Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/8ba7f749-80c5-359f-8d89-81d3ba43d0dc.roa
File:                     8ba7f749-80c5-359f-8d89-81d3ba43d0dc.roa (raw, json)
Hash identifier:          RSj8D8nkbj5yOhddWk2zYlOAn3bZ7rabssZtaefaCiM=
Subject key identifier:   62:E2:A5:68:EA:D3:06:33:FC:B4:A7:34:B7:B5:A8:C0:46:CC:64:12
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F43285838D1670D565FE5A0D2D9473980
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/8ba7f749-80c5-359f-8d89-81d3ba43d0dc.roa
Signing time:             Tue 02 Feb 2021 05:00:00 +0000
ROA not before:           Tue 02 Feb 2021 05:00:00 +0000
ROA not after:            Sun 26 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:47::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:38:d1:67:0d:56:5f:e5:a0:d2:d9:47:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Feb  2 05:00:00 2021 GMT
            Not After : May 26 04:00:00 2030 GMT
        Subject: CN=2b062a4c-1945-4e39-9697-b80d16e7d39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:4a:e0:9e:8d:a6:98:eb:98:34:34:53:2a:
                    19:3f:23:18:26:80:bd:b1:86:97:e7:e5:d0:4f:e1:
                    25:c5:0f:cd:99:97:33:3e:d1:63:7a:25:74:06:3e:
                    bd:29:e6:d1:fd:da:c7:f3:18:4e:45:2d:60:1d:b4:
                    dd:95:2f:42:70:c3:71:42:63:a6:19:32:e9:76:db:
                    c6:ae:2f:c1:f6:78:8d:0d:ed:a3:e1:76:dd:95:77:
                    34:2f:68:07:a6:c0:e0:e5:e0:db:9e:e7:e6:f2:d8:
                    a7:c7:5f:c4:8a:13:e5:83:f9:d4:cc:ad:34:92:c9:
                    88:f3:14:f2:35:d8:80:f8:3a:36:23:0e:da:3f:6a:
                    95:ae:db:55:90:ba:7c:a6:80:c0:1f:00:65:4c:36:
                    bb:f3:75:36:70:82:8b:27:19:f8:17:06:4d:00:25:
                    f0:ae:eb:0e:33:06:7f:a4:cc:af:aa:39:4b:e9:00:
                    f3:b0:a6:f7:7e:72:cd:49:5d:a1:65:6e:9d:d2:01:
                    9b:52:09:9b:17:1a:81:2c:45:60:19:66:59:73:0e:
                    19:29:26:84:2e:11:18:01:7d:48:80:61:0b:1b:f6:
                    74:03:c3:d0:d5:b6:70:4b:d6:56:f4:63:65:9c:cd:
                    9c:ec:5f:be:21:8b:17:aa:49:cc:35:e6:bc:11:db:
                    57:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E2:A5:68:EA:D3:06:33:FC:B4:A7:34:B7:B5:A8:C0:46:CC:64:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/8ba7f749-80c5-359f-8d89-81d3ba43d0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:47::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:16:cd:a6:47:69:18:e7:3e:e3:83:af:40:bf:4e:0f:16:bf:
         87:c2:a9:69:26:1d:02:3c:10:51:97:ff:c9:e7:cc:c2:1c:52:
         4d:4d:65:7e:2f:f5:7d:c6:a2:03:53:48:25:5f:8d:68:2f:e0:
         d5:a3:e1:be:fa:70:34:99:ac:d6:11:c8:37:f4:4d:23:cd:ca:
         00:2d:3e:d6:54:8c:aa:33:77:42:20:ae:f4:74:9a:7b:0d:64:
         56:78:d6:fd:48:72:ee:c6:98:0f:ee:10:2a:4b:aa:c5:8f:af:
         78:73:30:0d:a2:99:4e:67:a2:b0:5d:e3:cb:87:ac:f2:2a:27:
         cd:b0:6f:52:97:d1:90:d0:80:74:78:38:3e:22:a5:78:79:93:
         83:c8:39:6e:0f:0e:3d:4b:13:e8:19:02:d2:70:a7:0f:72:1b:
         7b:d0:a6:3f:45:a7:64:aa:08:0c:98:8b:67:a1:e4:eb:08:9b:
         ea:90:bd:d4:b7:6a:01:f3:b8:4b:0f:75:a6:58:71:e3:6f:5f:
         67:0c:93:73:38:5f:8c:a6:65:08:5c:1f:29:6a:f2:7a:87:23:
         94:34:f2:af:4e:c3:28:f8:bb:49:11:77:4b:81:a4:51:c3:75:
         d9:23:31:6d:22:fa:03:81:b2:5f:81:78:1b:53:75:1a:c6:9d:
         88:fe:1c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 06:28:41 2024 by rpki-client on console-fra.rpki-client.org