Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/92a22515-cd21-343d-80bf-4ef591d00041.roa
File:                     92a22515-cd21-343d-80bf-4ef591d00041.roa (raw, json)
Hash identifier:          kjlUmfweuh1wM3WZuiBEjEA1vggGhZryAcHzTlND5s0=
Subject key identifier:   AF:FF:79:80:0F:65:73:0A:61:B0:19:08:32:A3:70:82:FD:66:F0:1A
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328583931016DC7500FC04872AAC1B0
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/92a22515-cd21-343d-80bf-4ef591d00041.roa
Signing time:             Mon 08 Mar 2021 05:00:00 +0000
ROA not before:           Mon 08 Mar 2021 05:00:00 +0000
ROA not after:            Sat 25 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:8fa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:31:01:6d:c7:50:0f:c0:48:72:aa:c1:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Mar  8 05:00:00 2021 GMT
            Not After : May 25 04:00:00 2030 GMT
        Subject: CN=3cce4595-676e-4658-800c-e10caf6a245f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:16:42:93:2d:f8:6d:d6:f5:36:20:18:ad:6f:
                    1d:15:11:3f:7d:4b:1a:b3:a6:cd:1d:7e:2a:51:52:
                    5a:2c:47:c4:27:19:ad:70:51:68:b5:d8:ab:1f:5f:
                    1e:72:81:3d:3b:e6:69:cb:4c:0b:58:c9:a4:9a:f8:
                    8a:02:93:0d:79:ad:17:8b:d7:0e:ce:f4:5d:91:0c:
                    f5:20:63:f3:58:ae:43:ed:28:c9:39:6e:54:42:e1:
                    84:02:dc:29:6e:7e:25:f7:29:e9:0f:e2:79:6c:a8:
                    94:ab:89:7f:09:87:06:62:44:e0:fd:6b:64:ea:85:
                    e2:99:22:80:b1:14:a3:d0:79:7d:d7:70:9e:84:62:
                    0f:f2:59:66:96:6f:78:02:fa:0c:dd:04:9c:28:c9:
                    d1:ab:36:f2:cc:ad:65:d5:d6:17:75:db:2a:6c:4f:
                    dc:88:f7:b2:06:bc:70:e9:83:d4:77:a8:70:ba:eb:
                    f9:6c:0f:2c:ac:68:00:8f:17:51:18:50:9d:b6:cd:
                    f4:3d:01:32:69:85:64:91:e7:2a:b5:fa:73:a7:8b:
                    93:2c:3b:11:6d:dc:23:e9:29:04:27:a3:07:33:a7:
                    17:e6:94:4d:88:b7:cf:0c:4f:d8:d9:7c:f3:2e:20:
                    6b:15:b5:bc:a3:11:fd:26:5b:12:51:27:3d:bd:5d:
                    a7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FF:79:80:0F:65:73:0A:61:B0:19:08:32:A3:70:82:FD:66:F0:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/92a22515-cd21-343d-80bf-4ef591d00041.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:8fa::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f5:6e:4e:7d:f4:3b:51:af:3d:cf:b0:d7:1a:11:34:01:ac:
         b4:ef:0f:04:91:3d:4b:5c:e8:f1:d2:51:93:25:2c:55:e0:68:
         26:1c:11:63:18:b1:5c:79:ef:bb:22:2d:65:00:2a:0b:b3:f6:
         f7:fb:de:54:2d:fb:78:58:0d:24:77:7a:da:7e:a4:70:8d:0e:
         e7:57:86:b6:94:a1:96:2e:d0:cf:98:12:25:35:76:79:84:e1:
         7e:09:85:f6:0f:94:ea:8e:66:1d:dc:ab:19:2f:a3:83:7d:be:
         b0:8d:c4:e4:a5:bd:e8:24:f6:a3:6d:36:a0:09:32:6e:25:cb:
         30:49:08:cb:5c:46:4a:56:7e:4f:06:44:52:af:eb:4b:95:37:
         9f:90:45:b1:83:74:76:3b:36:0e:9d:19:b6:77:5a:5c:d9:b3:
         ab:5b:28:21:b3:5d:4c:63:a9:51:55:10:00:43:aa:d4:56:65:
         0b:b9:e3:73:14:9e:04:d6:c9:42:27:25:26:7b:38:71:b0:b5:
         6f:0e:11:47:d7:a7:44:2b:de:63:88:80:a4:f1:9e:92:c1:07:
         0e:a4:6c:02:60:b6:d0:c3:43:e3:e5:4b:6f:1e:0f:51:32:a0:
         d1:05:ac:8e:15:c2:bc:0d:04:f8:b7:22:b3:65:96:de:cd:59:
         52:f0:69:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 06:28:41 2024 by rpki-client on console-fra.rpki-client.org