Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/75081b5a-917e-3152-a8e9-666526c6d3af.roa
File:                     75081b5a-917e-3152-a8e9-666526c6d3af.roa (raw, json)
Hash identifier:          vi31+tKNdBX59UDan0VkG+0MvWLiGmzBTMHZxAV8ejU=
Subject key identifier:   8C:B3:8B:2A:B2:0C:D7:40:34:F0:AB:EE:81:41:A2:CA:10:86:94:58
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E8861F45
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/75081b5a-917e-3152-a8e9-666526c6d3af.roa
Signing time:             Wed 24 Jun 2020 22:50:03 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Sat 15 Jun 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:43::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:86:1f:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : Jun 15 04:00:00 2030 GMT
        Subject: CN=e2d7d5a5-490c-4847-beda-c540a98a6f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b0:c0:c7:be:35:74:e3:18:04:38:c3:98:a1:
                    f3:4b:48:a2:7b:65:f0:5e:d1:2c:ef:d9:df:ad:30:
                    80:d2:e4:38:88:a1:78:ce:8f:b3:f6:7b:9a:f4:ba:
                    49:81:f1:be:ff:4a:43:40:47:f7:d6:09:77:2a:10:
                    24:2f:d9:a6:57:0e:14:c1:dd:f3:2a:5d:f9:db:d1:
                    66:cf:6a:e9:b1:5c:56:da:51:52:b8:09:49:88:88:
                    54:81:12:26:f6:7e:8b:9c:ab:01:f8:2c:f8:30:24:
                    69:17:70:6d:f3:9c:05:e0:1e:5e:ee:16:9b:20:5d:
                    ae:37:c6:03:b9:ad:6a:5d:6f:56:a3:a4:97:50:fc:
                    25:80:45:f8:c7:73:1c:9b:86:08:ee:63:6c:ea:2c:
                    66:d1:3d:66:58:6e:d0:80:b6:14:20:13:0c:fb:1d:
                    14:36:ad:86:4a:ab:3e:5b:84:06:42:e7:59:a1:65:
                    24:2b:01:e4:5d:a6:e0:45:ec:51:ca:d5:49:76:b2:
                    0d:71:12:d9:47:ce:e5:2c:08:f9:5b:01:72:51:66:
                    37:78:ce:d8:06:f0:17:73:7d:33:e3:8a:0a:79:e8:
                    b6:9b:01:72:95:cc:d2:b4:15:91:41:67:63:f2:65:
                    51:b4:f0:5c:b6:24:c6:54:c5:46:54:56:57:66:ac:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B3:8B:2A:B2:0C:D7:40:34:F0:AB:EE:81:41:A2:CA:10:86:94:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/75081b5a-917e-3152-a8e9-666526c6d3af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:43::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ab:3b:4b:cf:b6:c7:6f:5d:31:36:0e:f5:c1:6e:c5:0d:fb:
         7b:ac:24:b0:b0:9b:2c:3d:26:98:2c:85:89:82:f5:9a:53:b7:
         9e:7f:c0:ff:7f:20:30:77:c9:c1:27:46:48:bc:2c:78:66:08:
         4c:dd:d5:78:f1:d2:01:1f:a1:40:9c:09:03:1b:8c:cd:66:81:
         76:9e:78:24:0a:3f:c9:09:7b:ee:a0:da:2f:a9:9d:92:24:84:
         04:b7:42:dd:37:08:91:c7:af:21:06:a2:ac:53:21:5a:2d:6b:
         a4:13:36:11:d4:a2:24:4b:f0:b2:2e:05:2f:dc:62:f9:0c:42:
         4c:94:3c:32:94:17:78:1d:31:dd:4a:01:b2:1a:87:8e:8a:7a:
         d0:85:31:0e:52:be:dc:c0:4e:6b:81:32:77:4c:e4:fe:ec:0e:
         da:cb:f6:33:3a:5d:51:d3:a9:03:d5:f9:db:bc:b8:17:2b:0f:
         fe:88:01:81:03:41:64:e3:d5:ae:3b:2e:0a:e5:d3:d3:85:a1:
         72:8e:6f:56:c8:51:98:dc:8b:6f:4c:a8:93:42:31:27:cc:bf:
         b2:ea:55:9e:40:8a:1c:78:b6:99:6a:9e:0f:8f:65:f8:12:a3:
         a7:20:bc:20:b3:99:2d:59:75:eb:b6:a4:f3:68:7e:4e:e2:da:
         d5:f9:1d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:12:58 2024 by rpki-client on console-ams.rpki-client.org