Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/338c34ca-3c39-3ab0-b30f-b25fe8148af7.roa
File:                     338c34ca-3c39-3ab0-b30f-b25fe8148af7.roa (raw, json)
Hash identifier:          +75v6Q69pzwBTadsuHE0Pdzu7R2809glCVGBYRRB25M=
Subject key identifier:   B6:4A:78:64:07:83:6B:49:69:A7:00:16:1C:19:F5:93:4A:2B:30:16
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E886AF8B
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/338c34ca-3c39-3ab0-b30f-b25fe8148af7.roa
Signing time:             Wed 24 Jun 2020 22:50:40 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Tue 21 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:900::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:86:af:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : May 21 04:00:00 2030 GMT
        Subject: CN=fae5ad3c-93b9-4f29-a079-9d7d09407f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7c:d5:85:bc:67:3c:c2:b8:81:bc:b5:05:10:
                    91:3a:f5:70:71:ea:09:16:ef:72:44:71:95:ed:ec:
                    37:6c:04:42:9d:11:f1:cb:7b:08:99:52:39:6f:4b:
                    6a:ab:98:a0:3e:c2:3c:35:96:15:58:08:11:83:a6:
                    4b:91:f9:fe:39:21:73:89:04:78:85:ea:cc:ce:17:
                    d8:16:5b:77:f5:e1:b9:d1:7f:45:73:9a:ac:b8:3f:
                    4b:20:c8:f3:04:03:b1:84:ae:f8:c9:3a:b1:2a:6f:
                    3d:fe:18:a0:07:16:76:8d:db:21:17:5d:92:57:9b:
                    5e:4c:b4:ec:45:e5:e9:57:5a:77:3e:b1:39:91:37:
                    b1:63:2c:73:6e:bc:f8:c7:7e:cd:cc:d9:a2:95:66:
                    eb:dc:13:b9:65:9c:aa:03:a0:3a:1a:44:69:89:a5:
                    a2:7a:1b:3e:7f:12:fd:69:2b:a3:3b:91:1f:d4:d2:
                    3b:17:2e:1a:ad:dc:2a:3e:ce:cc:84:be:fe:73:ee:
                    04:62:4d:9c:db:59:6b:fb:8b:b3:b4:13:de:9c:7e:
                    af:f7:c8:13:1c:35:2d:af:07:b7:7d:c3:c3:3d:b7:
                    fa:e8:af:a0:88:e6:9f:57:be:d7:aa:4c:ef:db:28:
                    74:fd:bc:d4:5e:0f:40:6f:df:26:60:e9:fe:62:bc:
                    d0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4A:78:64:07:83:6B:49:69:A7:00:16:1C:19:F5:93:4A:2B:30:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/338c34ca-3c39-3ab0-b30f-b25fe8148af7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:900::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:fd:24:a4:9d:e5:52:6d:16:fc:ad:a6:2c:f8:5f:35:59:af:
         59:7f:a1:63:70:7d:af:e2:8e:19:d0:37:38:0f:09:91:29:7d:
         ba:d3:e1:db:b1:6a:c0:ef:67:83:c3:ba:e5:30:62:be:55:67:
         88:d1:48:7f:59:c7:c4:77:3f:73:7f:ea:9c:c7:b2:73:9e:72:
         81:70:98:99:fe:e9:41:6f:0a:25:2e:47:6c:26:ed:49:2f:a7:
         32:8b:d4:34:dd:a3:cb:0c:57:d7:41:86:c5:d2:98:7b:b9:ab:
         e0:0f:b2:10:99:80:f1:23:6b:4d:2e:bb:84:18:a3:99:f8:b2:
         01:ca:41:db:1c:77:f5:69:a9:01:44:d8:a0:0c:85:a0:95:78:
         47:b3:7c:bb:bf:cb:f0:45:80:a4:f0:14:01:07:45:11:cd:22:
         3f:ed:96:4b:50:dd:7e:38:ea:33:ca:3a:07:03:ef:06:6e:f6:
         42:23:13:36:68:25:5f:2f:16:da:3e:3d:12:1b:5d:22:11:60:
         47:bc:76:b3:95:e1:8b:f8:3b:08:2a:43:05:23:ef:45:93:e9:
         1b:6f:11:13:52:19:2b:ef:de:7d:9f:7f:b0:f0:9d:65:5d:06:
         2d:79:1f:c5:94:98:25:16:c6:ad:cb:42:06:ac:bc:9d:fd:92:
         8a:33:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:26:09 2024 by rpki-client on console-ams.rpki-client.org