Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/370af864-9886-39a1-8af8-7a00c51fda0b.roa
File:                     370af864-9886-39a1-8af8-7a00c51fda0b.roa (raw, json)
Hash identifier:          kL7jhAMZMKMEtYG9P0Ye7dULaW6PE4S8rrFfwimqtB4=
Subject key identifier:   7F:DB:6A:96:28:F0:F8:C5:D2:20:FB:8D:C3:92:9D:FA:36:EB:1A:A6
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E885CB13
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/370af864-9886-39a1-8af8-7a00c51fda0b.roa
Signing time:             Wed 24 Jun 2020 22:49:41 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Tue 07 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:28::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:85:cb:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : May  7 04:00:00 2030 GMT
        Subject: CN=ed6bb787-9abc-4cae-a6c4-73a136575b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:f9:d8:8e:3a:ad:ad:a3:75:bc:11:c5:18:
                    6e:57:53:9d:34:5b:7d:a7:53:5b:5b:2e:40:63:fd:
                    f2:7d:89:41:65:60:61:aa:c9:24:5f:36:9c:00:49:
                    77:5b:33:e9:31:6c:79:66:e6:39:db:0a:30:21:ff:
                    4e:8c:7f:d0:08:9b:13:7b:ce:31:1e:bd:19:78:a5:
                    5b:4b:54:04:ff:58:4c:4a:86:d7:ab:b9:b4:cf:d1:
                    f2:ed:a1:62:e6:10:b8:d1:61:e8:4f:0b:44:ed:94:
                    33:99:a4:e7:f5:63:3f:a5:c0:1c:b2:95:36:93:3c:
                    9c:ad:94:07:82:77:87:ee:0e:1b:bd:0d:24:de:05:
                    1d:a8:c8:6d:5a:d9:8c:75:46:a2:18:04:86:20:11:
                    e7:58:c1:1e:e6:ac:36:cb:25:5e:bc:c4:11:86:0c:
                    e5:8e:a6:70:16:b2:a8:fc:a4:41:89:7c:1c:8a:ca:
                    99:bd:b6:71:d8:ec:d4:f1:ba:c8:b3:cc:15:7c:61:
                    17:ad:1d:d2:7d:fa:1a:5b:0c:89:c7:15:8f:fc:cf:
                    83:c0:81:25:7c:2b:6b:1a:fb:ea:4c:35:51:a2:ad:
                    21:b4:2a:6c:7e:bf:64:b9:7a:c1:32:4d:41:ba:ae:
                    a9:7c:e2:de:11:5b:48:01:c5:d8:79:8d:0d:40:0b:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DB:6A:96:28:F0:F8:C5:D2:20:FB:8D:C3:92:9D:FA:36:EB:1A:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/370af864-9886-39a1-8af8-7a00c51fda0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:28::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:da:a2:cf:a5:b0:8b:31:7c:4b:dd:56:3b:cf:42:7e:59:07:
         e9:7c:24:3e:73:84:0a:b9:f4:65:6f:6a:ac:15:eb:bc:d5:ef:
         7b:0e:bc:49:f8:7f:f3:e8:9f:2d:e5:ac:c9:47:fd:f1:1c:0d:
         44:83:e6:09:87:05:31:2b:25:00:58:6d:6a:4c:39:fc:51:d5:
         de:c1:6d:27:ea:3a:01:50:42:8a:eb:93:47:cd:88:c4:d0:02:
         d0:f6:2e:26:ec:84:7c:62:ea:16:aa:9c:be:fd:ef:7c:88:9d:
         d9:6c:d4:1b:34:d4:0e:d8:fb:ae:5a:60:71:50:f7:1f:3a:2d:
         53:41:65:c0:28:11:90:26:19:c7:e6:da:fd:c7:b5:3b:5e:e2:
         dc:97:8d:a3:8c:19:e6:66:06:51:43:b1:c6:a3:61:01:f4:89:
         8b:ab:09:37:a5:12:7b:4a:37:29:ba:d4:33:d2:43:99:7d:cb:
         95:b7:61:a2:f3:c7:40:d7:a8:4b:d5:52:49:0a:68:cd:f9:a7:
         8e:5b:40:8c:75:a3:11:6c:98:5d:54:45:13:22:53:06:a9:e5:
         75:99:1c:28:a2:56:06:e8:21:af:74:d8:e8:89:d0:1e:2d:be:
         ff:8c:79:89:39:2e:f9:a2:67:f7:92:0b:40:b4:67:8b:96:c1:
         f5:37:20:bb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSygAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcuiFyxMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGRjNzQ3ZTY0LTI0YTgtNGM0OS1hN2Y5LTE2Y2IwYzI2OWJi
MDAeFw0yMDA2MjQwNDAwMDBaFw0zMDA1MDcwNDAwMDBaMC8xLTArBgNVBAMTJGVk
NmJiNzg3LTlhYmMtNGNhZS1hNmM0LTczYTEzNjU3NWI3NTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMTw+diOOq2to3W8EcUYbldTnTRbfadTW1suQGP9
8n2JQWVgYarJJF82nABJd1sz6TFseWbmOdsKMCH/Tox/0AibE3vOMR69GXilW0tU
BP9YTEqG16u5tM/R8u2hYuYQuNFh6E8LRO2UM5mk5/VjP6XAHLKVNpM8nK2UB4J3
h+4OG70NJN4FHajIbVrZjHVGohgEhiAR51jBHuasNsslXrzEEYYM5Y6mcBayqPyk
QYl8HIrKmb22cdjs1PG6yLPMFXxhF60d0n36GlsMiccVj/zPg8CBJXwraxr76kw1
UaKtIbQqbH6/ZLl6wTJNQbquqXzi3hFbSAHF2HmNDUAL0KMCAwEAAaOCA1gwggNU
MB0GA1UdDgQWBBR/22qWKPD4xdIg+43Dkp36NusapjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGM3NDdl
NjQtMjRhOC00YzQ5LWE3ZjktMTZjYjBjMjY5YmIwLzM3MGFmODY0LTk4ODYtMzlh
MS04YWY4LTdhMDBjNTFmZGEwYi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2RjNzQ3ZTY0LTI0YTgtNGM0OS1hN2Y5
LTE2Y2IwYzI2OWJiMC9kYzc0N2U2NC0yNGE4LTRjNDktYTdmOS0xNmNiMGMyNjli
YjAuY3JsMB8GA1UdIwQYMBaAFC/s33GZAPO7jfNOMWI/q4VBLoDsMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvZGM3NDdlNjQtMjRhOC00YzQ5LWE3ZjktMTZjYjBj
MjY5YmIwLmNlcjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYgAewAKDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEB
CwOCAQEAjtqiz6WwizF8S91WO89CflkH6XwkPnOECrn0ZW9qrBXrvNXvew68Sfh/
8+ifLeWsyUf98RwNRIPmCYcFMSslAFhtakw5/FHV3sFtJ+o6AVBCiuuTR82IxNAC
0PYuJuyEfGLqFqqcvv3vfIid2WzUGzTUDtj7rlpgcVD3HzotU0FlwCgRkCYZx+ba
/ce1O17i3JeNo4wZ5mYGUUOxxqNhAfSJi6sJN6USe0o3KbrUM9JDmX3LlbdhovPH
QNeoS9VSSQpozfmnjltAjHWjEWyYXVRFEyJTBqnldZkcKKJWBughr3TY6InQHi2+
/4x5iTku+aJn95ILQLRni5bB9Tcguw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:11 2024 by rpki-client on console-ams.rpki-client.org