Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/47edb0ce-e40f-3168-acc3-5c8f5117f6d8.roa
File:                     47edb0ce-e40f-3168-acc3-5c8f5117f6d8.roa (raw, json)
Hash identifier:          /IKi35Y1YBNex4YBBHXPaMOgN8hh4y2Mc1uUsR5YKaw=
Subject key identifier:   A9:4E:E3:4A:A7:25:45:0B:5B:FD:42:73:3D:E2:F9:1E:C0:B5:D4:21
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E886F537
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/47edb0ce-e40f-3168-acc3-5c8f5117f6d8.roa
Signing time:             Wed 24 Jun 2020 22:50:58 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Sun 26 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:c11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Jun 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:86:f5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : May 26 04:00:00 2030 GMT
        Subject: CN=967accc9-c02e-4c3a-994e-b040bf0d6729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:2c:49:42:9a:d7:54:5d:9a:57:3f:de:2f:
                    3c:e7:a1:8d:9e:6a:f3:0c:21:74:47:7d:05:4d:80:
                    65:05:1c:81:f0:df:2e:12:1e:4a:27:65:e8:ed:79:
                    69:a9:85:21:f1:5e:d9:57:23:29:5e:d6:8f:e5:05:
                    85:eb:e8:19:00:6a:22:6b:ca:3b:86:12:37:65:d9:
                    46:0c:a3:ca:15:e6:b9:92:de:3c:b2:d9:02:47:66:
                    2f:f2:d4:5e:46:dd:17:8b:57:f2:4a:30:72:ce:8f:
                    7f:da:fb:ec:b5:22:3b:3f:a6:e6:6e:6b:7e:59:e0:
                    23:1a:72:cd:29:ba:9f:b1:b8:df:e4:57:9f:1e:82:
                    f9:7d:11:ef:14:11:ac:a3:68:3c:d0:ed:97:51:b9:
                    e6:60:0f:32:70:f7:fd:d0:be:bf:97:93:5e:c9:15:
                    3d:2c:c4:b4:da:12:eb:9c:f4:e9:17:20:88:93:30:
                    79:23:72:61:a9:9c:77:ed:13:b1:3c:d7:86:d0:58:
                    91:35:e7:4e:65:96:80:84:35:ac:9c:93:70:81:f4:
                    1c:7f:bd:a9:6a:f6:db:be:53:15:89:98:13:a6:f8:
                    eb:15:9f:c4:9d:2f:b4:b4:e9:73:06:23:d5:3b:95:
                    b8:74:eb:62:b7:f1:1f:8d:b2:f7:aa:4c:c6:78:d4:
                    3c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4E:E3:4A:A7:25:45:0B:5B:FD:42:73:3D:E2:F9:1E:C0:B5:D4:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/47edb0ce-e40f-3168-acc3-5c8f5117f6d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:c11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:71:7e:c7:64:7c:c3:a5:5a:8d:cd:79:99:c6:7e:fe:2a:22:
         dd:73:4c:8f:48:a7:cc:13:8e:cb:b4:c6:75:50:d0:f5:61:d1:
         b8:b7:ad:7f:62:7d:7c:0f:1e:10:91:92:39:cd:fc:51:5c:58:
         b7:89:82:c7:77:89:af:13:87:f6:7b:a2:cc:af:0a:0e:b6:fe:
         ba:9b:f4:0d:bc:44:bc:47:c0:93:74:e5:3a:3f:94:cc:92:2b:
         c2:a4:6d:12:49:a6:0f:35:e7:77:d7:80:58:86:6e:0b:c5:6e:
         52:1d:2d:11:3a:28:99:89:61:96:c9:af:aa:31:83:54:35:8e:
         bf:b8:9c:28:e5:dd:11:7b:13:fd:03:b3:4a:f5:16:07:59:de:
         fc:48:d7:7b:c6:aa:02:39:a8:2a:4b:68:56:3b:56:fa:e0:3e:
         b3:b1:d0:e2:c3:8f:75:63:b5:07:c9:d4:76:ee:92:c3:70:35:
         20:25:d8:7e:63:06:33:c7:9c:ed:87:f3:9f:00:2f:6e:82:67:
         60:92:38:d3:ef:58:55:57:9f:25:b0:f7:c4:94:98:c7:ca:20:
         af:39:8c:21:ae:67:ef:0e:92:e1:d1:ac:8a:46:02:7a:89:47:
         69:f2:7c:69:02:38:ae:05:98:d0:38:48:e4:66:09:bd:5d:c1:
         c4:0e:ec:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:21:02 2024 by rpki-client on console-ams.rpki-client.org