Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/50af6f31-5083-34f8-9a28-33f7c4a3acdc.roa
File:                     50af6f31-5083-34f8-9a28-33f7c4a3acdc.roa (raw, json)
Hash identifier:          JMdjFOsVvkj8tDiUL/fim8VlJ/+aRg76abDa+k3ak/E=
Subject key identifier:   9D:AA:D4:06:BC:4F:0E:BF:E8:09:ED:25:AA:FD:4B:AE:1C:29:41:BE
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E8867A70
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/50af6f31-5083-34f8-9a28-33f7c4a3acdc.roa
Signing time:             Wed 24 Jun 2020 22:50:26 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Wed 22 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:86:7a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : May 22 04:00:00 2030 GMT
        Subject: CN=eedd05df-7f59-4025-9912-fa6a8f603516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:b5:8a:0b:98:17:53:25:af:b3:59:8f:5b:
                    aa:99:ce:4f:08:c5:9c:41:5b:ec:05:8a:b1:a5:55:
                    47:ab:ab:03:b8:17:39:89:29:0f:ad:91:6a:bf:14:
                    6e:ca:9a:b8:39:b9:77:4c:e3:83:25:38:e4:14:6c:
                    f8:3b:84:e3:98:b9:ac:14:76:b4:a8:ab:be:23:85:
                    1b:26:52:75:e0:a5:f7:69:08:32:73:77:06:e4:a6:
                    b3:09:f3:13:d4:1e:80:42:99:9b:f9:a5:1e:01:2b:
                    b7:a8:70:e3:f4:cf:b7:05:b4:8d:e8:9b:c1:58:b0:
                    12:22:05:ca:b8:f0:50:f9:5e:ad:31:ef:9a:60:20:
                    d8:9a:5a:fd:fc:cc:36:94:1c:c5:a1:06:81:aa:ca:
                    17:d9:5d:66:f6:16:90:a0:1d:2d:f0:8a:6e:23:41:
                    8c:e4:b4:95:eb:b9:af:19:26:01:a5:a3:aa:52:08:
                    99:be:ba:ea:7a:ed:cb:26:45:73:c2:43:94:c7:6b:
                    a7:35:a6:84:63:06:e3:cb:47:9f:84:ee:2d:91:2a:
                    53:cd:a4:e5:bc:37:2d:35:ed:08:3a:b3:f1:10:f3:
                    c9:39:b3:fd:61:b8:15:3f:4d:9f:32:96:64:02:9c:
                    de:1f:4e:40:36:37:bb:3c:1f:da:a8:5e:2d:90:e9:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:AA:D4:06:BC:4F:0E:BF:E8:09:ED:25:AA:FD:4B:AE:1C:29:41:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/50af6f31-5083-34f8-9a28-33f7c4a3acdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:25:9e:6d:e1:54:07:2d:4a:64:4c:67:97:99:87:b5:80:99:
         83:54:25:5c:58:bf:c4:46:06:c7:92:d7:d9:d4:68:9e:56:e4:
         79:8b:a4:a7:34:9d:57:9e:e0:47:4e:d2:ec:05:e0:00:a8:f3:
         34:5e:8d:f8:b5:fc:ad:98:17:ac:11:25:b2:78:26:59:2c:0a:
         7e:05:07:be:9d:01:b8:43:0c:9b:90:4b:8b:1c:17:d3:1d:67:
         4a:18:c9:68:0f:ed:ce:a1:12:5d:80:3e:6f:25:5c:d3:4a:17:
         47:bd:03:8b:a3:9f:30:69:32:a0:2a:cd:d2:e6:04:13:3d:d6:
         0b:77:57:e1:da:70:e4:25:97:bf:25:85:44:69:dd:bc:7d:80:
         09:9a:3b:6f:8f:87:e8:0c:48:71:c9:ee:2e:10:21:fb:70:f4:
         97:a4:e6:80:54:d8:61:87:6a:26:30:6f:24:a9:29:ad:6b:10:
         c6:fb:eb:35:04:b6:fd:6d:07:b9:c6:db:7e:30:eb:0a:17:8b:
         0f:02:3e:7e:af:4c:cf:61:c3:b8:c4:2a:93:c7:6e:5d:1b:13:
         7b:3c:06:86:81:85:c5:da:c2:e1:63:72:c2:a3:1c:fe:84:4d:
         27:9f:b4:49:18:d4:e0:ea:1d:db:b4:8e:c2:8a:3f:8c:05:a2:
         37:22:71:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:37:56 2024 by rpki-client on console-fra.rpki-client.org