Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/2fffbcd4-1529-36ab-a193-3629156a08b3.roa
File:                     2fffbcd4-1529-36ab-a193-3629156a08b3.roa (raw, json)
Hash identifier:          e5sgRqj8xg+UWro/Wv77nRbbvrKGdMu8jstPj5DAPhI=
Subject key identifier:   EC:40:EC:25:E1:DD:39:23:73:13:34:40:2E:5E:85:20:98:31:DE:A8
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC1732F217E3C
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/2fffbcd4-1529-36ab-a193-3629156a08b3.roa
Signing time:             Wed 08 Jul 2020 15:53:10 +0000
ROA not before:           Wed 08 Jul 2020 04:00:00 +0000
ROA not after:            Tue 11 Jun 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        2620:1ec:9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:2f:21:7e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jul  8 04:00:00 2020 GMT
            Not After : Jun 11 04:00:00 2030 GMT
        Subject: CN=61dd1e4a-5282-4b3a-bb08-ef9a069afdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:68:36:94:df:fd:f8:eb:af:91:ca:e1:e2:
                    af:80:81:19:19:67:b1:36:a2:48:a1:ce:65:1d:f6:
                    a7:7f:63:8c:0d:b4:97:e8:0d:25:69:c9:07:b4:8a:
                    9d:ee:6b:00:f9:0f:d7:c5:57:95:40:e6:37:f1:25:
                    28:e8:84:58:72:26:61:87:97:c6:48:3b:a5:f9:54:
                    cd:00:b5:ab:88:0c:f6:a5:15:58:24:d7:5e:0c:e5:
                    06:f1:c3:85:4b:4c:62:f0:f3:37:af:e2:d0:c6:1c:
                    9f:31:a7:ca:43:56:ac:76:64:be:34:01:06:1d:bc:
                    cb:5b:74:3c:02:2c:a1:76:2b:22:46:ae:1e:c9:07:
                    f8:1d:4f:82:37:e8:b7:76:d6:64:55:1f:14:70:d4:
                    07:81:7e:db:36:be:b9:1d:82:45:48:1d:5d:ac:3c:
                    8c:41:08:fa:ad:b4:70:84:52:90:0e:92:61:41:53:
                    8b:43:c8:16:a7:08:59:8a:05:03:c6:c3:8e:f8:f7:
                    de:89:23:10:b5:d0:d4:87:2a:61:42:10:46:04:7e:
                    2b:cc:de:f8:a4:cb:b4:b2:c4:e4:ee:83:85:40:0e:
                    6d:eb:b5:df:c8:26:e5:6e:62:1e:0b:a2:8c:19:e5:
                    3d:3e:00:33:71:1e:c2:1a:43:aa:59:e8:e6:7b:9f:
                    e3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:40:EC:25:E1:DD:39:23:73:13:34:40:2E:5E:85:20:98:31:DE:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/2fffbcd4-1529-36ab-a193-3629156a08b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b9:83:c0:d8:d7:50:17:c0:2b:ae:e8:03:85:71:eb:52:6c:
         82:54:dc:89:55:39:1d:4c:a7:8e:a3:b9:15:70:f5:ef:88:dd:
         1c:c8:37:a1:ce:5c:7a:32:9c:1e:6b:88:c4:74:ff:30:32:95:
         d1:48:06:73:05:6e:c3:a4:6c:7e:be:d0:93:9d:2b:3d:c1:3d:
         8e:52:b5:42:9a:f6:a5:23:ef:cc:69:b0:13:1f:88:97:ff:fa:
         02:f1:59:83:fe:ab:5f:f0:76:15:fd:23:c1:48:26:b3:6b:18:
         da:ad:1d:2f:8a:68:33:0e:1f:40:36:65:02:04:cf:90:65:5f:
         dc:cd:ee:06:e8:99:a6:3a:7c:7a:a2:95:15:21:ad:6a:15:b6:
         5e:cd:7c:f8:c9:95:85:e0:42:7c:2a:b9:56:03:19:4c:85:75:
         a2:05:44:85:8e:6c:cc:ef:8f:36:b9:42:9e:32:69:57:2a:75:
         8f:24:d1:55:a6:d8:f3:bd:69:96:bf:d7:91:bf:19:cd:52:67:
         bd:74:52:f7:e8:91:82:30:87:c8:e9:21:44:90:81:e1:b7:88:
         be:0e:f5:73:72:eb:06:5a:0c:16:f0:3e:3c:13:0e:9b:10:be:
         b9:df:be:64:50:e3:3e:c9:3d:68:e8:2b:bf:99:86:bc:73:1b:
         98:e1:97:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:11 2024 by rpki-client on console-ams.rpki-client.org