Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/1ea02993-a9b8-36ca-953d-e7b9e8f2fb76.roa
File:                     1ea02993-a9b8-36ca-953d-e7b9e8f2fb76.roa (raw, json)
Hash identifier:          pyLDHtKH94LnNpuefqQj/ZLSvr4iU9deXh9etG9affs=
Subject key identifier:   7A:E3:D5:00:CA:63:EB:85:5B:9C:2E:1B:54:7C:D7:0B:E2:25:5A:35
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E8860A5D
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/1ea02993-a9b8-36ca-953d-e7b9e8f2fb76.roa
Signing time:             Wed 24 Jun 2020 22:49:58 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Fri 03 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:22::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:86:0a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : May  3 04:00:00 2030 GMT
        Subject: CN=eb9a7673-4880-40d6-95d0-dd8a28a5b74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:c5:08:3f:93:12:7a:b2:6a:dd:3f:b2:55:
                    bf:b0:20:73:db:09:3c:15:c3:5f:15:7a:4f:f9:1d:
                    1d:9f:2e:4d:65:c0:93:88:91:97:94:a6:56:14:92:
                    de:5e:02:a3:42:97:a8:7a:c5:b4:7c:52:07:54:12:
                    af:b8:92:a7:76:1a:95:a8:3d:8c:0e:ea:be:9c:51:
                    40:b0:64:86:1a:e2:9f:59:fd:57:95:00:b0:ee:cc:
                    7f:48:95:4d:99:e8:89:e7:f7:c4:3f:5d:db:dc:00:
                    0a:c4:1b:7b:47:1a:d0:ac:8e:f7:36:8c:b4:2c:93:
                    9a:a1:8d:8b:3e:01:d7:d8:ac:75:c9:e2:90:d4:c0:
                    71:70:69:ef:db:ba:f7:e5:a7:e4:de:af:f0:da:b6:
                    e2:6a:a5:62:08:27:d2:a4:ce:dd:8e:e7:a3:ed:c6:
                    16:c2:94:8f:87:eb:39:b8:69:b1:fd:e8:a4:e2:5f:
                    54:cb:d5:67:5b:8e:a1:2f:64:fa:de:70:75:ea:da:
                    7e:95:69:66:ab:51:1d:a2:d3:74:ef:94:68:8f:42:
                    ac:22:d8:03:f3:75:97:53:c0:4f:c9:cd:79:20:3e:
                    b0:ce:e0:87:1e:89:9a:c0:31:2b:aa:99:1c:a1:41:
                    6b:88:ea:bc:76:63:95:3f:ab:e6:69:00:36:74:dd:
                    5d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E3:D5:00:CA:63:EB:85:5B:9C:2E:1B:54:7C:D7:0B:E2:25:5A:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/1ea02993-a9b8-36ca-953d-e7b9e8f2fb76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:22::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9a:51:56:82:70:98:41:d9:fc:d3:b2:c3:69:fe:ff:41:d5:
         41:94:3b:6c:75:6a:d6:2a:fe:ce:cf:87:c9:56:e7:96:7f:e1:
         77:e7:34:97:8d:6f:d7:27:ea:4f:fc:d5:b6:fd:39:51:2b:80:
         63:88:0a:47:a0:ff:59:f9:20:15:0e:88:05:18:6b:dc:90:ca:
         b5:e9:f7:be:4e:a3:5a:97:be:1a:d1:79:7d:c8:0f:d5:b7:c1:
         70:87:01:d5:e6:8e:9f:d0:6b:76:9c:6a:a9:d8:74:ab:ac:28:
         f5:90:ab:9c:73:57:3d:99:aa:69:27:7b:3e:56:e5:e2:cf:15:
         88:e8:72:4e:21:79:b9:dd:08:c6:57:ac:b1:8c:1e:1f:0d:5d:
         81:75:da:c2:d2:2e:53:16:21:05:c3:a9:72:71:0c:e4:a4:60:
         3c:08:bb:29:f6:01:83:46:3b:43:4e:32:37:19:92:4a:de:7f:
         3a:a2:d6:d6:46:d1:7d:2e:24:f5:59:8e:b9:ed:35:48:3a:c4:
         74:b9:2c:3f:fb:9a:ff:01:2e:95:2f:6a:59:b8:d5:e7:3a:79:
         e5:6a:29:4c:9a:3d:9f:02:df:10:ff:65:09:a4:dc:72:3d:fc:
         ea:33:8b:80:03:95:0c:65:99:20:a3:e0:8a:f6:3e:c5:04:6d:
         aa:ef:03:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:11 2024 by rpki-client on console-ams.rpki-client.org