Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/01a65a3b-5ed7-3444-a8de-250fa5bd5484.roa
File:                     01a65a3b-5ed7-3444-a8de-250fa5bd5484.roa (raw, json)
Hash identifier:          AEfOQuTgP4u6Zb41vMuM8Sji/mTHkP6BshJw9mwEE10=
Subject key identifier:   DF:7E:1F:68:58:0D:6D:FA:12:A6:67:15:80:7F:AE:D0:97:50:7E:81
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F43285839314EEBEE09E873CB621F3200
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/01a65a3b-5ed7-3444-a8de-250fa5bd5484.roa
Signing time:             Mon 08 Mar 2021 05:00:00 +0000
ROA not before:           Mon 08 Mar 2021 05:00:00 +0000
ROA not after:            Tue 21 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:911::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:31:4e:eb:ee:09:e8:73:cb:62:1f:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Mar  8 05:00:00 2021 GMT
            Not After : May 21 04:00:00 2030 GMT
        Subject: CN=cbfec7a5-9e2e-4944-8b78-2389466efb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1c:d8:84:c9:46:98:3c:6e:cc:23:fd:4c:d6:
                    65:be:2d:4a:90:b2:fc:f4:86:da:a7:db:00:1b:70:
                    70:fa:6b:6f:ce:9a:da:51:13:f8:31:3c:33:06:2d:
                    f9:13:37:0c:e9:cb:3e:d1:fc:57:ec:89:a9:52:60:
                    bc:cb:68:cc:95:f7:6a:af:35:31:68:19:ce:7a:e7:
                    07:46:46:ac:97:5c:5d:b9:91:5b:ac:61:b5:df:24:
                    7e:6d:df:c0:61:50:40:69:69:68:c0:86:71:4d:1e:
                    ad:bf:91:13:c0:47:46:22:d0:d5:92:41:e6:a4:9c:
                    bd:de:5d:9d:12:9d:22:d7:f7:75:f0:61:aa:fc:e5:
                    4d:05:bf:90:bd:7b:d6:0b:2e:30:e6:10:44:8d:bb:
                    70:d6:3f:b6:f7:cf:74:ef:24:5f:6e:31:77:1e:b6:
                    9d:19:8a:2c:10:3e:cf:8e:10:75:4c:68:fd:99:0f:
                    05:cf:01:cb:15:33:c4:e1:93:4a:d8:15:b6:75:81:
                    b7:a6:4c:83:84:ed:ff:03:c3:cc:52:fa:32:f9:84:
                    79:0c:21:36:82:f0:6d:92:8b:c6:0e:c8:9b:db:3b:
                    3d:8f:bb:c6:57:f3:b0:42:d0:ef:8c:4d:c9:50:7c:
                    9d:b3:d9:d0:29:76:6f:18:00:41:5f:4c:78:9e:86:
                    49:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7E:1F:68:58:0D:6D:FA:12:A6:67:15:80:7F:AE:D0:97:50:7E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/01a65a3b-5ed7-3444-a8de-250fa5bd5484.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:911::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:bc:d8:f0:b3:ee:02:10:50:84:6f:e7:b0:12:77:3a:6f:04:
         bf:b4:01:9b:8a:4d:09:4d:14:94:8c:95:af:6a:04:85:62:cb:
         97:21:8d:4d:67:27:19:56:ab:6c:c0:01:6e:5b:76:f6:fb:f9:
         8d:f2:48:d2:8b:87:5d:5d:ec:ce:a1:77:20:16:ee:39:d1:25:
         3a:28:e8:e9:88:28:af:eb:f9:cf:c8:93:46:0d:a8:f3:e3:45:
         0e:04:ae:8a:b5:2e:26:dc:88:3e:18:88:03:c1:57:e7:5b:c8:
         a0:7a:91:24:19:63:78:09:bb:50:61:89:c8:14:c2:6a:b9:9a:
         79:ed:c3:af:b8:9d:d6:54:ab:e5:3e:e7:e4:21:c2:cd:c4:aa:
         80:51:e7:0e:72:30:fc:c5:8c:3b:17:f7:c7:13:ef:1b:8c:ef:
         a4:28:67:c8:24:6c:2e:c4:87:6a:92:7c:a1:aa:ec:a6:7c:11:
         da:4f:69:ff:f1:98:db:da:9d:e0:fe:c5:5a:b8:bd:22:66:1c:
         87:5e:02:c5:07:c7:69:ba:fb:ac:52:0b:a6:ba:c4:84:cf:cd:
         c5:17:59:55:73:82:0e:e1:0d:3e:7a:57:fb:f7:07:d3:e5:3f:
         06:57:17:e3:0d:b7:06:7c:96:1c:17:6f:ba:6e:06:be:ea:61:
         00:ec:6d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:11 2024 by rpki-client on console-ams.rpki-client.org