Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/ba9173ec-44ed-328a-a893-533f36120586.roa
File:                     ba9173ec-44ed-328a-a893-533f36120586.roa (raw, json)
Hash identifier:          0LUMNoA5Y77vwBKAxrVprIsmlicHiIpeaXwEDwk8QPk=
Subject key identifier:   47:95:78:A5:4A:60:57:19:C7:47:68:4A:86:AA:BF:5D:97:7D:48:52
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E8868B46
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/ba9173ec-44ed-328a-a893-533f36120586.roa
Signing time:             Wed 24 Jun 2020 22:50:31 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Sat 11 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:23::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:86:8b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : May 11 04:00:00 2030 GMT
        Subject: CN=1982af99-79d7-4191-a60c-95f6698da763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a2:b4:f5:96:72:62:f4:38:8f:88:b6:d1:fd:
                    d9:05:af:52:18:eb:ca:b5:d6:17:1e:96:88:6a:e3:
                    24:6a:2f:ad:bf:9e:e9:39:1b:e0:c3:ad:a3:b5:27:
                    de:3b:db:f2:32:99:7e:b2:d4:3f:42:bb:54:c8:6e:
                    a1:5b:ac:49:c0:b0:a9:2e:cc:f1:d4:c0:c5:1e:75:
                    75:c6:64:c4:19:3a:b0:04:cb:b6:c3:09:db:b1:50:
                    c6:a1:07:45:34:85:d8:29:ed:6a:c6:8e:7e:34:c8:
                    b8:d2:b9:58:07:26:29:c7:65:33:df:ab:df:0f:e1:
                    1b:d2:45:a5:2f:2d:bc:c6:a0:64:be:89:9d:ad:e5:
                    7b:9b:19:c1:f4:ef:03:7f:22:82:7f:5d:f8:95:22:
                    4d:76:45:46:95:e4:74:dd:bf:ff:3b:da:92:52:19:
                    01:3e:0c:7a:4b:cb:55:52:59:6e:9b:e9:c6:f8:08:
                    83:9e:da:42:c4:e0:c4:16:54:db:5c:a4:c4:71:a8:
                    d2:80:a3:fb:36:e9:69:43:38:47:85:3c:0a:fb:45:
                    2d:3a:cc:f2:db:4c:81:19:4c:f1:08:c8:f9:9a:cc:
                    9e:52:6a:53:94:8c:71:18:d8:3a:ae:d5:38:92:40:
                    4c:40:a0:00:d3:a2:75:ae:4c:87:23:aa:f3:4a:d8:
                    2e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:95:78:A5:4A:60:57:19:C7:47:68:4A:86:AA:BF:5D:97:7D:48:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/ba9173ec-44ed-328a-a893-533f36120586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:23::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:17:ae:d5:25:1e:67:33:d0:30:30:55:c9:cc:b9:4f:50:f5:
         4b:08:d4:3f:41:0b:ad:38:23:fe:86:d0:64:bc:45:da:1e:8e:
         0b:a4:5c:5b:35:1b:52:44:20:fd:5c:30:bc:6c:79:fc:9f:d0:
