Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/1ccc5d18-9c1c-3707-b92e-a71a6a737833.roa
File:                     1ccc5d18-9c1c-3707-b92e-a71a6a737833.roa (raw, json)
Hash identifier:          BY2RwcbpT0zmyJvBZZvlzfVX85Pzfs9OuNML9e513x4=
Subject key identifier:   CF:EB:80:54:63:6B:B9:3C:74:ED:2E:0D:BA:BB:08:B8:F0:A2:71:7C
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E885DB65
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/1ccc5d18-9c1c-3707-b92e-a71a6a737833.roa
Signing time:             Wed 24 Jun 2020 22:49:46 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Fri 17 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:13::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:85:db:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : May 17 04:00:00 2030 GMT
        Subject: CN=92bca737-1ebf-4435-ad61-1c1bdfef114a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:1d:52:12:e3:e7:ac:93:63:91:49:fb:fd:
                    2a:eb:e1:e7:68:1c:7d:dd:09:93:41:9c:fb:b6:b8:
                    a0:09:88:26:62:1b:8c:5d:89:f5:7e:04:9e:99:39:
                    94:b8:6a:e7:a0:67:9c:13:2c:94:82:57:a2:16:d1:
                    81:af:bc:4b:33:4c:88:ad:d6:fb:8f:7b:da:79:d3:
                    57:fb:ae:1f:c6:7e:12:1f:97:7d:80:82:29:cd:9d:
                    b9:b2:76:c9:31:83:68:46:c3:1e:ba:2f:fd:61:d2:
                    06:6d:cf:50:91:6e:81:38:fd:ce:72:1b:7f:8a:ba:
                    4b:01:e6:94:50:dc:93:c7:21:22:df:a0:d5:b3:b7:
                    8c:e7:46:02:2d:02:a5:be:5b:c2:3e:74:07:72:14:
                    6c:96:95:43:25:6b:90:02:d6:9e:e7:67:d1:a5:b4:
                    49:37:a8:d8:fd:db:8c:30:7b:ee:16:cf:93:b3:7b:
                    a3:6c:15:f1:e6:8c:2b:77:ca:bb:51:7c:ac:50:dc:
                    c0:db:8e:7b:c9:1f:8f:62:16:1b:cd:b9:a6:54:a7:
                    6a:6d:73:e6:00:e6:a8:1c:26:05:00:d9:49:9a:75:
                    66:e7:a7:42:7b:1a:1c:42:53:78:5e:63:b4:f2:46:
                    de:26:8b:ed:1e:7f:5b:76:2d:25:ce:04:b8:51:4d:
                    10:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EB:80:54:63:6B:B9:3C:74:ED:2E:0D:BA:BB:08:B8:F0:A2:71:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/1ccc5d18-9c1c-3707-b92e-a71a6a737833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:13::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:11:c6:47:bd:d1:e2:c0:a2:f8:05:3d:f6:02:09:9b:bc:f4:
         c1:a8:5d:f7:77:92:c5:0f:6c:a4:ad:82:4f:b7:5d:0d:db:a6:
         7d:b2:e3:06:25:ef:60:ae:fd:51:f8:5e:ef:50:39:56:17:a1:
