Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/d7309432-39a1-3403-a013-e634f65cd8f0.roa
File:                     d7309432-39a1-3403-a013-e634f65cd8f0.roa (raw, json)
Hash identifier:          eIEvngiP/NQ4C8zZqpv8oFUinCLt5K+inr42/RXB4mg=
Subject key identifier:   C5:D1:1E:DB:EF:02:04:93:78:46:74:08:E3:87:EF:1E:3F:A3:4C:2A
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E885EDC5
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/d7309432-39a1-3403-a013-e634f65cd8f0.roa
Signing time:             Wed 24 Jun 2020 22:49:50 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Tue 21 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:85:ed:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : May 21 04:00:00 2030 GMT
        Subject: CN=cd429684-845d-4e0e-b0cc-0aa8149fe243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:b2:66:2b:5d:91:31:9b:a5:e8:d4:06:2e:
                    8b:f0:f9:33:94:0c:96:38:29:cc:14:d3:41:a0:d2:
                    8d:96:5a:b3:c4:25:33:12:af:9d:67:4a:28:6c:b7:
                    80:fb:62:52:84:84:f7:51:f0:6a:3b:2d:38:54:ea:
                    17:78:8a:bb:6b:c0:1e:56:bc:49:9d:56:b5:e1:8b:
                    e4:34:a5:18:78:30:35:10:21:b0:c4:1a:7f:17:f5:
                    af:5e:28:2c:0c:15:62:ab:44:f6:a2:51:f9:e8:08:
                    1c:72:11:0f:64:ea:1e:3e:18:d8:a8:b5:24:30:e9:
                    e0:ea:2d:03:6b:9d:42:42:c0:a1:77:83:fa:9e:13:
                    69:0b:7b:fb:88:85:15:b3:5b:26:0a:3f:59:1b:d0:
                    31:db:be:5e:5b:e7:e3:32:8e:1d:2d:9e:7f:06:58:
                    14:f4:ab:d6:9e:8f:d8:1c:f0:0b:d3:5e:72:fe:f7:
                    ae:50:dd:d1:6d:ed:04:29:e7:48:86:c1:f6:b3:ac:
                    87:de:9d:2b:db:b3:db:58:72:ca:ac:e3:84:3c:74:
                    5e:f8:f6:47:e7:22:1f:3a:7a:ae:03:9a:03:97:9b:
                    58:b1:6b:cb:83:4e:a9:f0:d2:9b:02:72:a3:67:8f:
                    61:b5:02:32:4f:00:1a:6b:59:2b:ea:6a:fd:fb:c0:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D1:1E:DB:EF:02:04:93:78:46:74:08:E3:87:EF:1E:3F:A3:4C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/d7309432-39a1-3403-a013-e634f65cd8f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ce:3c:e6:c8:78:31:16:8f:cc:5b:77:c0:bc:de:a6:a9:90:
         ca:4e:3e:a6:cd:fd:c3:a9:26:c7:79:d8:a1:72:ca:37:72:2e:
         ac:df:c0:44:91:66:13:00:ec:bd:17:e2:21:da:e6:3e:ec:0d:
         69:f0:95:0f:1d:a9:b9:2f:4d:63:9b:ed:c2:62:9d:fd:b1:de:
