Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dd3677b2-7028-30c0-8648-a6a0a70f0ced.roa
File:                     dd3677b2-7028-30c0-8648-a6a0a70f0ced.roa (raw, json)
Hash identifier:          m9yAbphLNpZZg6986Xb/iPTYGUrir3m76HhO0yVFW0c=
Subject key identifier:   67:AE:EF:53:FF:4A:CF:64:A6:4D:91:C8:95:77:21:85:FB:91:ED:71
Certificate issuer:       /CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
Certificate serial:       010D0C9F4328576D51CC73C042CFC172E886C113
Authority key identifier: 2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dd3677b2-7028-30c0-8648-a6a0a70f0ced.roa
Signing time:             Wed 24 Jun 2020 22:50:44 +0000
ROA not before:           Wed 24 Jun 2020 04:00:00 +0000
ROA not after:            Thu 30 May 2030 04:00:00 +0000
asID:                     8068
IP address blocks:        2620:1ec:8f9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:e8:86:c1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc747e64-24a8-4c49-a7f9-16cb0c269bb0
        Validity
            Not Before: Jun 24 04:00:00 2020 GMT
            Not After : May 30 04:00:00 2030 GMT
        Subject: CN=82c561bb-4f84-4512-bd63-0fbac5a315f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:21:52:f7:89:e2:fc:31:77:4f:6e:55:af:96:
                    41:98:c3:6a:73:56:4c:50:57:75:5b:e4:0d:82:7b:
                    c7:28:72:24:42:c9:3d:82:c2:8e:6e:4c:a6:4c:89:
                    62:ce:38:11:5f:de:46:66:6f:40:f9:42:ea:f8:42:
                    1a:ae:a4:16:16:5b:9c:14:d9:82:fd:05:c8:e7:08:
                    fd:5f:f5:61:47:84:1f:24:b1:59:00:9e:6c:70:0a:
                    8d:8e:2c:7d:1f:42:54:44:b0:5c:7f:df:36:69:8a:
                    92:de:9d:d3:75:74:ef:b4:f6:37:f3:64:4e:5b:29:
                    e0:f0:76:52:e6:b1:b4:16:05:63:ea:d5:f6:71:bb:
                    7a:df:a3:d9:aa:4a:37:3b:fd:9d:ab:f5:0c:84:f3:
                    f9:00:94:42:8a:00:ae:05:f1:98:60:24:09:44:8e:
                    5b:d9:0f:71:89:5e:25:60:cc:82:31:90:a9:d3:60:
                    c1:dd:10:96:06:36:df:ae:ea:9a:87:0c:b7:7c:0f:
                    69:14:c7:7c:e4:1c:ad:7a:ef:8b:88:62:da:a3:ee:
                    38:8e:5f:79:37:ba:ce:31:e1:79:38:ec:a8:1e:e5:
                    1d:80:72:bd:62:d3:ff:7b:0a:ec:8f:25:ef:13:b8:
                    7e:d9:84:95:9c:5c:eb:01:c7:39:44:3f:b3:5f:cf:
                    12:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:AE:EF:53:FF:4A:CF:64:A6:4D:91:C8:95:77:21:85:FB:91:ED:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dd3677b2-7028-30c0-8648-a6a0a70f0ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.crl

            X509v3 Authority Key Identifier:
                keyid:2F:EC:DF:71:99:00:F3:BB:8D:F3:4E:31:62:3F:AB:85:41:2E:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/dc747e64-24a8-4c49-a7f9-16cb0c269bb0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:1ec:8f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:87:03:9b:5a:30:51:0f:42:90:da:8c:97:8d:61:51:dd:eb:
