Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Netiface/1/323630323a663931353a3a2f34302d3430203d3e203336383332.roa
File:                     323630323a663931353a3a2f34302d3430203d3e203336383332.roa (raw, json)
Hash identifier:          4mTrHo1IlNJs3a6On58+2I5TScWrxVVRrLQChH06YYQ=
Subject key identifier:   39:A6:10:63:7F:57:F4:3E:2D:71:C1:A8:58:DE:C4:50:8D:9A:1E:28
Certificate issuer:       /CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
Certificate serial:       6C4BE4F24124145E8B0C63B1403FF9B60D6F231A
Authority key identifier: FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/1/323630323a663931353a3a2f34302d3430203d3e203336383332.roa
Signing time:             Sat 01 Feb 2025 19:53:20 +0000
ROA not before:           Sat 01 Feb 2025 19:48:20 +0000
ROA not after:            Sat 31 Jan 2026 19:53:20 +0000
asID:                     36832
IP address blocks:        2602:f915::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl
                          rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Feb 2025 14:20:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4b:e4:f2:41:24:14:5e:8b:0c:63:b1:40:3f:f9:b6:0d:6f:23:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
        Validity
            Not Before: Feb  1 19:48:20 2025 GMT
            Not After : Jan 31 19:53:20 2026 GMT
        Subject: CN=39A610637F57F43E2D71C1A858DEC4508D9A1E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:02:0f:11:e1:8f:7d:06:18:f3:3a:be:15:45:
                    cd:d3:82:24:4c:e1:ab:53:3b:df:b4:df:15:c3:5e:
                    20:63:d8:f8:75:d7:e4:55:ba:9c:09:e7:60:06:f0:
                    ce:2a:a8:dc:f0:15:41:56:6e:29:24:e2:ae:35:1e:
                    bd:af:79:46:6a:92:1d:d9:c1:c1:49:1d:f2:87:3e:
                    81:16:85:8a:1b:f1:e4:40:bd:df:28:70:43:79:7b:
                    9e:df:9e:bf:3a:94:18:b3:ae:40:91:74:0e:14:7b:
                    d4:28:35:b6:c0:f5:96:35:65:a4:00:73:78:37:ac:
                    a4:4f:b7:7c:c3:92:3d:54:8d:ae:8f:85:6a:df:25:
                    c2:92:9b:29:f1:0f:57:8f:c8:0d:c8:bd:d6:c6:0e:
                    96:0b:b9:c0:40:6d:e5:aa:a2:95:e2:d1:a3:38:d1:
                    39:4f:61:e2:a0:f0:83:93:84:62:ff:52:0e:86:63:
                    bf:d4:62:fd:9e:3d:70:c2:c1:a9:7f:f1:3e:53:64:
                    26:29:a2:07:7f:0c:ec:a0:aa:38:8a:5c:e0:be:df:
                    d4:38:9a:14:24:b9:19:a8:f7:0a:8f:c5:a4:b5:85:
                    60:d4:c8:07:69:06:68:2a:df:d0:42:67:41:00:39:
                    17:68:ed:f1:29:24:f2:ac:2e:a1:6f:a2:9b:1c:d8:
                    a5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A6:10:63:7F:57:F4:3E:2D:71:C1:A8:58:DE:C4:50:8D:9A:1E:28
            X509v3 Authority Key Identifier:
                keyid:FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/1/323630323a663931353a3a2f34302d3430203d3e203336383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f915::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:49:4a:c9:2b:77:b5:5a:e4:73:5d:d7:72:23:ca:95:b8:ac:
         62:f3:63:02:f0:3d:ad:10:39:7a:1a:81:00:0d:00:00:ba:62:
         db:c5:f3:3d:9c:c7:06:ff:48:92:2d:2c:54:85:81:74:4a:cf:
         07:7d:61:a7:dc:1e:06:fe:de:f0:08:d5:77:22:62:29:66:c5:
         9b:ab:ab:5c:9b:54:11:ed:9e:6f:60:a6:d0:54:5e:1d:7c:0a:
         a4:82:a0:fe:5e:98:fe:4c:4e:a1:49:85:83:6f:80:65:34:c0:
         0b:12:bc:b7:ab:3a:bf:c5:72:45:0f:e5:2c:a4:f2:fa:66:d5:
         8a:c9:a1:ac:ae:f3:a1:84:14:59:e9:ed:8d:38:6f:95:18:62:
         55:11:a8:d7:b3:9e:60:af:d1:a6:fc:3f:d8:48:6f:eb:d7:c1:
         4a:7c:f8:fc:eb:d0:02:74:db:42:63:9a:9c:60:d5:0f:cf:68:
         60:6d:e8:eb:fb:69:d1:a1:e8:48:27:c8:a2:90:2e:63:af:fd:
         dd:24:bb:b6:9b:78:12:6b:cc:78:40:a5:03:a7:f3:4a:0b:d3:
         3b:46:29:63:db:67:11:4f:4c:32:63:51:0c:e0:a4:d8:ba:be:
         99:ea:e8:d6:30:33:b2:bd:20:90:23:fe:06:33:94:e3:ee:0f:
         4a:73:6a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:45:27 2025 by rpki-client