Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/5de78cc7-524e-3ba3-b2e2-9f533510d92d.roa
File:                     5de78cc7-524e-3ba3-b2e2-9f533510d92d.roa (raw, json)
Hash identifier:          JzjZIfUuz/VWuJMc1T3KSzM6Dh1vS87Hdr0h+vaTyl4=
Subject key identifier:   97:D3:67:4F:7E:68:F5:2E:B1:91:06:59:DF:00:AB:4F:52:FF:49:D4
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E885CF5B
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/5de78cc7-524e-3ba3-b2e2-9f533510d92d.roa
Signing time:             Wed 24 Jun 2020 22:49:43 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Mon 27 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:908::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:85:cf:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : May 27 04:00:00 2030 GMT
        Subject: CN=4c8cc77c-638f-43ff-9023-87f6d517fcb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0b:b8:d3:5d:cf:65:ae:02:f0:0d:0e:41:a3:
                    32:ed:51:cb:1f:0d:aa:12:01:cd:ca:d9:82:79:97:
                    79:62:1e:27:df:9d:0f:0b:e0:47:de:e8:98:5b:8a:
                    e3:96:a1:8e:a3:3c:5e:48:d1:90:e1:63:8f:0e:55:
                    8d:96:1f:4c:45:1a:49:07:50:aa:69:05:82:9d:de:
                    b1:ca:dd:25:f7:0e:44:2c:fd:22:b9:58:a1:53:70:
                    73:1e:d8:20:7c:3a:c3:15:a8:53:d1:31:61:9d:d9:
                    71:f8:f7:d6:44:15:c3:fa:52:90:7d:2b:97:38:0d:
                    36:38:e4:16:13:29:1e:60:66:1e:f0:4f:46:c7:dc:
                    ba:13:5d:ec:0d:b8:c1:28:0e:6d:5a:a6:9f:bf:85:
                    9e:25:66:bf:b4:09:c3:55:8b:ea:62:47:a6:fe:76:
                    97:af:de:3b:ea:87:c5:e3:19:ff:a7:95:a3:59:b9:
                    08:79:cd:af:19:70:3d:2d:b4:b6:d8:27:04:ba:2c:
                    72:09:44:8b:d6:81:86:79:d9:84:6e:72:2d:82:0a:
                    4d:f0:ff:1f:43:85:c0:97:88:e9:a7:69:8a:ad:78:
                    04:f2:e0:0d:68:84:24:a8:de:09:fc:24:19:ce:0e:
                    db:86:44:cb:a4:85:d7:63:56:37:44:92:7f:26:0b:
                    fe:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D3:67:4F:7E:68:F5:2E:B1:91:06:59:DF:00:AB:4F:52:FF:49:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/5de78cc7-524e-3ba3-b2e2-9f533510d92d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:908::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:40:f1:f1:86:b9:47:71:5b:ee:c0:24:7f:f6:d4:74:09:9d:
         ae:51:6f:99:42:d6:57:2e:8d:74:fd:e1:06:72:6b:2c:a2:8e:
         06:86:e1:09:4a:39:81:87:a4:7d:13:f3:46:9a:9a:08:08:90:
