Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745ccfe6-1e2b-3f4b-86da-8d6450792df8.roa
File:                     745ccfe6-1e2b-3f4b-86da-8d6450792df8.roa (download)
Hash identifier:          YgF2NYJxZ4soIIfnxPWBFFOzYyT6csnpXkwgWkoyXx0=
Subject key identifier:   72:8E:C8:15:CF:E9:7F:AB:3A:45:45:E0:ED:86:D7:C5:10:BE:1A:F0
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328583D8A4A718D057AA0EEAD490600
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745ccfe6-1e2b-3f4b-86da-8d6450792df8.roa
ROA valid until:          Feb 13 05:00:00 2030 GMT
asID:                     399836
IP address blocks:
    1: 65.183.188.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:8a:4a:71:8d:05:7a:a0:ee:ad:49:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Feb 13 05:00:00 2020 GMT
            Not After : Feb 13 05:00:00 2030 GMT
        Subject: CN=eb3fe181-a859-4443-85b5-8c1ded655449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:62:ac:36:47:05:e8:6d:47:69:a0:01:4c:80:
                    25:e6:00:a4:8a:4b:f2:19:53:05:08:c2:27:b8:da:
                    71:f9:1a:79:5f:67:aa:54:36:fe:08:5b:fb:15:d9:
                    6d:a4:3d:73:5f:12:1e:0d:86:e3:0c:4d:7e:09:c0:
                    f4:b2:1d:2f:7e:26:66:25:0a:38:5f:57:8b:69:1a:
                    69:54:96:fa:a7:52:ba:f0:81:2d:6d:8f:b2:f7:17:
                    54:80:18:05:09:61:29:b9:c9:d1:cc:a7:37:9e:d3:
                    fd:66:34:3e:ee:54:a6:fa:c8:c9:96:15:f3:3d:95:
                    40:08:b6:ed:d9:0f:e5:c5:00:a5:54:01:c5:c3:99:
                    0e:f6:be:da:14:07:9f:d5:c0:90:74:33:38:e8:08:
                    8a:82:14:36:c4:c3:86:87:21:b7:ac:4d:cf:e3:0a:
                    6e:4f:71:9c:f6:c9:3c:7f:37:da:7a:3a:81:05:5e:
                    7b:04:67:b3:74:e1:80:9f:fc:4b:ce:a2:3a:ed:87:
                    59:76:35:7c:2c:f1:f3:f4:e0:b4:0c:ef:27:4c:cd:
                    d4:79:60:7c:11:18:b8:43:b5:14:8b:05:cf:7b:6b:
                    2a:be:82:e2:93:28:8c:6b:4f:ac:de:f5:0b:2e:fb:
                    49:12:1c:b3:a0:41:9e:78:99:d1:fc:0c:7a:92:b3:
                    9c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                72:8E:C8:15:CF:E9:7F:AB:3A:45:45:E0:ED:86:D7:C5:10:BE:1A:F0
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745ccfe6-1e2b-3f4b-86da-8d6450792df8.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier: 
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.183.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f1:c6:1a:9d:64:9c:79:08:ce:03:23:01:25:55:c6:44:23:
         4f:48:8d:41:b4:ec:70:0d:8d:6c:60:76:1d:82:a8:5c:1e:30:
         04:de:71:19:99:c2:9e:96:34:fb:8b:0d:24:53:ef:69:ba:70:
         53:8d:40:44:c6:a5:f3:e4:7b:e0:1d:1a:04:6f:32:89:ae:79:
         38:54:2b:ec:75:86:db:71:ec:99:67:c2:d9:82:93:37:c5:69:
         71:89:b5:7a:5f:30:bd:49:1d:d5:e9:df:e9:f8:33:22:e5:82:
         88:7e:17:ec:68:dc:c0:6a:5e:5d:04:63:58:06:e7:f1:10:c6:
         69:4f:35:14:c3:5a:62:7d:0d:18:83:00:43:19:2a:83:03:c2:
         5d:db:ec:e1:c9:ed:e8:c8:70:d9:aa:68:a4:58:ed:17:46:d0:
         77:e9:48:83:b3:d1:cd:4b:ab:1a:98:93:79:a8:e6:58:b9:0e:
         df:ef:29:39:68:8b:63:cd:16:09:51:f5:c9:61:db:03:31:bb:
         8d:28:13:93:29:84:4c:16:00:09:a7:cb:03:b7:6c:ac:93:c3:
         be:dd:59:75:24:ca:15:79:fe:32:2c:8d:f1:f0:26:ce:6b:e0:
         13:c5:de:dd:c2:50:34:2a:c1:c2:6b:d7:57:b3:b0:42:c3:86:
         cc:27:ad:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 9 15:11:34 2022 by rpki-client.