:39:ef:e3:f3:e8:97:5d:e1:d7:aa:19:25:c6:ed:
                    44:59:f2:12:6c:fc:0d:ea:b8:d2:62:0b:26:c4:fa:
                    3b:06:d9:84:b0:4a:5a:a0:40:36:12:43:3b:74:8f:
                    3c:1e:64:36:a8:e9:16:33:c0:8f:7d:c0:9c:5f:11:
                    b9:54:5c:a0:91:ae:a5:60:fd:85:7b:6e:49:34:58:
                    a9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                01:4E:F3:C0:3E:D1:DA:30:20:D4:C3:2C:88:34:CF:2B:15:E2:42:BA
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/49dbb9fa-1b2f-3961-85dc-45741fbf71b4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier: 
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.9.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:ba:4d:8e:b4:16:eb:f8:41:4b:0d:15:ef:d3:87:50:65:8b:
         2d:ca:5e:e9:0e:40:31:70:17:ce:d6:8e:43:b4:53:e9:6e:45:
         f1:ff:44:47:89:55:76:8a:de:4b:18:0b:c9:a9:12:9f:06:4f:
         f8:40:ab:67:49:93:92:8e:c6:1c:3f:8e:73:d1:bb:1b:be:87:
         58:c7:f3:cc:58:68:cd:0a:b6:a5:87:27:9b:24:7c:60:f2:5e:
         20:6a:a9:22:8f:d7:2d:93:62:fa:8c:cc:0c:95:d7:c6:3e:f9:
         f7:00:91:9e:1f:49:8d:51:c9:50:d6:fe:e7:1e:1a:6c:d2:fe:
         42:19:73:55:11:db:08:14:82:21:46:6f:ed:67:12:03:ce:fa:
         0c:ed:14:d6:6d:9c:b0:36:d3:77:e1:b1:9d:e2:7a:93:e5:98:
         bb:29:ad:cb:51:fe:46:22:29:7a:39:ba:18:de:cf:8d:54:e4:
         52:53:bf:f3:26:f2:94:5d:e9:cd:a6:09:bb:b2:09:e6:c4:42:
         61:b2:a3:d5:9e:91:98:80:e0:86:72:6b:15:9b:1d:ab:77:93:
         47:7f:54:07:35:62:17:7f:ba:48:c1:27:73:66:66:74:10:f9:
         d6:10:af:df:8b:9e:28:a5:c6:f6:b4:90:a0:ff:2e:2c:7c:61:
         ff:b4:0c:0e
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bb/Gz3FEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIyMGM0
ODAeFw0yMDAxMjQwNTAwMDBaFw0zMDAxMjQwNTAwMDBaMC8xLTArBgNVBAMTJDMz
NTMxYjllLWM0MjQtNDA5Mi1iZDU2LWJmZDU0OGE0YjU5YzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJ1/eSAZd+34SwBk8A0UtOAclaqb6ikTvlngs1Va
INh6y8ipeX2/VjOznXRoRb71BSxhBIfIEh6wimBJnkObR8gKjlDcEYF9w5ovKD5d
az+4Aw6YFcD8aDiqP2x+TG54aABM1BV8xxi1SBhvJQBdHCpPsz8yj2CNoj4VQY2y
RhCpX+SndMlyGuPUAKid1OcnXri/CHmBzE092o1XNtJY/p8KqwVJxn5Y+IAYrko4
QQ3Y+3Juijnv4/Pol13h16oZJcbtRFnyEmz8Deq40mILJsT6OwbZhLBKWqBANhJD
O3SPPB5kNqjpFjPAj33AnF8RuVRcoJGupWD9hXtuSTRYqbsCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBQBTvPAPtHaMCDUwyyINM8rFeJCujCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0
OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIwYzQ4LzQ5ZGJiOWZhLTFiMmYtMzk2
MS04NWRjLTQ1NzQxZmJmNzFiNC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4
LWM4OGVkYTIyMGM0OC8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBj
NDguY3JsMB8GA1UdIwQYMBaAFNE6EDM1sQYTuWeS7D6Rd6mBFZ/nMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRh
MjIwYzQ4LmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANEJ1TBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAsbpNjrQW6/hBSw0V79OHUGWLLcpe6Q5AMXAXztaOQ7RT6W5F8f9ER4lVdore
SxgLyakSnwZP+ECrZ0mTko7GHD+Oc9G7G76HWMfzzFhozQq2pYcnmyR8YPJeIGqp
Io/XLZNi+ozMDJXXxj759wCRnh9JjVHJUNb+5x4abNL+QhlzVRHbCBSCIUZv7WcS
A876DO0U1m2csDbTd+GxneJ6k+WYuymty1H+RiIpejm6GN7PjVTkUlO/8ybylF3p
zaYJu7IJ5sRCYbKj1Z6RmIDghnJrFZsdq3eTR39UBzViF3+6SMEnc2ZmdBD51hCv
34ueKKXG9rSQoP8uLHxh/7QMDg==
-----END CERTIFICATE-----
Generated at Tue Dec 6 11:32:42 2022 by rpki-client.