Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/70223726-522b-3882-97c5-dbf180615c24.roa
File:                     70223726-522b-3882-97c5-dbf180615c24.roa (download)
Hash identifier:          UP2osCmgMUBLXwAym/af0V8fRNzB2upaHtd07zxpwGc=
Subject key identifier:   67:3E:AF:5D:A2:70:46:AD:2C:56:98:0D:5B:00:05:AE:B2:0F:16:C9
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328583EFC567F614A64CF04787D1C00
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/70223726-522b-3882-97c5-dbf180615c24.roa
ROA valid until:          Nov 23 05:00:00 2024 GMT
asID:                     399804
IP address blocks:
    1: 45.59.126.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:fc:56:7f:61:4a:64:cf:04:78:7d:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Feb 14 11:59:06 2020 GMT
            Not After : Nov 23 05:00:00 2024 GMT
        Subject: CN=9b1f490f-524e-465b-a764-d4d6555de7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:fa:0d:0a:3f:65:d2:02:3a:94:7b:da:db:
                    e9:bd:3f:7c:51:7d:81:c3:6f:a8:ad:5d:22:88:a1:
                    26:28:36:e0:16:85:25:19:f6:31:ac:f9:50:7f:fe:
                    db:88:df:53:46:47:01:87:ac:c1:3f:8e:69:8f:8c:
                    26:52:98:86:e8:67:76:57:7e:bc:94:ef:9f:e0:23:
                    33:97:15:68:b3:39:ba:69:94:c7:5e:42:98:5f:2b:
                    34:cb:d8:35:09:c8:25:c3:58:d5:55:33:01:de:bb:
                    d5:ff:83:3b:ab:d9:f4:ca:bb:90:da:f3:fd:27:94:
                    9e:c1:c7:1c:2e:ec:fc:00:32:bc:d2:f0:06:96:47:
                    95:5e:6c:14:a5:f0:6a:2d:07:87:cd:ff:6c:03:c4:
                    c1:39:7a:b2:85:3c:b8:27:b4:b2:f0:6d:f3:4c:ed:
                    5f:59:71:ee:30:09:1c:6e:f3:bb:46:15:50:b8:08:
                    f2:f8:d0:de:6b:e4:16:47:27:e8:53:ce:ea:a7:e1:
                    97:02:c6:2a:d3:74:77:81:1e:a8:3e:28:6d:89:1b:
                    0a:76:ab:00:6d:b4:dc:65:cd:e0:1a:2e:7b:b5:39:
                    fa:d7:4b:19:0f:08:f8:7d:4a:fa:20:f1:5e:fd:05:
                    4c:15:6d:b2:ec:8e:62:71:2c:c8:da:fe:b4:88:dd:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                67:3E:AF:5D:A2:70:46:AD:2C:56:98:0D:5B:00:05:AE:B2:0F:16:C9
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/70223726-522b-3882-97c5-dbf180615c24.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier: 
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.59.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4f:f5:b8:52:8d:e8:92:8b:c8:bc:20:7a:e0:95:11:45:9e:
         4e:98:9d:ce:4f:ea:54:83:60:2b:c4:e9:a9:45:a1:0f:e2:15:
         9b:c1:99:7d:13:27:6c:08:98:2d:44:41:2b:8d:c7:c5:0a:b8:
         85:58:94:8d:b8:50:60:10:23:0f:9b:bf:d8:c9:a6:ba:ce:cb:
         9c:41:74:41:d4:dc:7e:c3:d1:e8:88:6e:5c:c8:4d:51:c1:92:
         89:cc:ed:c4:98:27:ee:a5:8b:0d:b6:07:82:62:62:fb:9c:ca:
         fd:64:7e:a5:23:5e:9b:3a:65:17:83:b8:30:a8:27:2d:2f:29:
         b0:0b:be:c9:74:e2:71:30:f8:dc:ad:2e:e6:d1:78:08:d2:71:
         c1:d0:04:72:4b:21:bc:62:33:50:15:27:d2:9d:04:7d:ad:25:
         c6:0d:e4:35:0e:e5:fd:05:86:bf:12:5a:77:2a:27:ac:86:f2:
         37:ec:e6:0f:96:72:d9:08:de:d5:a7:8a:16:2f:97:0d:6a:23:
         70:62:c0:f7:4d:96:05:c6:0d:95:03:e9:dc:9f:4e:84:7a:ff:
         29:75:0a:1e:cd:aa:6f:84:05:c8:47:e6:cf:03:ca:d0:71:94:
         0c:37:9b:c9:44:dc:e1:2e:50:9a:60:ec:0b:12:6e:e3:d9:f8:
         c7:4f:5c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 6 11:32:52 2022 by rpki-client.