         7f:fc:c8:e5:01:06:8b:ab:ee:19:02:f6:9a:aa:b6:7a:b4:60:
         19:87:66:4a:d9:90:60:47:c4:e4:f7:ce:87:35:15:7b:b5:1f:
         09:32:6d:88:55:40:af:89:5b:2a:69:2c:68:a3:a9:a2:9d:eb:
         23:58:66:9b:21:ba:f2:98:1b:1c:fc:53:13:73:da:16:94:98:
         4a:54:5f:4a:55:0a:7d:d7:28:6f:97:94:54:55:71:0c:2f:e2:
         a1:f4:b3:95:3c:92:38:20:1e:e0:ac:07:42:4a:31:7e:84:16:
         b9:28:49:ec:33:27:9f:7d:a7:72:a0:e8:7d:b5:b1:a5:f5:21:
         e1:4d:65:7f:54:41:ed:cd:33:c7:0f:86:00:bb:8d:e7:2d:45:
         95:0c:c6:34:9c:67:65:54:70:06:aa:7b:91:72:db:d5:20:66:
         fd:29:4c:1d:2d:6e:5b:66:1e:5e:74:9b:8c:ff:3f:b0:6b:50:
         cd:ac:90:83:34:9f:8e:14:85:6a:9c:09:60:37:b4:2d:65:08:
         d5:77:8e:4f:f8:dd:61:51:33:3a:b1:8b:c7:cd:b9:ea:a3:6e:
         f5:d1:7b:7e:1c:31:2b:82:50:1a:dc:83:10:4b:49:99:ae:5d:
         7f:a7:6a:df
-----BEGIN CERTIFICATE-----
MIIGQjCCBSygAwIBAgIUAQ0Mn0MoV21RzHPAQs/BcuiGwRMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGRjNzQ3ZTY0LTI0YTgtNGM0OS1hN2Y5LTE2Y2IwYzI2OWJi
MDAeFw0yMDA2MjQwNDAwMDBaFw0zMDA1MzAwNDAwMDBaMC8xLTArBgNVBAMTJDgy
YzU2MWJiLTRmODQtNDUxMi1iZDYzLTBmYmFjNWEzMTVmNDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANohUveJ4vwxd09uVa+WQZjDanNWTFBXdVvkDYJ7
xyhyJELJPYLCjm5MpkyJYs44EV/eRmZvQPlC6vhCGq6kFhZbnBTZgv0FyOcI/V/1
YUeEHySxWQCebHAKjY4sfR9CVESwXH/fNmmKkt6d03V077T2N/NkTlsp4PB2Uuax
tBYFY+rV9nG7et+j2apKNzv9nav1DITz+QCUQooArgXxmGAkCUSOW9kPcYleJWDM
gjGQqdNgwd0QlgY2367qmocMt3wPaRTHfOQcrXrvi4hi2qPuOI5feTe6zjHheTjs
qB7lHYByvWLT/3sK7I8l7xO4ftmElZxc6wHHOUQ/s1/PErcCAwEAAaOCA1gwggNU
MB0GA1UdDgQWBBRnru9T/0rPZKZNkciVdyGF+5HtcTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy83NDZlMDExMS1mYWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZGM3NDdl
NjQtMjRhOC00YzQ5LWE3ZjktMTZjYjBjMjY5YmIwL2RkMzY3N2IyLTcwMjgtMzBj
MC04NjQ4LWE2YTBhNzBmMGNlZC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFm
Yi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2RjNzQ3ZTY0LTI0YTgtNGM0OS1hN2Y5
LTE2Y2IwYzI2OWJiMC9kYzc0N2U2NC0yNGE4LTRjNDktYTdmOS0xNmNiMGMyNjli
YjAuY3JsMB8GA1UdIwQYMBaAFC/s33GZAPO7jfNOMWI/q4VBLoDsMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1mYWZiLTQzMGYt
Yjc3OC1kMjA0Y2ZjZDk5YTgvZGM3NDdlNjQtMjRhOC00YzQ5LWE3ZjktMTZjYjBj
MjY5YmIwLmNlcjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYgAewI+TBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEB
CwOCAQEAEocDm1owUQ9CkNqMl41hUd3rf/zI5QEGi6vuGQL2mqq2erRgGYdmStmQ
YEfE5PfOhzUVe7UfCTJtiFVAr4lbKmksaKOpop3rI1hmmyG68pgbHPxTE3PaFpSY
SlRfSlUKfdcob5eUVFVxDC/iofSzlTySOCAe4KwHQkoxfoQWuShJ7DMnn32ncqDo
fbWxpfUh4U1lf1RB7c0zxw+GALuN5y1FlQzGNJxnZVRwBqp7kXLb1SBm/SlMHS1u
W2YeXnSbjP8/sGtQzayQgzSfjhSFapwJYDe0LWUI1XeOT/jdYVEzOrGLx8256qNu
9dF7fhwxK4JQGtyDEEtJma5df6dq3w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:28 2024 by rpki-client on console-fra.rpki-client.org