         cb:4a:ac:a3:73:eb:cd:87:3d:2b:2e:80:ff:43:0d:fd:de:9e:
         c8:b6:8e:a4:8e:80:5e:d8:1c:1d:b0:d3:0c:35:64:e7:bc:9f:
         b0:43:45:07:48:ed:c3:c2:c5:87:0d:f5:24:90:82:c4:ab:44:
         71:f9:a9:b6:e4:f4:8e:ad:95:4d:ef:0d:bf:bc:2c:10:5e:d1:
         4b:6b:2d:9d:69:85:e7:fd:9c:5f:11:4e:01:fc:e8:c6:05:47:
         bb:f3:75:84:1f:c8:dd:39:00:03:c7:83:f4:0c:59:1b:dc:0e:
         eb:85:fa:4d:ca:05:6b:c7:87:c0:b0:18:64:8a:50:1c:be:a1:
         03:fa:77:0a:07:1d:d6:f8:c4:17:01:3d:0e:2a:2b:12:2f:c3:
         ba:ef:a2:ff:36:7b:0d:78:4a:11:a6:5b:e5:d0:50:5d:29:68:
         16:14:25:cc:43:07:57:d2:00:0a:e2:d0:62:5e:cf:e4:69:05:
         76:5e:23:2a:a3:54:c1:02:76:07:57:ee:c2:1b:d7:29:46:a6:
         6f:f8:45:36
-----BEGIN CERTIFICATE-----
MIIGQjCCBSygAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcuiGi0YwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGRjNzQ3ZTY0LTI0YTgtNGM0OS1hN2Y5LTE2Y2IwYzI2OWJi
MDAeFw0yMDA2MjQwNDAwMDBaFw0zMDA1MTEwNDAwMDBaMC8xLTArBgNVBAMTJDE5
ODJhZjk5LTc5ZDctNDE5MS1hNjBjLTk1ZjY2OThkYTc2MzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAPKitPWWcmL0OI+IttH92QWvUhjryrXWFx6WiGrj
JGovrb+e6Tkb4MOto7Un3jvb8jKZfrLUP0K7VMhuoVusScCwqS7M8dTAxR51dcZk
xBk6sATLtsMJ27FQxqEHRTSF2CntasaOfjTIuNK5WAcmKcdlM9+r3w/hG9JFpS8t
vMagZL6Jna3le5sZwfTvA38ign9d+JUiTXZFRpXkdN2//zvaklIZAT4MekvLVVJZ
bpvpxvgIg57aQsTgxBZU21ykxHGo0oCj+zbpaUM4R4U8CvtFLTrM8ttMgRlM8QjI
+ZrMnlJqU5SMcRjYOq7VOJJATECgANOida5MhyOq80rYLu8CAwEAAaOCA1gwggNU
MB0GA1UdDgQWBBRHlXilSmBXGcdHaEqGqr9dl31IUjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGM3NDdl
NjQtMjRhOC00YzQ5LWE3ZjktMTZjYjBjMjY5YmIwL2JhOTE3M2VjLTQ0ZWQtMzI4
YS1hODkzLTUzM2YzNjEyMDU4Ni5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2RjNzQ3ZTY0LTI0YTgtNGM0OS1hN2Y5
LTE2Y2IwYzI2OWJiMC9kYzc0N2U2NC0yNGE4LTRjNDktYTdmOS0xNmNiMGMyNjli
YjAuY3JsMB8GA1UdIwQYMBaAFC/s33GZAPO7jfNOMWI/q4VBLoDsMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvZGM3NDdlNjQtMjRhOC00YzQ5LWE3ZjktMTZjYjBj
MjY5YmIwLmNlcjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYgAewAIzBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEB
CwOCAQEAaReu1SUeZzPQMDBVycy5T1D1SwjUP0ELrTgj/obQZLxF2h6OC6RcWzUb
UkQg/VwwvGx5/J/Qy0qso3PrzYc9Ky6A/0MN/d6eyLaOpI6AXtgcHbDTDDVk57yf
sENFB0jtw8LFhw31JJCCxKtEcfmptuT0jq2VTe8Nv7wsEF7RS2stnWmF5/2cXxFO
AfzoxgVHu/N1hB/I3TkAA8eD9AxZG9wO64X6TcoFa8eHwLAYZIpQHL6hA/p3Cgcd
1vjEFwE9DiorEi/Duu+i/zZ7DXhKEaZb5dBQXSloFhQlzEMHV9IACuLQYl7P5GkF
dl4jKqNUwQJ2B1fuwhvXKUamb/hFNg==
-----END CERTIFICATE-----
Generated at Sat May 18 15:37:56 2024 by rpki-client on console-fra.rpki-client.org