Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/2fad02dd-0df7-3724-a7c2-b8f2234108f4.roa
File:                     2fad02dd-0df7-3724-a7c2-b8f2234108f4.roa (download)
Hash identifier:          3FP4UaUV7ZZBhVt+yMWMgwmb3ZZ+eI8Q+mA4mEZdEXY=
Subject key identifier:   83:A9:50:0A:7E:9F:83:81:5D:BF:62:D9:5B:F2:A9:D3:60:87:60:2D
Certificate issuer:       /CN=ab1a140b-878b-41cc-864f-08e0177f7325
Certificate serial:       010D0C9F4328583925173C576D02DFB8ADFF7D40
Authority key identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/2fad02dd-0df7-3724-a7c2-b8f2234108f4.roa
ROA valid until:          Jun 07 04:00:00 2026 GMT
asID:                     20473
IP address blocks:
    1: 2602:fd75::/36 maxlen: 48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:25:17:3c:57:6d:02:df:b8:ad:ff:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1a140b-878b-41cc-864f-08e0177f7325
        Validity
            Not Before: Feb 12 05:00:00 2020 GMT
            Not After : Jun  7 04:00:00 2026 GMT
        Subject: CN=b8779a98-f529-489e-9e33-820368438f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:59:08:57:fb:f7:eb:b5:5a:66:88:fa:bb:ca:
                    68:b7:f4:3f:f9:85:71:49:69:4c:23:72:8c:0b:ea:
                    79:ba:5a:07:d1:cb:dd:10:78:70:3d:8c:1a:f0:0b:
                    c5:8c:88:9b:68:d1:42:57:2b:92:a8:83:b3:45:8d:
                    1d:dd:2d:06:29:20:f0:15:21:d7:05:cf:39:73:85:
                    80:15:b4:f6:2d:5a:1c:92:e7:da:a8:20:a3:64:44:
                    31:05:a5:6b:65:ab:ca:a7:53:23:69:09:fb:48:a3:
                    f5:c0:fe:83:5d:35:f8:f7:b3:e2:d1:0f:55:76:62:
                    c4:46:ce:e8:ac:67:2b:c1:85:f8:ef:cc:42:1e:0d:
                    3c:b1:86:c7:99:9e:90:28:f4:40:9b:7b:f9:9c:b6:
                    74:a0:99:ea:bf:f3:86:38:5f:73:72:1a:c1:f2:c7:
                    02:6a:33:76:bb:e2:4f:ca:55:7c:22:fd:43:66:f9:
                    10:9a:72:77:51:5d:e3:aa:76:9b:41:37:dc:f3:34:
                    1c:86:a5:02:7c:ea:58:72:a4:3b:2b:d3:71:4e:04:
                    e5:38:e5:26:6d:4d:eb:ef:c7:de:ee:3e:7b:be:ad:
                    f4:d5:54:8e:55:75:f0:b0:ed:c6:6b:28:d9:98:b4:
                    0c:f5:62:b7:ba:ad:d6:3e:a1:11:43:3a:1a:65:7d:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                83:A9:50:0A:7E:9F:83:81:5D:BF:62:D9:5B:F2:A9:D3:60:87:60:2D
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/2fad02dd-0df7-3724-a7c2-b8f2234108f4.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl

            X509v3 Authority Key Identifier: 
                keyid:71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fd75::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:43:a1:7b:64:fe:6b:2a:39:35:46:cb:e8:03:28:a1:50:09:
         b6:c5:4a:70:d4:71:ca:f9:45:b2:32:14:08:f6:01:44:cc:68:
         d3:ea:75:71:1d:75:22:21:a6:c2:65:31:56:e7:94:20:ec:78:
         11:5f:86:fe:fd:ed:41:1e:2c:d1:51:73:b6:af:c6:41:21:5a:
         b4:37:14:26:ec:79:54:cc:5b:e7:35:d5:5f:c6:c4:7e:6d:b6:
         72:2a:10:7d:09:95:d5:f9:c1:72:7e:33:eb:69:fb:4d:a4:08:
         cf:3a:31:f2:92:42:f6:f7:42:0b:11:7a:9e:31:ca:fe:94:13:
         30:72:2f:1e:a6:6f:5a:b0:79:b8:0b:22:9b:d4:9d:7e:be:1a:
         88:7c:e9:c7:9b:b4:a2:7a:c2:b1:82:98:c9:62:f4:ac:af:28:
         1a:ed:d7:57:25:28:08:56:ea:3c:d9:1d:8a:01:c3:68:07:79:
         0e:43:5a:96:bb:b5:ce:b0:cf:51:54:e3:fc:4d:00:d1:63:62:
         d3:7a:f1:98:e3:b6:83:4e:f3:ec:81:d4:d1:20:be:8f:c3:fd:
         f7:e6:01:ff:a6:18:1a:cf:7e:1f:95:f0:75:6f:d5:7e:ad:42:
         84:5a:69:32:63:42:8b:fd:e5:b0:16:3b:a0:95:cf:92:0e:48:
         59:0b:06:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 02:14:13 2022 by rpki-client.