         27:0f:7f:24:bd:c1:98:28:2d:67:e3:25:bd:a3:99:c0:73:12:
         19:f0:e1:20:18:8d:86:d5:a0:21:b2:40:be:0a:55:e8:bf:e3:
         71:73:34:f1:29:2c:dd:e1:70:d1:37:74:46:9c:1f:c2:71:cb:
         2e:06:dd:f2:c3:43:a1:1b:34:2d:d9:80:33:b2:b4:99:e3:d2:
         48:1d:a2:5e:72:1e:29:01:c0:04:d8:6f:7a:c3:65:79:f0:b4:
         d4:89:37:e5:88:f1:99:5c:d4:73:db:d0:e7:2a:8e:8e:a6:01:
         6f:15:9e:aa:20:05:08:71:6a:a8:b8:86:4f:9b:51:b2:bb:1b:
         e4:aa:6b:97:21:f7:f2:8f:8b:97:94:d7:85:50:64:e3:53:8a:
         90:d6:e1:4b:23:40:a2:72:72:3b:38:d2:dd:1a:59:c9:af:0b:
         fa:5d:87:b1:67:94:ef:4e:4e:35:d6:a8:c1:df:48:1d:65:d9:
         29:78:d2:7b:d9:05:0d:44:94:a9:72:00:c1:9a:44:e4:6f:26:
         85:4f:c3:64
-----BEGIN CERTIFICATE-----
MIIGQjCCBSygAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcuiFz1swCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGRjNzQ3ZTY0LTI0YTgtNGM0OS1hN2Y5LTE2Y2IwYzI2OWJi
MDAeFw0yMDA2MjQwNDAwMDBaFw0zMDA1MjcwNDAwMDBaMC8xLTArBgNVBAMTJDRj
OGNjNzdjLTYzOGYtNDNmZi05MDIzLTg3ZjZkNTE3ZmNiMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOQLuNNdz2WuAvANDkGjMu1Ryx8NqhIBzcrZgnmX
eWIeJ9+dDwvgR97omFuK45ahjqM8XkjRkOFjjw5VjZYfTEUaSQdQqmkFgp3escrd
JfcORCz9IrlYoVNwcx7YIHw6wxWoU9ExYZ3Zcfj31kQVw/pSkH0rlzgNNjjkFhMp
HmBmHvBPRsfcuhNd7A24wSgObVqmn7+FniVmv7QJw1WL6mJHpv52l6/eO+qHxeMZ
/6eVo1m5CHnNrxlwPS20ttgnBLoscglEi9aBhnnZhG5yLYIKTfD/H0OFwJeI6adp
iq14BPLgDWiEJKjeCfwkGc4O24ZEy6SF12NWN0SSfyYL/lECAwEAAaOCA1gwggNU
MB0GA1UdDgQWBBSX02dPfmj1LrGRBlnfAKtPUv9J1DCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGM3NDdl
NjQtMjRhOC00YzQ5LWE3ZjktMTZjYjBjMjY5YmIwLzVkZTc4Y2M3LTUyNGUtM2Jh
My1iMmUyLTlmNTMzNTEwZDkyZC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2RjNzQ3ZTY0LTI0YTgtNGM0OS1hN2Y5
LTE2Y2IwYzI2OWJiMC9kYzc0N2U2NC0yNGE4LTRjNDktYTdmOS0xNmNiMGMyNjli
YjAuY3JsMB8GA1UdIwQYMBaAFC/s33GZAPO7jfNOMWI/q4VBLoDsMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvZGM3NDdlNjQtMjRhOC00YzQ5LWE3ZjktMTZjYjBj
MjY5YmIwLmNlcjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYgAewJCDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEB
CwOCAQEAdkDx8Ya5R3Fb7sAkf/bUdAmdrlFvmULWVy6NdP3hBnJrLKKOBobhCUo5
gYekfRPzRpqaCAiQJw9/JL3BmCgtZ+MlvaOZwHMSGfDhIBiNhtWgIbJAvgpV6L/j
cXM08Sks3eFw0Td0RpwfwnHLLgbd8sNDoRs0LdmAM7K0mePSSB2iXnIeKQHABNhv
esNlefC01Ik35YjxmVzUc9vQ5yqOjqYBbxWeqiAFCHFqqLiGT5tRsrsb5KprlyH3
8o+Ll5TXhVBk41OKkNbhSyNAonJyOzjS3RpZya8L+l2HsWeU705ONdaowd9IHWXZ
KXjSe9kFDUSUqXIAwZpE5G8mhU/DZA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:28 2024 by rpki-client on console-fra.rpki-client.org