Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/3f1b8c22-a809-3a1e-a7b3-00803940dab7.roa
File:                     3f1b8c22-a809-3a1e-a7b3-00803940dab7.roa (raw, json)
Hash identifier:          tEaVAt/FOlmeimJtzLikA2uiMf6bOutFhC4K8K21VA0=
Subject key identifier:   91:BF:E2:F7:FC:78:DE:A0:2F:AF:F6:CB:E8:5E:C7:8D:DF:FA:FD:E8
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E8865D9A
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/3f1b8c22-a809-3a1e-a7b3-00803940dab7.roa
Signing time:             Wed 24 Jun 2020 22:50:19 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Tue 04 Jun 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:29::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:86:5d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : Jun  4 04:00:00 2030 GMT
        Subject: CN=40bbd928-3a17-40e0-963e-6261e29b0d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:5b:8f:88:d2:2e:bc:d9:46:b8:6c:0e:61:
                    75:b6:2e:63:de:fb:97:c4:d7:05:1e:56:03:bd:de:
                    65:a5:df:8c:52:e1:93:f1:37:f4:9e:d3:13:39:50:
                    00:e0:7f:24:ea:a6:ef:c3:28:c3:49:af:cd:72:e0:
                    ff:cb:33:c9:27:ca:10:45:54:d5:82:55:2b:31:72:
                    92:8c:fc:02:ef:06:23:bf:d5:9d:4c:eb:d8:8d:db:
                    3b:2c:ea:4d:44:5d:c3:f5:8f:62:f0:6e:8f:c0:e9:
                    83:c7:27:c8:01:0a:de:18:48:5f:dc:63:1b:9e:a2:
                    32:0c:e4:99:6f:38:5f:ef:61:a4:77:47:ad:ff:22:
                    91:b1:8a:81:98:96:98:ab:37:7a:ac:38:49:52:3a:
                    2b:11:55:bb:35:70:2a:6b:4a:cf:82:18:4c:3e:8e:
                    1f:75:0e:02:9e:9e:fe:55:f4:99:af:8c:07:b2:c8:
                    3c:3c:47:05:78:38:49:37:06:5b:4e:20:95:ff:9f:
                    d9:92:8d:fa:d3:88:50:70:00:82:dc:af:b5:77:87:
                    3f:ef:db:a1:3c:82:d8:c1:dd:14:b0:55:f9:8d:64:
                    f2:c4:84:9e:6c:dc:d2:f7:2c:28:c1:97:37:54:a0:
                    a4:c0:c3:74:de:39:ec:b0:ca:4b:37:73:ff:df:a8:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BF:E2:F7:FC:78:DE:A0:2F:AF:F6:CB:E8:5E:C7:8D:DF:FA:FD:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/3f1b8c22-a809-3a1e-a7b3-00803940dab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:a7:6c:af:41:62:79:cf:4c:9e:da:7c:a4:6c:56:22:dd:5a:
         16:f3:99:07:8c:ee:69:f1:c7:3d:af:d3:d3:e3:c5:d6:f1:ba:
         e2:21:ea:1d:2f:9b:2e:54:af:02:d6:bd:f8:79:65:3d:b3:e2:
         fa:ad:cf:54:a5:c9:f2:97:30:b5:9f:ba:37:68:10:97:78:d6:
         8a:0f:e7:04:f6:48:6c:19:cc:84:4f:fa:00:a0:98:c6:36:71:
         87:a4:55:e6:3d:b9:23:63:3e:94:66:76:69:c0:05:b8:6b:fc:
         93:60:31:db:bc:5e:d4:74:6e:7e:81:66:53:50:3f:3e:b1:9d:
         21:7f:52:fd:a4:32:75:11:31:fd:41:ce:8f:c2:ad:43:4f:cf:
         1c:ec:c3:c6:5d:ef:3b:95:23:00:47:f2:25:70:a8:27:f8:3a:
         a9:23:f6:d9:ae:5a:f7:82:4b:a1:a6:8a:ca:62:15:b9:9d:e2:
         2f:42:48:92:2b:e6:1d:d6:cb:64:e1:86:da:da:72:63:29:3c:
         4d:7e:70:62:72:95:0e:8f:76:2a:0a:8b:39:5c:ba:96:de:70:
         d2:be:7c:ab:25:37:28:f8:da:a9:27:c1:38:16:c4:0a:fe:b3:
         bd:0d:35:fe:c5:7b:eb:4f:8e:06:e9:42:0f:67:ea:a2:67:04:
         05:ee:c2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:28 2024 by rpki-client on console-fra.rpki-client.org