         a3:1c:82:75:36:fe:c2:f4:67:d1:3b:26:55:16:f9:a7:5e:94:
         04:61:d1:64:38:22:9c:16:3b:02:a9:42:8e:36:63:da:32:d9:
         af:9c:68:9d:0f:ec:f4:25:2d:37:de:d4:93:7e:b9:5b:cd:70:
         df:2f:0e:ea:c6:68:24:bd:93:ad:bf:23:8b:b3:e9:6d:04:cd:
         f6:df:f5:64:47:28:90:40:da:5a:c2:93:9a:a7:86:85:c6:a2:
         86:87:1e:0b:f7:b9:47:8c:e4:94:2c:c4:cf:3e:96:49:7e:59:
         ec:30:51:83:dc:6e:06:0c:59:7a:9b:11:1c:e4:5f:62:8b:83:
         34:95:a7:bf:3e:f2:93:d7:94:e1:56:76:7a:26:64:3f:7f:c9:
         ab:b5:82:8d:e6:cc:55:e3:6c:ff:18:e3:8e:44:fd:e6:a5:b1:
         67:f3:fe:74:8b:26:31:cd:75:8e:89:16:49:b5:6c:dd:b2:b3:
         ac:d0:a4:0f:c7:ae:0e:76:b5:36:1a:27:74:be:f3:1d:ec:3e:
         22:d5:bc:2d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSygAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcuiF22UwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGRjNzQ3ZTY0LTI0YTgtNGM0OS1hN2Y5LTE2Y2IwYzI2OWJi
MDAeFw0yMDA2MjQwNDAwMDBaFw0zMDA1MTcwNDAwMDBaMC8xLTArBgNVBAMTJDky
YmNhNzM3LTFlYmYtNDQzNS1hZDYxLTFjMWJkZmVmMTE0YTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALyCHVIS4+esk2ORSfv9Kuvh52gcfd0Jk0Gc+7a4
oAmIJmIbjF2J9X4Enpk5lLhq56BnnBMslIJXohbRga+8SzNMiK3W+4972nnTV/uu
H8Z+Eh+XfYCCKc2dubJ2yTGDaEbDHrov/WHSBm3PUJFugTj9znIbf4q6SwHmlFDc
k8chIt+g1bO3jOdGAi0Cpb5bwj50B3IUbJaVQyVrkALWnudn0aW0STeo2P3bjDB7
7hbPk7N7o2wV8eaMK3fKu1F8rFDcwNuOe8kfj2IWG825plSnam1z5gDmqBwmBQDZ
SZp1ZuenQnsaHEJTeF5jtPJG3iaL7R5/W3YtJc4EuFFNECcCAwEAAaOCA1gwggNU
MB0GA1UdDgQWBBTP64BUY2u5PHTtLg26uwi48KJxfDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGM3NDdl
NjQtMjRhOC00YzQ5LWE3ZjktMTZjYjBjMjY5YmIwLzFjY2M1ZDE4LTljMWMtMzcw
Ny1iOTJlLWE3MWE2YTczNzgzMy5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2RjNzQ3ZTY0LTI0YTgtNGM0OS1hN2Y5
LTE2Y2IwYzI2OWJiMC9kYzc0N2U2NC0yNGE4LTRjNDktYTdmOS0xNmNiMGMyNjli
YjAuY3JsMB8GA1UdIwQYMBaAFC/s33GZAPO7jfNOMWI/q4VBLoDsMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvZGM3NDdlNjQtMjRhOC00YzQ5LWE3ZjktMTZjYjBj
MjY5YmIwLmNlcjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYgAewAEzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEB
CwOCAQEArhHGR73R4sCi+AU99gIJm7z0wahd93eSxQ9spK2CT7ddDdumfbLjBiXv
YK79Ufhe71A5VhehoxyCdTb+wvRn0TsmVRb5p16UBGHRZDginBY7AqlCjjZj2jLZ
r5xonQ/s9CUtN97Uk365W81w3y8O6sZoJL2Trb8ji7PpbQTN9t/1ZEcokEDaWsKT
mqeGhcaihoceC/e5R4zklCzEzz6WSX5Z7DBRg9xuBgxZepsRHORfYouDNJWnvz7y
k9eU4VZ2eiZkP3/Jq7WCjebMVeNs/xjjjkT95qWxZ/P+dIsmMc11jokWSbVs3bKz
rNCkD8euDna1NhondL7zHew+ItW8LQ==
-----END CERTIFICATE-----
Generated at Sat May 18 15:37:56 2024 by rpki-client on console-fra.rpki-client.org