Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/370e3d30-719c-377a-bcbd-f8db8eabe424.roa
File:                     370e3d30-719c-377a-bcbd-f8db8eabe424.roa (raw, json)
Hash identifier:          PfQoT8vDKn35Gy7wQEwTddEYUcBzpxyav3M9X1caheU=
Subject key identifier:   33:D3:84:E5:DB:E4:C0:13:AD:64:7E:97:2D:AA:E9:C9:EE:E4:15:64
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E886F005
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/370e3d30-719c-377a-bcbd-f8db8eabe424.roa
Signing time:             Wed 24 Jun 2020 22:50:56 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Fri 24 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:86:f0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : May 24 04:00:00 2030 GMT
        Subject: CN=310288d0-937c-4d5d-9fd4-05d66b8de50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bd:f0:e2:6f:83:2b:d3:8d:88:c9:93:68:1f:
                    ee:4e:bd:99:48:d3:1d:9a:e6:08:f4:a7:a2:61:0d:
                    1c:56:2e:e5:7f:02:18:f6:c4:07:10:02:46:00:a0:
                    7c:38:5a:94:83:77:31:ed:3c:c8:08:be:3a:bd:08:
                    04:b5:d3:ba:b3:7c:5f:03:58:63:7a:67:16:af:6c:
                    86:3a:de:09:2a:9c:75:06:de:5c:96:5c:a2:41:2a:
                    ae:72:1b:b0:47:90:e5:11:9c:23:a5:f8:03:a4:04:
                    4c:74:59:b1:e4:8b:78:c9:6d:b6:e9:22:ff:0b:1e:
                    13:f8:31:d4:80:38:f1:67:cd:bf:bb:e3:64:7d:0f:
                    21:3c:d0:73:1b:35:e6:55:b5:a8:a3:fc:c1:46:03:
                    7c:02:39:83:6b:b2:7a:47:92:5d:c8:8a:fe:e0:ee:
                    30:82:d0:d6:a3:40:e9:32:bc:ae:37:f3:c6:52:1f:
                    9e:a4:e2:a3:3e:31:2a:6a:4d:ba:4f:67:7f:95:b1:
                    80:2e:4a:5a:6c:48:83:52:cb:be:fd:7d:1d:5e:fa:
                    53:31:e0:d8:d1:9a:bc:a2:a0:88:d3:12:72:09:87:
                    e7:b0:56:3c:9b:fc:cd:e4:7b:6b:66:8a:ca:be:0c:
                    47:0a:84:8a:84:07:16:49:67:68:fd:d3:60:8a:14:
                    cf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D3:84:E5:DB:E4:C0:13:AD:64:7E:97:2D:AA:E9:C9:EE:E4:15:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/370e3d30-719c-377a-bcbd-f8db8eabe424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:58:af:78:88:e6:55:b5:4f:ed:d6:8a:46:72:85:8d:5f:1a:
         c0:e5:f4:21:91:33:c8:86:5f:23:ae:7b:ef:75:33:d5:9c:66:
         44:17:1b:db:88:53:fe:74:f9:79:6b:4d:62:80:5e:28:14:76:
         4c:0b:7c:c7:c6:d4:6d:f5:ad:e1:04:c3:70:af:cb:85:75:25:
         30:fd:0a:a0:5a:b8:be:cc:c4:74:f9:ff:f6:ea:0d:c9:3b:78:
         f5:1f:1d:20:7a:24:7f:89:1b:f2:3b:2d:46:2d:50:2e:8b:05:
         f0:ea:1a:ce:4d:bb:33:75:21:22:66:7d:20:e0:7c:06:67:84:
         f3:30:ba:e8:b5:53:1a:97:ab:e7:c0:47:38:09:0b:cd:27:eb:
         dc:02:30:96:a3:d1:3e:83:fc:d6:01:bb:8f:9d:4a:90:5e:e7:
         3a:ff:de:8d:2d:b1:7f:27:06:3a:67:ce:ee:95:9f:9c:5b:41:
         39:6a:78:77:09:e3:55:f3:63:15:8c:91:65:0b:ac:ce:a2:80:
         d2:fe:35:56:6a:6f:47:89:84:52:23:27:05:ed:70:2e:7a:05:
         4f:fc:35:95:50:61:e7:0f:19:9c:31:a1:55:37:a1:4e:7d:b0:
         51:fc:87:69:64:9f:4c:b6:75:f9:e3:a6:c2:c6:9a:a1:34:bd:
         f2:55:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:21:01 2024 by rpki-client on console-ams.rpki-client.org