Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/e78ebda1-e94f-3604-afe0-1db61f06184a.roa
File:                     e78ebda1-e94f-3604-afe0-1db61f06184a.roa (download)
Hash identifier:          NDTiDot7Sqh/N9fY5Ka5ZTTSQ7/FIFCMQS6tu+sVXBU=
Subject key identifier:   A4:C0:A2:16:A9:38:42:7C:DB:42:22:36:A7:EB:7C:F8:FE:57:3A:46
Certificate issuer:       /CN=618a40c8-2175-4e55-926e-6516ce21ec74
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F2661A2CC
Authority key identifier: 62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/e78ebda1-e94f-3604-afe0-1db61f06184a.roa
ROA valid until:          Aug 13 04:00:00 2029 GMT
asID:                     20473
IP address blocks:
    1: 23.141.96.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:26:61:a2:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a40c8-2175-4e55-926e-6516ce21ec74
        Validity
            Not Before: Aug 13 04:00:00 2019 GMT
            Not After : Aug 13 04:00:00 2029 GMT
        Subject: CN=7ab9ba76-627b-42c9-a33d-4645057b5781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:f4:e5:b9:78:4f:bc:44:b4:40:37:a8:b4:
                    2a:eb:cd:69:2b:b0:c4:ea:b3:9b:0f:42:ea:2f:ac:
                    6a:f0:29:c5:68:1d:fa:05:92:48:78:d0:3b:5f:30:
                    71:59:08:ce:cd:93:3b:5c:5a:35:ec:69:4b:b1:97:
                    68:a0:65:59:49:c8:ba:fb:64:fa:c6:9e:c6:0e:ba:
                    d1:72:e1:42:8c:a7:af:a1:52:7c:f1:df:a9:94:0a:
                    92:3c:ac:9d:d5:6c:c8:12:26:57:f8:2b:9e:e7:51:
                    5f:d9:3f:00:47:33:99:e5:a7:08:71:86:c4:b9:0d:
                    e0:bf:9d:44:e3:40:96:bb:04:ee:39:83:54:26:30:
                    39:cb:2f:92:ce:11:8d:4f:a6:b0:45:34:2f:d4:9a:
                    41:50:e7:77:aa:3f:06:41:15:e6:e8:1e:1f:84:e7:
                    e2:49:38:d5:49:27:fb:d2:9c:75:9b:50:7d:63:0d:
                    f7:b0:8b:b8:a2:b1:c1:32:85:4d:e7:8a:7a:d2:78:
                    22:6f:0b:31:65:3d:8e:01:4a:7c:f4:68:9b:78:27:
                    f2:43:c6:f1:fe:2b:c4:67:e3:a2:1a:6e:06:b7:48:
                    fc:90:7e:96:8a:f9:d1:2f:49:92:e2:3c:a4:25:58:
                    52:db:a5:f9:c0:45:e8:ee:f1:20:0a:2f:1b:a1:72:
                    7c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                A4:C0:A2:16:A9:38:42:7C:DB:42:22:36:A7:EB:7C:F8:FE:57:3A:46
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/e78ebda1-e94f-3604-afe0-1db61f06184a.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74/618a40c8-2175-4e55-926e-6516ce21ec74.crl

            X509v3 Authority Key Identifier: 
                keyid:62:BF:24:4D:9F:4B:2A:E1:F8:CB:2D:64:43:06:5D:07:2C:F3:4C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/618a40c8-2175-4e55-926e-6516ce21ec74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:8f:b1:aa:62:31:1a:58:b0:c3:20:1a:61:67:c9:49:6e:d5:
         53:84:f6:4f:45:84:d0:f3:7e:d4:d3:a0:6e:52:4a:bf:f6:a0:
         c2:8a:72:a3:ab:4b:4e:71:17:82:cf:bb:83:b4:36:39:f7:3d:
         79:75:1e:19:2b:39:8b:cb:fe:36:39:76:2b:7c:06:35:a5:99:
         a2:ec:29:4b:2a:34:d3:a8:fa:b2:d1:6d:bb:34:7f:fe:cc:57:
         14:95:04:28:f9:30:b2:b6:27:85:86:a9:b1:c6:fa:e0:84:ea:
         3b:83:c4:00:1d:b3:54:55:9a:3c:2a:25:6c:b7:cb:fd:9d:fc:
         4d:5e:72:09:84:ae:3e:e8:97:67:0b:f2:d1:8f:38:2f:f2:b2:
         67:24:44:0d:12:5c:f0:44:7c:4b:12:b3:11:ff:1e:c4:aa:52:
         eb:17:8f:84:ff:35:80:fe:a9:e0:d4:db:8e:0f:a7:de:d5:e9:
         a8:e8:29:18:e8:59:4b:8e:30:9a:08:f6:11:cd:31:13:b2:df:
         a4:ab:64:d3:10:e1:bc:ad:19:13:26:bf:bb:d4:0c:66:69:82:
         47:f4:1a:45:a3:05:9d:57:2c:86:f6:01:46:9e:36:1d:92:3f:
         1f:6a:70:81:a5:04:4a:db:63:ec:95:e4:fc:13:b0:3e:31:dc:
         a2:5a:2b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 03:37:02 2022 by rpki-client.