Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/7f4e0546-2f16-35d6-a97f-42753e3962ef.roa
File:                     7f4e0546-2f16-35d6-a97f-42753e3962ef.roa (raw, json)
Hash identifier:          yLbUG3k3rZ6UyenFgt/7n0KZ7uB3tSeAqpsU4ZRGcGQ=
Subject key identifier:   C9:13:FC:F2:5B:7B:7A:E3:27:9A:AB:1E:6A:0D:AD:16:4B:B2:DF:86
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E8864ABF
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/7f4e0546-2f16-35d6-a97f-42753e3962ef.roa
Signing time:             Wed 24 Jun 2020 22:50:14 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Mon 06 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:8f0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:86:4a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : May  6 04:00:00 2030 GMT
        Subject: CN=fd9e22b1-7ab9-4133-8a91-2462dc6d6e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f9:54:2d:9c:38:f3:49:5c:e0:7d:fa:a2:8a:
                    83:f7:78:80:de:1b:5f:4b:94:98:41:08:e3:08:f9:
                    a1:f3:30:5b:d3:f6:2c:13:a2:9b:63:0d:2f:93:ff:
                    b7:77:c7:25:2b:31:7e:77:fa:b4:c5:bd:2a:69:de:
                    c3:49:39:af:72:96:69:af:69:48:2f:6b:17:87:9c:
                    ed:76:8c:69:39:ad:62:da:31:98:db:25:58:02:4f:
                    08:f2:99:dc:9c:a5:bc:a0:63:37:dd:be:d2:34:d0:
                    b5:f0:c8:7b:d1:5b:86:0d:98:48:fe:13:0a:07:b8:
                    36:f6:70:04:27:d7:bd:93:45:15:50:ec:73:1c:92:
                    ba:58:cd:e7:4c:f3:e4:81:67:70:61:a7:5d:a5:ae:
                    e7:5d:84:59:c4:50:19:3e:98:9a:61:ad:64:ff:da:
                    ca:b4:0d:9d:06:28:7d:ea:19:aa:05:3f:84:51:6c:
                    55:55:d8:e9:65:3a:25:7a:da:71:95:99:d8:b6:6c:
                    39:ec:ac:bb:97:e2:82:d4:93:db:90:c0:f4:46:c8:
                    88:06:b0:b7:61:bd:39:bd:c6:78:f5:89:01:70:a2:
                    df:55:0a:27:5e:04:4f:d5:c0:df:75:73:af:bf:42:
                    69:da:b5:28:9c:2c:7e:a7:46:5c:f7:b6:dd:65:fa:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:13:FC:F2:5B:7B:7A:E3:27:9A:AB:1E:6A:0D:AD:16:4B:B2:DF:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/7f4e0546-2f16-35d6-a97f-42753e3962ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:8f0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:ea:77:80:73:0b:27:92:3f:f7:3f:85:98:95:ef:92:21:ea:
         13:93:fa:5e:36:0c:0e:37:96:8b:f5:ef:53:22:d9:e0:21:57:
         c9:79:06:65:b8:1b:42:d9:56:00:71:ae:d6:f4:96:a1:7d:20:
         f1:dd:13:92:3c:ed:ea:f6:d3:66:0b:39:26:85:90:36:4c:6f:
         e7:11:a9:7b:fb:81:1d:7d:30:af:18:b9:bf:1e:90:f3:c1:84:
         2b:e5:de:67:75:2b:1f:8d:59:91:0b:dc:37:4a:21:4e:0a:83:
         69:be:bd:f0:6f:0b:46:93:a2:9b:c5:48:7d:ea:ce:0d:b0:e1:
         11:19:90:06:6f:5a:83:16:0a:c7:bc:66:ae:50:4d:07:c6:64:
         b1:90:f1:9d:fb:66:d6:01:0c:63:e0:4e:eb:06:3d:ed:1b:3e:
         20:33:fd:e1:4c:64:3a:e4:e5:ff:9f:b2:ac:f4:3c:c9:f9:cb:
         74:da:5b:0e:e5:fa:94:70:05:1e:40:74:b9:f3:3e:52:82:cf:
         43:0b:41:ca:e4:8a:a0:7f:b1:26:72:e4:63:c7:77:26:d6:2f:
         9d:02:1d:6c:12:17:3d:29:b7:56:65:30:ad:f5:1d:e3:1b:8c:
         f7:05:d6:8c:42:4d:05:bc:fc:1c:d0:87:53:c4:3c:ae:c1:6f:
         9c:66:75:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:28 2024 by rpki-client on console-fra.rpki-client.org