Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a3a2f34382d3438203d3e20323030373735.roa
File:                     323630323a666163323a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          q1tS+FmJoPSVUuVaCCrdsMJFBE7fFC6woaZc2na6UCU=
Subject key identifier:   20:50:2E:C3:6B:3E:05:1D:15:E2:EF:F5:EB:66:E1:B1:D9:8A:60:C1
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       6E2BEBB02ED22F7D3723DF8069717D3C6A4C5C37
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Tue 14 Nov 2023 14:01:31 +0000
ROA not before:           Tue 14 Nov 2023 13:56:31 +0000
ROA not after:            Tue 12 Nov 2024 14:01:31 +0000
asID:                     200775
IP address blocks:        2602:fac2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 23:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2b:eb:b0:2e:d2:2f:7d:37:23:df:80:69:71:7d:3c:6a:4c:5c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Nov 14 13:56:31 2023 GMT
            Not After : Nov 12 14:01:31 2024 GMT
        Subject: CN=20502EC36B3E051D15E2EFF5EB66E1B1D98A60C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:b5:a0:5e:f7:e3:08:5f:62:03:85:f8:1b:
                    ed:55:28:cb:99:ce:57:0f:de:37:9e:e6:47:9f:84:
                    cd:27:6a:f1:6a:87:b8:b7:a4:95:c1:ea:e4:39:2d:
                    50:60:84:06:1b:6d:c9:a8:be:82:91:b5:58:fa:70:
                    92:8b:c1:28:7c:48:e8:dc:41:5e:c4:bf:22:2c:27:
                    92:d1:46:12:cd:1e:ad:33:50:75:66:e9:97:66:04:
                    67:c8:e6:17:02:d5:15:95:d9:1a:97:06:a7:a4:e2:
                    53:5a:d3:d2:61:a2:8c:ed:fe:fc:9c:6a:fe:67:d9:
                    86:d7:93:13:8a:83:3e:ba:ce:16:65:44:c2:fa:0a:
                    c1:88:f9:71:d8:38:c9:5c:3b:5a:c6:f7:24:20:b9:
                    08:67:0d:43:08:7e:7b:65:52:85:bc:fd:2b:21:11:
                    fe:ee:21:d9:4b:44:01:70:d7:27:08:62:ae:b8:9f:
                    32:46:6c:c3:bb:c0:e7:be:a6:05:ca:2e:24:09:bc:
                    ec:0f:34:f2:eb:f5:34:c8:50:4e:41:1f:ae:c6:a6:
                    37:39:e0:82:37:86:ca:e4:ec:30:3f:6a:d6:e6:27:
                    a4:14:f8:fe:ac:c9:5f:fc:68:fc:c3:00:de:c9:76:
                    4b:dd:63:21:20:f4:85:51:54:25:cd:23:1f:a6:0a:
                    6c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:50:2E:C3:6B:3E:05:1D:15:E2:EF:F5:EB:66:E1:B1:D9:8A:60:C1
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:8d:48:77:7c:41:6a:1d:cf:41:3d:bd:f4:7d:7e:2c:a8:1b:
         62:60:8a:9b:57:79:02:c3:d0:4c:56:8b:5e:5c:70:92:5f:87:
         ca:4b:2d:ed:35:63:e8:4e:31:65:c7:9a:47:7f:bc:d8:41:4b:
         6f:6d:53:91:00:df:a1:0d:9e:9f:e4:f5:6d:50:98:5d:eb:29:
         f8:d6:e2:b7:5c:3f:87:7f:f1:21:38:c8:47:82:27:06:49:27:
         e7:f0:4a:75:f9:b2:94:a2:80:34:14:39:e2:79:f7:55:4c:3d:
         37:e2:35:d8:45:b4:0d:74:7d:5e:cd:af:45:0e:8e:1d:6c:04:
         c7:57:b7:04:31:fb:15:57:2e:3d:1e:52:ee:35:a4:f6:f4:66:
         27:db:46:9f:42:62:ba:39:b8:c1:b8:3f:48:19:fd:ff:cf:06:
         c3:fa:f7:e7:1f:10:f3:b4:25:97:76:18:3e:d8:a1:96:67:2d:
         28:57:60:23:f9:ed:aa:36:8b:f4:92:95:a9:e6:98:4e:c6:8c:
         20:3d:3d:58:39:ef:47:1c:1e:a9:f1:4d:25:a3:33:f5:cf:2b:
         24:04:bd:c6:d2:0a:44:56:a5:5b:80:c7:0c:94:03:b3:62:c1:
         61:ac:e8:ce:0d:67:f1:72:9d:02:5b:d3:84:24:4d:73:f2:19:
         12:89:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 21:46:12 2024 by rpki-client on console-fra.rpki-client.org