Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3a2f33362d313238203d3e20333933353737.roa
File:                     323630323a663962613a3a2f33362d313238203d3e20333933353737.roa (raw, json)
Hash identifier:          o5powHUCmOnNHFhvrjh9Z/1fUw2i0+cSsyjs1QfSBoU=
Subject key identifier:   B2:7E:3B:68:0E:9C:2F:59:06:4C:26:6D:28:C3:CB:8A:90:3D:C2:4C
Certificate issuer:       /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial:       0D6788ED2E2A7E13E9571E1BC9A9A9827FE37BA4
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3a2f33362d313238203d3e20333933353737.roa
Signing time:             Mon 26 Aug 2024 19:23:20 +0000
ROA not before:           Mon 26 Aug 2024 19:18:20 +0000
ROA not after:            Mon 25 Aug 2025 19:23:20 +0000
asID:                     393577
IP address blocks:        2602:f9ba::/36 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:39:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:67:88:ed:2e:2a:7e:13:e9:57:1e:1b:c9:a9:a9:82:7f:e3:7b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
        Validity
            Not Before: Aug 26 19:18:20 2024 GMT
            Not After : Aug 25 19:23:20 2025 GMT
        Subject: CN=B27E3B680E9C2F59064C266D28C3CB8A903DC24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:5e:a5:5c:4e:3b:d9:7b:ed:99:21:11:32:
                    82:df:4a:79:f6:06:ea:72:f3:9a:4b:8f:f6:52:dc:
                    a0:16:71:6a:a3:05:5a:a7:86:53:7b:bc:ba:c8:2a:
                    7a:e1:84:de:75:44:7d:00:bb:04:6b:f3:09:8d:5c:
                    ee:5f:dd:ef:28:46:d5:de:18:38:94:dc:0f:c9:c1:
                    fc:3c:44:78:f3:8e:e9:12:18:3a:b6:5d:04:67:e4:
                    86:59:95:4d:bb:fe:19:32:a8:90:c0:42:86:d6:6c:
                    aa:5f:e5:0d:63:8a:93:d7:99:04:a7:57:97:25:b7:
                    48:21:8a:9a:cd:57:87:37:07:7f:14:cd:4c:f5:27:
                    4d:85:b5:b3:94:f8:4f:2a:c5:71:8e:7b:07:0f:7f:
                    36:6b:e4:08:a2:cb:e5:fb:9f:49:04:a7:90:fb:fc:
                    45:c7:95:87:74:e4:56:3f:2e:dd:73:33:9d:23:6a:
                    ac:71:e7:ba:20:60:ee:df:40:ce:a6:0e:95:73:25:
                    dd:c3:fb:dd:98:69:a8:94:94:6d:6d:c7:4d:66:97:
                    d5:d9:da:f8:37:95:c2:2d:02:d0:15:a8:d0:d6:b9:
                    1f:86:ca:e9:19:ad:31:a9:99:d5:20:95:6b:f8:9b:
                    0e:87:8d:bc:46:db:15:8b:66:c2:ee:b1:4a:bd:a8:
                    24:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7E:3B:68:0E:9C:2F:59:06:4C:26:6D:28:C3:CB:8A:90:3D:C2:4C
            X509v3 Authority Key Identifier:
                keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a3a2f33362d313238203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba::/36

    Signature Algorithm: sha256WithRSAEncryption
         4c:4a:26:a0:dc:6f:d9:bb:22:f1:95:00:e7:2c:14:01:ef:06:
         af:43:4e:8c:f0:76:16:74:76:a5:10:9a:bc:08:a4:33:2e:d1:
         d5:5e:75:fa:af:1f:2a:92:e4:89:a3:5e:e5:d3:21:99:2a:19:
         c4:87:2d:04:cc:13:84:37:7d:70:54:23:1b:a0:8b:61:07:8f:
         98:9f:13:db:6d:3d:82:2d:43:55:88:67:86:23:01:16:3b:75:
         38:bd:8b:ad:3f:1c:18:57:d1:1d:10:4d:2e:75:d0:04:b0:74:
         9c:b8:0a:55:bf:2a:9b:3a:b7:5c:ea:ca:cd:ec:77:08:94:e0:
         d7:08:2c:e3:2a:18:2b:ab:0c:78:0b:db:05:03:63:ae:ee:88:
         98:6d:54:4f:e5:36:f3:e0:4e:04:9e:5d:2f:19:5c:72:d1:b1:
         ca:db:dd:df:b3:6f:c8:b5:16:e0:c2:76:67:f5:11:98:83:97:
         7a:8f:b9:c6:91:4a:57:b3:d3:42:69:a5:91:ba:d8:26:1a:63:
         b2:ef:54:e9:8f:01:e5:a6:0e:1f:34:72:60:33:fa:9e:a2:6c:
         6b:72:46:fe:97:7e:db:4b:e3:f0:6b:42:70:f7:9a:cb:b9:35:
         99:20:25:2d:69:88:46:37:ba:1c:91:97:da:71:09:06:ec:82:
         9e:f6:ee:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:19:41 2024 by rpki-client on console-ams.rpki-client.org