Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132353a3a2f34382d3438203d3e203537313536.roa
File:                     323630323a666131633a3132353a3a2f34382d3438203d3e203537313536.roa (raw, json)
Hash identifier:          2q9PfH/pCt2jqlLBiUR/9BQSUZPSkGB569tqMMAHN+Y=
Subject key identifier:   1B:93:1D:B8:AB:46:EF:BB:1F:B5:68:1F:5D:CD:A4:EC:B0:FA:D4:5D
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       73DBA9FF36CA9A0F9B535059ADA680D472E4CEB1
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132353a3a2f34382d3438203d3e203537313536.roa
Signing time:             Sat 11 Nov 2023 22:21:51 +0000
ROA not before:           Sat 11 Nov 2023 22:16:51 +0000
ROA not after:            Sat 09 Nov 2024 22:21:51 +0000
asID:                     57156
IP address blocks:        2602:fa1c:125::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/8ac1752e-3020-499d-a952-d54bdfadf765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/8ac1752e-3020-499d-a952-d54bdfadf765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 10:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:db:a9:ff:36:ca:9a:0f:9b:53:50:59:ad:a6:80:d4:72:e4:ce:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Nov 11 22:16:51 2023 GMT
            Not After : Nov  9 22:21:51 2024 GMT
        Subject: CN=1B931DB8AB46EFBB1FB5681F5DCDA4ECB0FAD45D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:cd:a3:bf:0d:75:fb:d5:bd:96:da:d6:4f:
                    f5:fe:bc:58:0f:a5:a4:cf:be:26:7e:3b:fc:40:8c:
                    0f:2a:90:d9:d0:8d:06:2b:93:c4:e9:ce:3f:05:66:
                    af:95:3c:27:51:e5:d1:b7:8b:18:06:35:43:c7:4c:
                    c3:d7:6c:c9:01:fb:85:de:ca:81:49:8d:82:3b:6a:
                    f4:38:5c:96:5a:84:19:00:10:8e:aa:d5:54:42:f6:
                    46:fc:a1:51:43:05:d4:13:82:4a:8f:84:74:9d:1f:
                    6a:47:38:dc:5d:ee:82:cd:bb:63:1f:50:57:b6:70:
                    1f:21:4b:fc:e0:f6:c5:fd:42:59:22:70:b3:ef:82:
                    10:61:23:6c:9d:13:f6:a1:fa:9b:39:99:e3:7f:c0:
                    70:97:39:52:cd:d7:c9:e2:47:d5:eb:46:49:fe:6b:
                    9b:51:6b:bc:0a:00:6a:eb:db:da:6a:a1:65:7a:e5:
                    5e:1b:26:9c:92:cd:08:86:ca:b2:85:51:53:21:34:
                    70:d3:0d:f8:14:0e:26:92:73:45:d0:35:2f:25:d0:
                    6c:75:1c:88:9d:a6:3e:44:28:ca:25:fc:6e:99:ce:
                    03:5a:33:08:72:c0:f9:5d:75:07:0e:22:05:0f:95:
                    40:ed:56:7c:06:83:16:45:a7:f4:bb:a2:66:4c:21:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:93:1D:B8:AB:46:EF:BB:1F:B5:68:1F:5D:CD:A4:EC:B0:FA:D4:5D
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132353a3a2f34382d3438203d3e203537313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:125::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:d9:4b:bf:44:a0:da:5f:69:98:1c:aa:55:ce:91:f4:de:3e:
         2c:47:4a:b9:c7:26:23:42:d2:fa:d4:ef:82:6a:47:eb:31:27:
         df:21:04:29:86:69:15:08:21:25:ba:42:b7:aa:63:39:6c:57:
         e2:36:b9:9b:1f:c8:50:6e:ac:ab:1e:10:60:6f:dd:61:04:67:
         9f:ee:59:78:ac:0e:93:5d:45:80:4b:03:01:38:18:5f:ed:89:
         74:bf:f2:9a:e7:10:1d:9d:45:ad:43:1b:0c:9b:63:02:0b:85:
         24:85:62:c9:d7:e2:f7:7d:5a:28:30:21:30:ec:05:8a:22:a0:
         b1:f6:9d:7c:41:1b:9f:18:47:0d:d9:aa:c7:e0:c4:20:70:55:
         19:a5:e6:cf:57:d3:16:ee:7c:f1:62:54:cc:bd:52:ad:b6:76:
         61:55:0c:f4:40:77:1a:eb:b0:ff:08:8c:57:f0:3b:03:de:62:
         ca:c7:3e:da:77:10:80:95:b8:a6:ed:4c:ab:16:ca:81:3e:ab:
         9e:43:f5:69:cd:d2:e6:0b:0c:a2:25:4e:1e:c8:a5:05:5a:e7:
         62:e0:1e:cc:09:55:24:01:35:0c:a7:b9:ce:71:10:f8:41:95:
         d4:c2:e1:1f:4c:44:50:61:66:02:37:39:65:08:9e:b3:77:da:
         30:7d:dc:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:43:12 2024 by rpki-client on console-ams.rpki-client.org