Route Origin Authorization

$ rpki-client -vvf rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34382d3438203d3e203133353237.roa
File:                     323630323a663833643a3a2f34382d3438203d3e203133353237.roa (raw, json)
Hash identifier:          GsJO0qY6E+4ikxLfCV+zBJ/941G/HTmrd/4Qe27X+N0=
Subject key identifier:   E9:6C:4C:CC:56:B8:34:9E:A1:A1:B6:AF:1C:3F:C0:84:A1:83:16:EF
Certificate issuer:       /CN=86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae
Certificate serial:       4F069B2A90E5704FDBBB7200E1F5973E076ACA11
Authority key identifier: 98:75:18:7C:51:B2:08:93:34:91:43:82:82:FA:25:A7:B3:F5:AB:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae.cer
Subject info access:      rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34382d3438203d3e203133353237.roa
Signing time:             Wed 18 Sep 2024 20:10:00 +0000
ROA not before:           Wed 18 Sep 2024 20:05:00 +0000
ROA not after:            Wed 17 Sep 2025 20:10:00 +0000
asID:                     13527
IP address blocks:        2602:f83d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-pp.com/repo/GOOFL/0/9875187C51B208933491438282FA25A7B3F5ABDC.crl
                          rsync://rpki-pp.com/repo/GOOFL/0/9875187C51B208933491438282FA25A7B3F5ABDC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/7c9b1947-b813-43b3-9152-c4ccbff1cde7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Sep 2024 18:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:06:9b:2a:90:e5:70:4f:db:bb:72:00:e1:f5:97:3e:07:6a:ca:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae
        Validity
            Not Before: Sep 18 20:05:00 2024 GMT
            Not After : Sep 17 20:10:00 2025 GMT
        Subject: CN=E96C4CCC56B8349EA1A1B6AF1C3FC084A18316EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:73:d7:55:82:a5:c9:f4:d2:d7:72:6d:8d:55:
                    56:f9:93:e7:ef:dd:6d:3b:30:17:fb:b2:a7:8d:f8:
                    cd:a1:19:1c:d7:18:29:36:af:83:2b:27:e9:d6:56:
                    8a:66:41:c5:bf:3e:65:f7:c2:55:ed:79:b6:53:bd:
                    8e:73:35:82:cc:7d:48:f9:34:42:fd:60:bc:5c:35:
                    29:74:d4:e3:a3:6a:b1:b6:9c:af:dd:d4:77:88:5e:
                    03:ba:41:5e:d7:7b:95:47:b8:ed:79:c0:cc:00:a8:
                    76:85:42:2c:af:d0:bb:fd:45:7b:e5:32:76:ca:08:
                    52:73:61:df:bc:40:90:02:42:e9:df:1b:cc:10:75:
                    5d:c0:86:f2:bf:f1:49:97:27:05:6d:c1:39:7a:fa:
                    c2:17:0e:9f:f0:ff:98:e8:27:57:fa:4f:50:f5:c9:
                    2c:49:69:7f:c7:99:54:c0:79:4c:11:f6:c4:70:e5:
                    47:9f:24:9c:a3:28:74:d1:4b:8a:cf:a1:a3:82:ed:
                    0c:16:91:c3:c4:7f:de:fe:32:3d:f1:0b:63:5c:a2:
                    b6:83:df:2c:f6:3a:fc:1d:6e:d4:de:79:d9:5c:ea:
                    80:79:56:53:7f:24:9e:db:e6:79:07:7d:09:0e:bc:
                    5e:bf:a6:f2:10:b5:14:da:91:80:23:a5:f5:dd:3e:
                    0e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6C:4C:CC:56:B8:34:9E:A1:A1:B6:AF:1C:3F:C0:84:A1:83:16:EF
            X509v3 Authority Key Identifier:
                keyid:98:75:18:7C:51:B2:08:93:34:91:43:82:82:FA:25:A7:B3:F5:AB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-pp.com/repo/GOOFL/0/9875187C51B208933491438282FA25A7B3F5ABDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7c9b1947-b813-43b3-9152-c4ccbff1cde7/86de965d715637d41a8c4a1b113daffd5c9fa0c7db182e74ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/0/323630323a663833643a3a2f34382d3438203d3e203133353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83d::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:25:7e:53:ce:b8:e5:50:80:8d:dd:f9:58:63:c4:22:f5:65:
         db:1e:d2:c6:06:e1:c7:f1:56:73:dc:bf:f9:e5:5c:b1:8e:1c:
         bc:b8:5f:26:95:e8:49:7d:90:68:ce:b6:e8:94:fb:a1:56:6b:
         3c:f6:02:ac:05:d4:69:37:b3:5e:ff:a1:76:41:2a:33:ad:2f:
         57:ff:45:b2:a7:7d:7c:91:21:54:13:d3:48:41:ef:57:d8:d7:
         21:2f:69:60:33:89:6e:82:43:df:16:91:cc:4e:ad:46:32:48:
         c4:8c:fa:e5:7e:a6:f4:d7:a1:b9:4f:36:c1:fa:1c:5b:ca:0f:
         4f:e0:4e:66:36:49:61:69:1d:8c:3c:7f:82:bd:d8:e9:b1:ad:
         80:01:5a:2e:5c:db:1e:7c:c6:fc:0e:a2:6b:9d:f5:75:fb:c4:
         be:bc:c2:e2:bf:ab:b0:14:6e:dd:e2:cb:62:31:64:7e:93:60:
         fe:de:3e:e4:4c:e4:12:30:4e:e9:7b:46:19:8d:22:0f:0f:d8:
         e8:93:2d:d6:ce:77:5e:dd:b7:a8:41:68:71:a2:b8:18:b5:c9:
         90:23:0f:ab:6e:91:e7:96:56:eb:1f:5a:12:d3:35:e7:dd:6f:
         4c:84:94:19:91:d2:3f:78:42:1a:c2:b9:b1:85:20:3d:25:97:
         35:eb:2a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:17:12 2024 by rpki-client on console-fra.rpki-client.org