Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/022dd074-afdd-3083-9ebd-637a44081763.roa
File:                     022dd074-afdd-3083-9ebd-637a44081763.roa (download)
Hash identifier:          etSmVeVwfmuvDJQoqxlSHqXmFg6+bFkfcFy5lt4vUtE=
Subject key identifier:   B6:2C:12:70:B5:DC:1A:1D:6B:E7:51:A5:FA:90:AF:A9:72:14:45:20
Certificate issuer:       /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
Certificate serial:       010D0C9F4328583A88183EF9A5E140C941FA3602
Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/022dd074-afdd-3083-9ebd-637a44081763.roa
ROA valid until:          Oct 12 04:00:00 2023 GMT
asID:                     397373
IP address blocks:
    1: 2604:f440:6::/48 maxlen: 48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:88:18:3e:f9:a5:e1:40:c9:41:fa:36:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86
        Validity
            Not Before: May  2 04:00:00 2019 GMT
            Not After : Oct 12 04:00:00 2023 GMT
        Subject: CN=b533fb74-ac18-43bc-bc52-87a86ea3b690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:2a:23:f7:26:f6:41:30:6f:a0:77:ae:2c:
                    da:d0:b5:b1:82:c2:81:72:e0:0d:a4:97:de:d4:1c:
                    f3:e4:ee:be:95:c1:7b:74:ac:dd:34:7e:7a:97:cb:
                    6e:9f:e6:09:59:33:2b:a9:1b:85:7b:02:87:8b:0a:
                    e9:b8:d5:cb:1c:cc:74:47:78:9f:13:bf:7b:2b:ed:
                    e0:3a:34:13:ea:0c:78:79:34:a7:18:85:62:98:59:
                    83:6e:b7:34:de:29:3d:d0:81:48:3e:84:b8:c6:24:
                    9d:56:47:d4:dd:b4:26:d0:03:07:49:7c:19:d2:27:
                    90:0d:d1:47:f5:1b:9f:84:c9:35:e7:8b:a3:5a:c9:
                    e8:d4:31:f3:ae:0e:ae:95:f2:73:a4:e1:d5:d2:76:
                    80:02:25:c6:ab:de:66:16:ab:eb:d7:4c:0e:21:f3:
                    13:76:d4:c6:f3:d6:97:1b:3d:a5:d3:8e:cc:63:93:
                    b9:68:5a:8a:c1:25:08:c6:b7:67:75:ea:21:b6:9b:
                    01:9a:8f:57:ab:26:4c:52:a5:dc:6f:da:24:ec:7f:
                    17:16:6d:9f:53:48:ea:b7:70:66:15:6b:50:b3:75:
                    1c:d7:9f:2b:0e:16:94:66:c8:37:73:1d:ad:b4:aa:
                    12:7f:0e:b9:46:a8:26:e1:34:5f:6d:cc:4f:d0:d2:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B6:2C:12:70:B5:DC:1A:1D:6B:E7:51:A5:FA:90:AF:A9:72:14:45:20
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/022dd074-afdd-3083-9ebd-637a44081763.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl

            X509v3 Authority Key Identifier: 
                keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:f440:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:f3:ed:ce:50:43:32:44:02:41:ae:53:da:a8:53:a2:0c:df:
         24:52:75:b4:42:03:6b:32:0f:07:16:46:01:82:80:ae:a1:11:
         33:9a:57:b3:7a:1d:0e:22:9b:f1:8b:83:bc:04:cb:f9:d4:a3:
         87:00:64:94:9e:e6:49:59:ec:30:65:50:21:38:58:8f:e3:fa:
         c7:a3:10:85:f6:aa:83:13:27:ba:4b:8b:e2:b7:8d:3e:b2:63:
         97:1c:f2:14:ba:a3:d6:bd:54:a5:b0:dd:c2:56:98:2b:28:58:
         c5:c3:5a:c6:19:82:b6:2a:9b:39:a7:98:f3:7d:67:9c:f4:3e:
         0b:55:a8:94:59:1a:87:9a:fa:89:08:62:d6:74:a0:cd:c4:72:
         41:f5:ae:21:ad:f0:fd:ee:18:1c:5c:50:ce:b6:80:47:f6:17:
         be:a1:04:51:60:a1:f5:f5:46:df:84:26:db:9f:11:26:d8:0f:
         28:ed:8e:4e:20:cb:35:09:ab:3a:f5:51:de:d3:64:bc:8a:8c:
         29:e6:96:d7:03:36:9f:9b:72:0c:63:2b:25:83:a1:48:30:44:
         0f:12:a0:0b:bf:07:c1:ab:04:c2:f9:9c:28:bc:88:d4:45:26:
         46:04:4a:1a:54:56:ec:a1:04:f8:dd:df:b7:aa:99:c6:52:87:
         b6:83:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 7 17:25:30 2022 by rpki-client.