Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/921b5608-35f2-3cb2-ae55-1c70e373ac92.roa
File:                     921b5608-35f2-3cb2-ae55-1c70e373ac92.roa (raw, json)
Hash identifier:          Oy91qeQpa33qB4KaC0REhmC0uvLugYDdAi2Euaz2k7E=
Subject key identifier:   D0:0C:3F:97:54:73:FF:25:AE:0F:AD:F3:7F:68:B2:D6:AF:39:6D:C2
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E886D3FD
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/921b5608-35f2-3cb2-ae55-1c70e373ac92.roa
Signing time:             Wed 24 Jun 2020 22:50:49 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Tue 18 Jun 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:90c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:86:d3:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : Jun 18 04:00:00 2030 GMT
        Subject: CN=ecaee6d4-3b1a-45d5-9c62-b36ad4353908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:e4:dd:a4:18:28:fc:4d:f2:15:34:5f:f7:
                    b3:ee:9e:ef:4b:1d:32:a4:eb:c3:91:15:05:69:35:
                    44:82:95:02:be:67:c0:fa:b2:57:a6:6d:45:1f:36:
                    fa:47:7c:88:5f:c6:49:79:7a:4e:f3:4e:bc:e0:65:
                    1c:55:73:b0:3b:bf:17:f1:bc:5b:f6:2a:ea:5f:99:
                    dd:b7:ef:df:3d:8e:95:8b:7b:3e:63:d0:ac:2f:a7:
                    a4:b9:2b:da:59:ec:c4:16:2b:3a:c9:5d:0a:79:20:
                    89:84:c4:c8:34:ac:9f:96:d2:32:86:c0:82:9e:a1:
                    49:82:87:2a:70:ec:2a:df:84:dd:08:d9:01:5f:89:
                    e2:b7:e8:16:a0:c2:09:94:c3:20:66:e9:5a:b0:f2:
                    e5:f5:70:c6:bb:52:83:a9:83:6d:ad:0b:9d:6e:15:
                    83:52:d6:b6:cf:08:63:a2:83:b8:8b:b1:c2:d6:48:
                    a6:ce:9e:c7:11:b3:6a:3a:c2:09:1a:75:28:9f:d0:
                    c9:e1:d8:88:57:26:73:f3:1e:57:a6:53:36:0c:e7:
                    75:f4:20:20:dd:a0:b5:9d:17:29:e5:cf:b5:8b:98:
                    71:da:c0:82:52:c2:98:35:80:67:85:9d:5d:d8:1a:
                    c6:18:df:95:0b:41:7b:5f:da:5a:5e:35:a6:f9:a0:
                    13:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0C:3F:97:54:73:FF:25:AE:0F:AD:F3:7F:68:B2:D6:AF:39:6D:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/921b5608-35f2-3cb2-ae55-1c70e373ac92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:90c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:be:32:d0:db:d3:07:ae:50:c7:86:f5:a0:8a:c9:a1:fd:cb:
         6b:1d:05:94:2b:07:50:92:86:35:8e:ff:08:9c:8f:a5:f3:a3:
         b5:42:38:94:0e:e5:ab:e3:53:30:59:f6:7b:45:65:a5:a0:95:
         3a:a6:0d:e0:ed:2b:53:c6:e6:b7:88:57:2d:8c:94:d2:99:50:
         f4:a2:9a:4d:26:3e:ff:d9:92:a3:89:cd:c3:a3:7d:52:bd:50:
         ea:c7:f8:66:cd:81:f1:61:46:ab:3e:70:a9:87:78:98:49:23:
         21:83:b6:14:5d:b3:c2:74:cc:47:76:dc:c2:c7:c9:51:e9:50:
         d0:be:ec:e9:20:e6:bc:cb:ff:dd:d1:96:f2:d9:43:ac:e5:4d:
         52:53:86:aa:a8:c1:fa:3a:81:8e:42:f6:eb:1d:60:a7:e2:f9:
         f1:69:9f:84:a0:a0:55:e8:ea:3c:ac:80:e4:91:19:1c:8c:2d:
         31:f5:84:63:38:53:2d:80:fb:a0:6d:b1:11:1e:9e:ca:16:41:
         ad:ff:3b:f8:f1:bc:88:ea:08:05:9f:8f:b8:85:12:48:84:cf:
         67:89:8f:d1:af:8d:dc:ed:a4:56:7b:db:41:5a:ec:ab:d7:0c:
         67:c4:56:fe:a1:ac:5f:d1:7d:ef:dc:ed:df:f7:2f:8b:98:e7:
         51:d5:70:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:12:58 2024 by rpki-client on console-ams.rpki-client.org