Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/8325448a-86c1-37b4-bcce-ce4cafe11647.roa
File:                     8325448a-86c1-37b4-bcce-ce4cafe11647.roa (raw, json)
Hash identifier:          awGoRBw3M9HpG/DCOaeHXzxWQ+92gu+Iu4K5Pr94uHc=
Subject key identifier:   8A:52:03:D0:F6:A3:05:2A:5B:70:65:83:9A:EE:3A:E5:B6:6A:E9:0F
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E886A3A2
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/8325448a-86c1-37b4-bcce-ce4cafe11647.roa
Signing time:             Wed 24 Jun 2020 22:50:37 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Thu 06 Jun 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:8fc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:86:a3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : Jun  6 04:00:00 2030 GMT
        Subject: CN=4f15ada4-31f6-43ba-8367-b720d1ca78cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:c0:da:ef:3b:a0:d6:88:fd:60:fc:74:7d:
                    34:74:7a:f4:1f:d9:e7:b1:63:73:dd:33:56:a8:bf:
                    1f:23:8e:62:08:b3:35:05:ea:ca:a9:41:de:8e:b5:
                    e8:7b:93:97:18:a0:a5:4e:36:23:d3:a6:31:61:c7:
                    27:a5:c3:da:fa:80:5c:5a:99:fa:37:b4:00:5e:bc:
                    d0:8d:06:83:ad:ca:be:c6:5b:da:ad:d7:f8:19:54:
                    d9:f8:d4:74:48:86:5a:81:94:ac:91:51:b7:a6:61:
                    66:4f:23:f1:19:d0:2e:30:78:f4:67:db:8c:a9:06:
                    a4:44:ae:46:47:2a:08:97:e2:f6:25:04:af:b1:3d:
                    57:a0:c3:3e:74:11:af:b7:9f:d1:11:1f:35:b2:33:
                    34:7e:d4:3f:88:ce:4f:41:61:3a:c9:5f:34:5c:f1:
                    77:c1:7d:9e:0d:65:db:52:e3:20:a5:d3:17:e2:c4:
                    16:e9:08:8c:9f:89:5b:b2:1f:47:2e:ef:d7:82:af:
                    42:d4:1b:57:4f:ec:17:6f:5e:f2:c8:e9:31:22:8c:
                    02:5d:9d:7f:29:ba:0c:a7:5e:69:39:15:4a:3d:36:
                    6b:b7:5b:9e:da:2f:67:29:56:b4:f7:24:b9:6b:45:
                    f6:07:ea:3d:d0:f2:7a:0f:77:93:d9:d2:20:20:62:
                    c1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:52:03:D0:F6:A3:05:2A:5B:70:65:83:9A:EE:3A:E5:B6:6A:E9:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/8325448a-86c1-37b4-bcce-ce4cafe11647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:8fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ec:c2:4c:41:12:11:60:37:68:27:e6:16:4a:73:f0:26:4a:
         13:c3:72:4b:23:95:91:04:a2:a7:41:18:a0:31:df:9f:c4:fa:
         74:59:e5:4f:dc:af:eb:05:97:b4:e7:55:d6:88:83:a6:f1:a5:
         af:06:08:f0:b9:fd:de:00:59:23:b1:32:4a:ed:56:66:8a:ea:
         3b:63:d8:71:ab:f1:a5:d9:05:b9:32:b0:b3:95:23:36:04:30:
         70:0c:65:70:09:9c:c6:48:43:3e:d4:40:00:b2:72:71:c9:3c:
         04:15:df:50:40:b1:44:a9:78:d8:7f:b3:ba:07:56:c8:ae:94:
         64:ec:ee:00:05:a3:0f:e6:48:66:e2:0d:ad:0a:45:b2:58:b7:
         7e:26:9c:86:35:ab:42:ee:a8:0d:4c:2f:65:5d:fb:64:4d:8d:
         4e:25:25:c3:25:71:04:2f:88:2d:4c:fe:5f:48:20:ba:8c:32:
         c6:eb:5a:7c:73:df:a7:12:fe:1d:ee:af:98:0d:67:85:b3:e7:
         1f:11:fe:73:a3:67:5c:cf:84:45:3e:04:7c:9d:b3:6b:cc:a6:
         0a:ae:65:65:71:b9:17:0a:d3:9b:e0:ef:38:cb:e5:b8:a2:29:
         4f:2f:9a:ef:f3:f8:5f:d6:6d:98:79:63:14:28:6f:5b:35:3c:
         25:ac:6c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:37:56 2024 by rpki-client on console-fra.rpki-client.org