Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa
File:                     d0d5c255-62d5-3841-a89f-c97638122db1.roa (download)
Hash identifier:          jBm0Fa7as0ieIwIoWhnBH6/Y9krkH6EFchogFvBa34k=
Subject key identifier:   01:80:5A:13:B2:4A:CA:9B:7B:30:B5:7E:D6:E6:64:73:2D:78:1F:DD
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328583AF532A40D24767615D5E867C0
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa
ROA valid until:          Nov 20 05:00:00 2025 GMT
asID:                     397373
IP address blocks:
    1: 104.152.222.0/23 maxlen: 24
    2: 155.254.16.0/20 maxlen: 24
    3: 104.255.168.0/21 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:f5:32:a4:0d:24:76:76:15:d5:e8:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: May  2 04:00:00 2019 GMT
            Not After : Nov 20 05:00:00 2025 GMT
        Subject: CN=2176972e-1bd8-4433-9611-2c1c6cf25be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f2:5a:47:b1:29:6f:80:d5:ae:b7:54:6a:0e:
                    19:69:60:2b:15:83:eb:84:74:d2:8c:eb:52:c7:7e:
                    cf:07:fa:96:5e:d2:26:86:06:3a:86:23:9a:ab:32:
                    5f:e1:05:06:6b:5e:b8:09:60:86:1e:50:dd:b7:50:
                    5c:40:74:b9:85:8d:f3:7b:01:d9:b3:0e:b7:15:c0:
                    8a:b9:db:a2:23:11:73:7f:41:ad:3c:cf:fc:71:f4:
                    1f:d1:c0:cc:fc:18:d0:23:53:9a:f7:91:3e:6f:38:
                    40:07:cd:0c:49:6f:32:c6:c6:36:5e:fb:c0:82:6a:
                    d0:7d:85:ef:e2:42:89:e0:83:80:34:7c:b6:4c:7d:
                    c6:37:b9:cf:e4:46:53:42:7f:25:59:30:1f:bd:f8:
                    42:61:d1:6f:fe:36:dc:c7:0f:4c:59:ba:67:91:52:
                    e5:12:3f:1a:59:15:aa:bb:94:9e:89:2a:13:63:2e:
                    fb:c1:df:5f:e2:d1:01:e2:87:8a:87:fa:97:3b:45:
                    34:d0:79:3f:80:57:c0:00:2c:f8:e0:19:e1:7d:0c:
                    be:0f:f7:fe:5b:bd:e1:d9:34:86:eb:c0:c2:14:7a:
                    31:a5:15:64:88:3e:47:86:3c:f6:68:ab:20:cc:9f:
                    a5:94:bb:db:95:6b:7c:0f:01:51:88:6d:7e:0f:2a:
                    47:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                01:80:5A:13:B2:4A:CA:9B:7B:30:B5:7E:D6:E6:64:73:2D:78:1F:DD
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/d0d5c255-62d5-3841-a89f-c97638122db1.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier: 
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.222.0/23
                  104.255.168.0/21
                  155.254.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:dc:41:45:38:cd:98:e3:37:2b:3d:d8:06:69:a1:d7:22:2f:
         5d:33:68:13:21:fe:8f:4d:75:d2:a4:92:ae:fa:2b:e5:f5:38:
         19:92:8a:46:cb:4b:18:ef:88:9e:f5:53:16:7e:98:83:a6:87:
         fc:5e:75:74:e0:0e:ce:97:d0:c1:5b:6c:6f:f4:96:0b:f2:88:
         05:5d:95:f5:f0:0a:39:13:90:a8:e1:b8:56:50:f4:dc:eb:67:
         71:a3:bb:7d:61:d1:ce:27:58:6b:7b:45:27:ab:e7:4e:b1:f0:
         76:99:d9:63:b1:f4:4b:16:19:b2:3a:02:2b:b7:cf:a5:6c:80:
         98:54:dd:93:b1:17:5c:2f:a1:56:6f:bb:8b:ea:de:38:b4:10:
         8f:5c:da:3f:8a:ca:96:84:c4:58:8b:e7:ef:57:5f:99:b2:04:
         2b:bf:26:b4:5f:ff:5c:d3:a7:bd:a8:0a:dd:f6:0d:45:b3:9b:
         4a:a3:fe:d2:00:80:04:11:8d:63:a0:7f:83:88:d7:66:dc:1c:
         eb:63:35:9a:ed:59:08:f0:09:3f:80:b1:7d:73:f0:ab:f6:72:
         65:18:a1:45:dc:8f:7a:d0:14:f4:ea:39:38:3c:5a:09:aa:7e:
         d6:74:fe:d8:3c:4c:4c:ee:b1:b0:aa:53:65:a1:14:53:29:21:
         26:c7:86:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 17:25:29 2022 by rpki-client.