Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/3da38fce-064a-3762-972c-443c492a7004.roa
File:                     3da38fce-064a-3762-972c-443c492a7004.roa (raw, json)
Hash identifier:          IlD/dJV5+D1LNiECTjTc47IYCIsUCSaFU/0PyAVKL4I=
Subject key identifier:   7B:C1:0D:B1:1A:61:E6:8B:24:6D:35:AB:C3:12:59:97:7B:9D:D1:5A
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F43285838D167070890BD80D671F60780
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/3da38fce-064a-3762-972c-443c492a7004.roa
Signing time:             Tue 02 Feb 2021 05:00:00 +0000
ROA not before:           Tue 02 Feb 2021 05:00:00 +0000
ROA not after:            Thu 13 Jun 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:46::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:d1:67:07:08:90:bd:80:d6:71:f6:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Feb  2 05:00:00 2021 GMT
            Not After : Jun 13 04:00:00 2030 GMT
        Subject: CN=e772353d-40be-4dfe-a723-52922f5fe861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:ce:1a:fd:23:43:c3:e3:ac:ea:ec:92:27:
                    81:30:6a:58:9f:aa:a0:36:3d:45:50:fd:80:cb:0d:
                    63:8f:4f:03:55:50:90:3e:0d:e0:c5:8a:6d:b0:73:
                    83:74:3c:bf:9a:30:55:5a:cb:af:2e:dd:df:91:96:
                    3c:c4:a4:71:0a:17:52:c9:70:af:d2:d2:d4:8e:b5:
                    82:7f:ea:b1:a9:79:65:b6:56:1b:49:37:f2:dd:e5:
                    77:47:74:cc:13:d8:b5:9a:a0:27:59:af:db:31:c6:
                    6c:a3:a6:af:3f:4a:60:ad:f8:9b:94:65:c6:f9:9a:
                    7c:9c:7e:d6:2d:94:69:51:31:2b:4e:a3:48:db:55:
                    56:61:fd:e2:ca:2f:ac:82:d7:aa:8b:83:ae:9b:11:
                    57:64:5c:a3:3b:06:24:29:19:a0:e4:c6:fb:76:c5:
                    1c:3c:93:a4:cb:bd:0f:85:58:50:82:84:67:f6:c9:
                    40:3f:3f:cc:af:73:f6:9b:c2:7e:1b:2a:e3:21:cb:
                    54:c8:a1:ce:b4:7f:2a:56:0a:76:39:56:da:eb:39:
                    5b:39:8f:89:f1:43:ff:f9:06:d3:0d:2b:c0:f2:67:
                    28:12:ff:7c:23:06:83:38:34:de:39:ab:1d:13:56:
                    7a:f5:42:89:07:98:ee:d5:21:9e:a7:06:34:44:05:
                    08:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C1:0D:B1:1A:61:E6:8B:24:6D:35:AB:C3:12:59:97:7B:9D:D1:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/3da38fce-064a-3762-972c-443c492a7004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:46::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:73:14:e9:d1:e9:73:26:16:fc:0e:83:2c:a0:8b:4d:07:77:
         1a:3d:7b:9d:46:e7:2b:80:12:c7:88:f0:e3:74:96:da:7c:16:
         4b:d0:b6:54:e0:d6:4c:e0:97:cd:9c:10:1f:0e:b4:b2:f0:56:
         6f:64:c4:64:20:8e:d1:f6:e1:a9:23:00:96:89:ba:bb:5c:09:
         69:04:45:a2:7a:d5:55:2d:c8:99:b4:ae:24:73:46:2a:6c:c8:
         98:fe:3b:86:23:d0:2e:94:cf:8f:17:0e:81:ac:c9:be:05:8a:
         b9:01:d9:be:b0:fa:23:51:7a:2e:64:ea:1c:1a:57:05:f8:f3:
         37:fa:04:3a:63:bd:1a:64:d5:27:f0:17:16:bf:84:37:7a:83:
         15:9c:d2:12:59:3b:20:96:2b:d3:75:5d:55:5a:46:28:40:c1:
         82:bf:60:85:50:5a:45:4f:c6:94:5a:a6:2d:c1:75:74:db:5c:
         7e:65:3f:55:2c:d8:04:74:12:16:50:ed:14:22:5a:65:1a:ef:
         b2:85:67:62:f2:37:10:3f:54:1f:6d:f3:a1:79:91:78:22:e3:
         0a:35:cb:32:47:fb:7c:f0:43:59:de:fd:9c:07:78:65:91:d9:
         4d:d0:9d:2c:18:d7:22:ea:cd:1a:9e:73:33:ad:5b:80:20:30:
         01:75:ba:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:12:58 2024 by rpki-client on console-ams.rpki-client.org