Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/52d1620a-3a1c-37dc-8230-63fe6bd7bca2.roa
File:                     52d1620a-3a1c-37dc-8230-63fe6bd7bca2.roa (raw, json)
Hash identifier:          xjW3V5W08a5dlfLgN5AmRv9tqRSPLgy8uo1EIVOn0i8=
Subject key identifier:   7A:71:F4:A4:C7:71:A0:BE:9D:8F:F9:DF:05:50:60:42:F3:ED:96:89
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E8864081
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/52d1620a-3a1c-37dc-8230-63fe6bd7bca2.roa
Signing time:             Wed 24 Jun 2020 22:50:11 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Thu 23 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:909::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:86:40:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : May 23 04:00:00 2030 GMT
        Subject: CN=aba57585-b0d4-4275-a8be-d1107fe5b7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:8c:1f:bf:0f:ed:8f:64:d2:af:ee:ed:e7:6c:
                    6c:9e:8d:6b:d9:4b:28:70:de:9e:52:20:2d:dc:eb:
                    1e:ed:ae:ad:41:91:91:ad:48:f9:d1:c2:0d:67:c4:
                    00:91:cb:95:46:e2:bc:51:f7:1c:e2:83:0f:0e:f6:
                    79:24:bb:04:f8:61:bf:e8:d6:54:a7:90:c1:18:ad:
                    01:60:8b:c3:2b:8f:93:ce:4f:31:07:a3:c0:03:b5:
                    6a:64:18:e8:d9:3b:fd:27:20:b1:2f:97:cc:26:26:
                    89:4c:da:d9:5b:40:d3:f3:30:cf:dc:96:67:eb:52:
                    ca:fc:97:1f:8a:7a:4c:2d:32:6c:54:9e:44:d4:95:
                    3c:76:56:77:dc:d4:9d:a5:e9:73:fa:b1:1b:1e:8b:
                    75:ba:12:77:18:fb:e7:a6:3c:c9:b1:53:88:a4:e0:
                    f0:37:2c:bb:a5:fa:e8:6a:ec:9f:c6:38:2d:00:b6:
                    b1:b1:00:15:a2:4d:17:ea:c3:71:a9:71:91:2c:59:
                    8f:e8:f3:17:3a:df:72:54:94:24:0f:05:09:e9:aa:
                    5d:41:a6:75:00:72:2e:69:82:65:7c:14:59:c2:10:
                    06:95:e8:f5:fb:ee:b1:d0:b7:43:7c:2c:10:49:3f:
                    55:f0:0f:f4:62:fc:b2:95:bf:91:4a:0a:55:8d:b1:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:71:F4:A4:C7:71:A0:BE:9D:8F:F9:DF:05:50:60:42:F3:ED:96:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/52d1620a-3a1c-37dc-8230-63fe6bd7bca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:909::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:23:ae:c9:e1:82:d0:5e:59:04:2e:74:33:8d:c6:e6:4a:e0:
         c3:39:df:5b:14:a6:bc:57:a1:ed:07:07:92:84:3d:a7:91:58:
         37:2a:6b:c9:cd:2c:c6:f9:50:c4:5c:e3:3b:3f:dc:8f:e2:a3:
         b4:50:a3:a3:2e:b3:15:5f:a1:4c:de:0d:b8:ff:97:2a:7b:54:
         88:f1:87:dd:08:6c:ad:ee:04:6a:52:6d:1a:13:11:74:fd:03:
         8a:85:d7:a1:47:50:81:6a:0d:30:e2:5f:fa:a0:c2:85:c0:20:
         d6:e0:1a:14:93:7c:7a:9c:17:3d:5f:ad:c1:d1:fb:b2:c1:6a:
         cd:90:89:53:7c:a5:44:48:3c:a9:33:2a:8d:88:04:43:03:3f:
         9e:a1:b5:8e:c5:e4:7f:c0:49:e0:c2:8b:f6:49:d5:68:06:e7:
         e0:a9:04:56:ec:1c:7f:0d:30:b8:8e:df:3e:77:e4:50:d7:18:
         b4:09:49:eb:d5:eb:2e:23:e2:0c:9e:8b:3a:54:6f:bb:cd:ef:
         f5:57:3e:a3:65:8e:3d:3f:86:13:0b:41:88:20:33:d0:67:eb:
         2a:1b:65:c2:13:c4:b9:b3:ee:6e:fe:e4:45:59:e0:09:24:30:
         e5:76:11:33:fd:2d:61:42:b8:41:67:bb:84:89:27:d6:2e:39:
         0b:3d:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:30:23 2024 by rpki-client on console-fra.rpki-client.org