Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132363a3a2f34382d3438203d3e203537313536.roa
File:                     323630323a666131633a3132363a3a2f34382d3438203d3e203537313536.roa (raw, json)
Hash identifier:          E7QuVbKuyutfKK068noI3sO25KizOSndSLRqqiB/OaM=
Subject key identifier:   CC:7C:08:11:89:1A:AD:F5:BA:88:AB:52:C5:53:0E:06:08:24:14:E9
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       37A9B6AF0C182C0D0098CC18E922C4946FB9DAFC
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132363a3a2f34382d3438203d3e203537313536.roa
Signing time:             Sat 11 Nov 2023 22:22:31 +0000
ROA not before:           Sat 11 Nov 2023 22:17:31 +0000
ROA not after:            Sat 09 Nov 2024 22:22:31 +0000
asID:                     57156
IP address blocks:        2602:fa1c:126::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/8ac1752e-3020-499d-a952-d54bdfadf765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/8ac1752e-3020-499d-a952-d54bdfadf765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 10:48:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:a9:b6:af:0c:18:2c:0d:00:98:cc:18:e9:22:c4:94:6f:b9:da:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Nov 11 22:17:31 2023 GMT
            Not After : Nov  9 22:22:31 2024 GMT
        Subject: CN=CC7C0811891AADF5BA88AB52C5530E06082414E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:d2:4b:94:90:4b:2c:18:e3:ea:ac:7d:3f:
                    71:a4:24:aa:09:c0:c1:62:49:be:e0:7a:7a:13:14:
                    09:a0:c1:e5:3e:a5:b4:78:d3:0d:9c:55:58:3a:94:
                    94:e7:a5:e6:cf:03:53:44:e1:89:e3:b4:ea:7a:05:
                    84:99:6a:3c:3d:e6:ff:6e:89:26:8c:64:2e:19:19:
                    22:87:fc:2e:44:b0:68:8a:e6:f6:37:d4:c2:14:3c:
                    88:a1:10:82:9e:35:2b:ad:c6:e8:6a:c9:c3:94:0e:
                    b8:8e:96:cd:f6:ff:37:81:8f:1d:8d:71:82:ea:f9:
                    cd:c0:2e:38:4b:dd:9b:ff:d4:58:3c:d4:ec:e3:d7:
                    2c:50:17:74:f9:87:5c:fb:79:2f:0f:21:5d:7f:13:
                    39:ad:c7:77:d2:6d:4d:a7:df:b4:0c:f3:e7:d3:66:
                    d7:3e:dd:dc:99:87:1f:de:2e:a5:1e:36:35:8b:e4:
                    05:ee:b5:3d:74:cd:27:d1:a9:90:22:27:54:5e:f1:
                    bc:7a:8a:41:c7:1d:6a:0a:64:52:25:85:3b:5f:e7:
                    69:db:58:0a:14:3e:7e:bf:7e:09:cc:c5:9a:c5:f2:
                    9a:e3:ac:a6:9d:14:77:12:be:35:e8:79:dd:9f:f5:
                    da:15:45:b5:ca:99:fa:4a:56:95:66:d4:35:20:c9:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7C:08:11:89:1A:AD:F5:BA:88:AB:52:C5:53:0E:06:08:24:14:E9
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a3132363a3a2f34382d3438203d3e203537313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:126::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:31:4a:f9:be:3b:d8:4c:41:48:6c:79:15:2a:53:c4:dd:
         e6:5b:6a:2f:24:4a:d1:9b:57:db:d3:2c:fb:2e:b3:04:e2:1a:
         4e:6a:2f:c4:7e:0a:22:eb:42:20:ec:79:93:63:5d:e7:a8:9c:
         b6:79:00:d3:9b:6b:a8:71:a1:42:ec:d7:c2:95:fd:fa:f7:0f:
         cd:ec:5f:97:d6:6c:d0:cf:a0:e0:0d:65:ab:79:38:cf:d6:be:
         88:51:af:78:6a:da:99:57:26:a0:8c:ed:ee:54:1c:17:ce:4d:
         3e:c6:72:5d:fe:67:35:1f:79:00:0c:0b:5f:96:9a:71:24:c6:
         97:05:e1:0b:f3:6f:14:d5:7b:ac:1f:87:06:3d:94:68:bc:31:
         db:82:62:37:3f:22:76:0c:a0:51:da:40:29:23:4b:31:82:a3:
         19:f0:63:d8:76:c4:43:29:4a:2b:83:3b:04:da:60:f1:63:a3:
         db:60:55:2c:cb:4e:a8:f3:74:14:1c:c5:bb:91:a2:10:ed:c9:
         d1:87:66:78:d4:2b:0b:a6:53:8b:b9:bf:3d:45:2a:83:c7:70:
         49:18:e1:75:cd:4f:86:fc:05:ba:68:0d:4d:ff:2b:54:14:cb:
         da:40:f6:e7:6b:0c:a1:48:16:ef:04:ac:84:4b:78:c9:81:65:
         46:21:0a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:43:12 2024 by rpki-client on console-ams.rpki-client.org