         bd:d4:d9:dd:73:2e:ba:41:48:6d:0d:11:82:3f:f1:f7:51:c1:
         61:73:c7:d2:23:f1:35:a0:56:69:db:73:5d:87:cf:a5:09:c2:
         63:23:47:68:5e:67:f1:de:15:d6:77:f3:5c:1a:44:a9:c7:24:
         2c:3d:9b:73:18:ee:35:19:be:c0:71:0b:df:1a:7a:f9:5f:96:
         6a:95:d7:78:32:99:c8:49:cc:0e:f6:ee:ab:f6:3b:53:7c:77:
         8f:8d:cb:06:fd:ef:78:76:63:c2:7a:21:57:6d:ae:10:21:69:
         4d:52:e8:37:55:51:5c:e4:c5:5f:96:3b:1c:40:c2:3f:a2:02:
         e4:d2:85:97:3d:18:06:cd:cb:4d:4d:6a:11:84:ba:23:e0:0f:
         d7:28:22:51:06:db:48:3a:9a:ae:06:1d:58:ec:51:30:69:ed:
         7a:1d:d4:6c:4c:5a:29:f2:42:0a:4e:a8:ea:61:bd:6f:e8:7c:
         ab:85:ed:61
-----BEGIN CERTIFICATE-----
MIIGQjCCBSygAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcuiF7cUwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGRjNzQ3ZTY0LTI0YTgtNGM0OS1hN2Y5LTE2Y2IwYzI2OWJi
MDAeFw0yMDA2MjQwNDAwMDBaFw0zMDA1MjEwNDAwMDBaMC8xLTArBgNVBAMTJGNk
NDI5Njg0LTg0NWQtNGUwZS1iMGNjLTBhYTgxNDlmZTI0MzCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKoCsmYrXZExm6Xo1AYui/D5M5QMljgpzBTTQaDS
jZZas8QlMxKvnWdKKGy3gPtiUoSE91HwajstOFTqF3iKu2vAHla8SZ1WteGL5DSl
GHgwNRAhsMQafxf1r14oLAwVYqtE9qJR+egIHHIRD2TqHj4Y2Ki1JDDp4OotA2ud
QkLAoXeD+p4TaQt7+4iFFbNbJgo/WRvQMdu+Xlvn4zKOHS2efwZYFPSr1p6P2Bzw
C9Necv73rlDd0W3tBCnnSIbB9rOsh96dK9uz21hyyqzjhDx0Xvj2R+ciHzp6rgOa
A5ebWLFry4NOqfDSmwJyo2ePYbUCMk8AGmtZK+pq/fvAL80CAwEAAaOCA1gwggNU
MB0GA1UdDgQWBBTF0R7b7wIEk3hGdAjjh+8eP6NMKjCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGM3NDdl
NjQtMjRhOC00YzQ5LWE3ZjktMTZjYjBjMjY5YmIwL2Q3MzA5NDMyLTM5YTEtMzQw
My1hMDEzLWU2MzRmNjVjZDhmMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2RjNzQ3ZTY0LTI0YTgtNGM0OS1hN2Y5
LTE2Y2IwYzI2OWJiMC9kYzc0N2U2NC0yNGE4LTRjNDktYTdmOS0xNmNiMGMyNjli
YjAuY3JsMB8GA1UdIwQYMBaAFC/s33GZAPO7jfNOMWI/q4VBLoDsMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvZGM3NDdlNjQtMjRhOC00YzQ5LWE3ZjktMTZjYjBj
MjY5YmIwLmNlcjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYgAewABjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEB
CwOCAQEAOM485sh4MRaPzFt3wLzepqmQyk4+ps39w6kmx3nYoXLKN3IurN/ARJFm
EwDsvRfiIdrmPuwNafCVDx2puS9NY5vtwmKd/bHevdTZ3XMuukFIbQ0Rgj/x91HB
YXPH0iPxNaBWadtzXYfPpQnCYyNHaF5n8d4V1nfzXBpEqcckLD2bcxjuNRm+wHEL
3xp6+V+WapXXeDKZyEnMDvbuq/Y7U3x3j43LBv3veHZjwnohV22uECFpTVLoN1VR
XOTFX5Y7HEDCP6IC5NKFlz0YBs3LTU1qEYS6I+AP1ygiUQbbSDqargYdWOxRMGnt
eh3UbExaKfJCCk6o6mG9b+h8q4XtYQ==
-----END CERTIFICATE-----
Generated at Sun Nov 24 16:08:26 2024 by rpki-client on console-ams.rpki-client.org