Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa
File:                     41a63799-17b8-37d9-84b8-f3de51331877.roa (download)
Hash identifier:          ytNN5rFdSey+ne5OhOEE4ILrbTyTPkDeLpY72bE6wMk=
Subject key identifier:   F0:64:C9:FE:9E:98:7E:AC:0F:7E:8C:D9:A1:59:38:81:DB:6D:2D:49
Certificate issuer:       /CN=ab1a140b-878b-41cc-864f-08e0177f7325
Certificate serial:       010D0C9F4328583924DF270BD7876B36A75E0B40
Authority key identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa
ROA valid until:          Jun 07 04:00:00 2025 GMT
asID:                     20473
IP address blocks:
    1: 23.150.240.0/24 maxlen: 24
    2: 204.238.70.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:24:df:27:0b:d7:87:6b:36:a7:5e:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab1a140b-878b-41cc-864f-08e0177f7325
        Validity
            Not Before: Feb 12 05:00:00 2020 GMT
            Not After : Jun  7 04:00:00 2025 GMT
        Subject: CN=4b86238e-6976-4304-9e38-783eb022350a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:84:f9:d2:c8:d2:66:91:ca:62:32:15:09:e5:
                    3b:88:8b:e2:8e:f1:1a:f4:f6:6c:2a:cd:0c:93:fb:
                    40:02:11:2f:5f:f0:56:64:4e:66:0b:ba:93:e4:96:
                    cf:4a:35:70:11:8a:18:fe:09:bd:c1:ed:c5:56:8f:
                    c0:a0:9b:f5:0a:2f:eb:2d:08:a2:ed:b3:3b:ea:4f:
                    77:d9:c4:9d:8f:2c:82:51:de:ea:73:eb:d4:54:a9:
                    d0:f5:4c:81:f2:bb:4d:aa:50:8e:77:34:51:07:3a:
                    6d:90:05:8e:11:07:94:23:41:eb:8e:85:38:3c:a6:
                    3e:73:05:d2:18:29:ce:61:20:2d:04:2a:57:d2:7e:
                    09:ac:8e:2f:ee:6b:61:d8:49:fa:70:3f:ea:4e:66:
                    4e:f0:ef:c9:61:ba:ce:6b:88:a4:c4:1e:6d:73:8c:
                    ea:d2:6f:6f:9b:7a:9b:af:94:69:20:d8:01:e2:42:
                    af:05:c8:61:e6:89:5b:9f:49:27:6f:52:ff:04:3f:
                    55:8d:0b:c3:b8:f2:40:88:8d:0f:d8:36:b7:dc:19:
                    8e:3f:14:a0:41:46:d5:e0:56:ea:bf:ed:c2:9a:b1:
                    9d:38:81:f6:6f:43:94:78:11:fa:9f:dd:c5:df:56:
                    f8:e4:a5:6f:51:1f:74:e5:a0:78:94:76:9e:74:c2:
                    6d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F0:64:C9:FE:9E:98:7E:AC:0F:7E:8C:D9:A1:59:38:81:DB:6D:2D:49
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl

            X509v3 Authority Key Identifier: 
                keyid:71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.240.0/24
                  204.238.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:61:25:e4:0e:37:a1:b4:24:63:dd:c0:34:41:9d:f1:2d:16:
         93:07:10:fd:bc:05:f6:5f:22:19:f1:bf:0b:16:8f:06:2a:03:
         3f:2d:b1:09:b5:35:58:09:ef:0f:cd:33:c1:d0:a8:9c:61:e7:
         41:eb:ee:b0:ce:d3:f8:db:6b:18:46:a0:73:e6:ad:5b:69:24:
         ad:07:e8:ed:29:d8:be:a6:ae:0c:b4:93:56:9a:9a:1e:bc:a5:
         8a:62:b0:82:f9:41:4c:2a:e5:17:28:f6:b8:57:2e:d6:ba:08:
         c7:0d:35:9e:78:c0:db:d7:84:c9:23:08:b2:12:56:62:9e:91:
         12:8c:6b:d2:1e:71:ed:f3:8c:57:ab:c5:78:ee:72:84:e1:99:
         e3:c3:a1:69:4b:ff:2f:87:2c:11:00:aa:c6:fc:8f:cc:94:eb:
         31:de:51:62:7d:a5:8e:61:b6:a1:11:4d:60:ab:dd:79:4b:73:
         13:cd:15:1f:5a:da:3e:79:9e:cd:63:d9:55:ea:32:0a:a2:3c:
         64:51:d5:e7:7a:be:e3:8b:52:50:36:b0:eb:be:ac:42:c6:7f:
         51:f4:ee:2b:20:36:4f:55:21:12:2e:d0:7a:97:37:ec:0a:96:
         5d:95:fd:b9:07:46:89:57:c8:01:39:5a:ca:5c:62:99:b7:47:
         8c:af:79:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 03:37:14 2022 by rpki-client.