Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/323630323a3239313a33653a3a2f34382d3438203d3e20333933353737.roa
File:                     323630323a3239313a33653a3a2f34382d3438203d3e20333933353737.roa (raw, json)
Hash identifier:          cyO1Zy/EFeYEQai05eyoGzQu0oUXeFzzt+7RNnfg0Gc=
Subject key identifier:   7B:CC:8C:B8:86:5C:EB:26:6F:BE:DB:16:AF:6F:A7:C7:EB:6A:5A:EB
Certificate issuer:       /CN=0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1
Certificate serial:       1E8ED240F6BC02D17DCCCD9FA561C4D6FE0819C1
Authority key identifier: E1:C2:F9:B8:BC:DE:6D:9C:27:61:54:58:33:55:B2:45:89:F4:9B:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/323630323a3239313a33653a3a2f34382d3438203d3e20333933353737.roa
Signing time:             Fri 06 Sep 2024 00:18:38 +0000
ROA not before:           Fri 06 Sep 2024 00:13:38 +0000
ROA not after:            Fri 05 Sep 2025 00:18:38 +0000
asID:                     393577
IP address blocks:        2602:291:3e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/E1C2F9B8BCDE6D9C276154583355B24589F49BC8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/E1C2F9B8BCDE6D9C276154583355B24589F49BC8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Sep 2024 17:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:8e:d2:40:f6:bc:02:d1:7d:cc:cd:9f:a5:61:c4:d6:fe:08:19:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1
        Validity
            Not Before: Sep  6 00:13:38 2024 GMT
            Not After : Sep  5 00:18:38 2025 GMT
        Subject: CN=7BCC8CB8865CEB266FBEDB16AF6FA7C7EB6A5AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:84:0d:b6:7a:f8:78:18:b9:45:36:b5:c1:
                    e6:d7:be:14:2e:f8:d9:37:43:36:8e:f0:7a:41:17:
                    41:d2:df:ac:41:70:d7:74:3e:5d:40:63:5d:09:be:
                    7c:00:95:30:cb:59:3b:35:02:8f:4c:d4:77:c4:8c:
                    ff:db:41:29:00:b1:f3:83:49:7d:a1:74:0c:99:93:
                    ac:f5:cb:09:28:b3:8b:47:e4:b1:dd:c0:67:45:54:
                    69:11:f8:6c:5e:a7:cf:89:a9:4f:6f:68:4e:6a:70:
                    c7:da:03:bd:8c:7e:bd:03:ff:6c:f9:a1:e3:6c:61:
                    60:7b:ff:09:9c:6b:b4:48:8a:28:c0:d4:b2:7b:ad:
                    f1:ac:1e:4d:e9:ad:2a:7a:7f:e1:14:62:16:ba:7c:
                    c5:dd:57:e3:d6:41:7b:9b:a4:9a:15:2d:46:25:11:
                    13:25:49:18:1b:f5:de:06:ae:9b:bb:19:d4:29:17:
                    c9:f5:04:0f:c7:0d:82:b9:ad:02:57:76:46:1c:25:
                    30:53:4c:f7:86:fe:34:40:93:64:ce:26:61:e8:73:
                    92:75:08:46:d1:08:21:2e:23:a5:8e:4a:fe:0f:19:
                    83:db:d7:97:02:22:57:71:24:9d:4e:8f:6c:0e:d0:
                    bb:7d:e0:76:f9:6b:4b:3d:06:13:83:75:42:15:0c:
                    89:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CC:8C:B8:86:5C:EB:26:6F:BE:DB:16:AF:6F:A7:C7:EB:6A:5A:EB
            X509v3 Authority Key Identifier:
                keyid:E1:C2:F9:B8:BC:DE:6D:9C:27:61:54:58:33:55:B2:45:89:F4:9B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/E1C2F9B8BCDE6D9C276154583355B24589F49BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/323630323a3239313a33653a3a2f34382d3438203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:291:3e::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:50:94:d7:29:87:6e:5f:62:41:f1:f1:ff:f1:61:32:a2:ad:
         b6:4d:6b:34:31:97:63:de:91:78:9a:8f:b8:a3:e1:41:0f:69:
         fc:d2:c9:6b:03:2b:3a:79:05:13:aa:9d:b5:f2:2a:f9:8b:b5:
         7f:e9:ca:21:c7:4f:99:b5:18:24:f9:09:5b:e2:e3:d1:69:54:
         25:77:eb:97:fe:48:97:a1:86:99:97:51:b2:60:7a:23:7f:fa:
         87:e3:aa:36:48:62:e1:c6:1a:72:00:8c:cc:ba:1a:82:62:79:
         de:44:0b:7a:fb:bb:04:35:e3:4f:b7:e1:1e:0c:b7:fe:4a:96:
         2e:32:c7:58:4a:a4:ef:cc:64:d6:bb:8c:bf:fd:43:6a:24:3d:
         a0:47:a5:06:8a:ce:13:0c:2c:d0:04:fb:ba:53:d4:8a:d8:65:
         5c:d8:1b:78:12:07:ce:4e:50:9a:02:3b:06:0f:39:e0:bc:85:
         ab:8f:53:d8:25:f8:a1:05:e0:f6:37:c3:ad:de:2a:70:18:06:
         4c:f1:cf:59:0d:6b:9d:63:75:1b:e4:e0:2c:7a:7e:41:79:f4:
         6b:cf:77:23:8b:17:73:d0:43:17:3b:bd:be:20:f1:21:71:f5:
         27:70:d5:b5:a0:8c:c6:79:23:97:cb:ba:37:32:80:3d:0e:e6:
         12:e4:b6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 17:28:49 2024 by rpki-client on console-fra.rpki-client.org