Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31303a3a2f34342d3434203d3e2033323830.roa
File:                     323630323a666336383a31303a3a2f34342d3434203d3e2033323830.roa (raw, json)
Hash identifier:          IWcXppxQPlXl7eH5pf2kbxo92MIyAxCqIryPCmGU6tg=
Subject key identifier:   F3:5D:AE:57:A4:86:3C:8B:D0:CE:01:B8:39:FE:11:E4:FE:DF:E7:05
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       75C6B88F4A7EBA452D74718DA76A6CA44DECB780
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31303a3a2f34342d3434203d3e2033323830.roa
Signing time:             Fri 19 Apr 2024 21:16:21 +0000
ROA not before:           Fri 19 Apr 2024 21:11:21 +0000
ROA not after:            Fri 18 Apr 2025 21:16:21 +0000
asID:                     3280
IP address blocks:        2602:fc68:10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c6:b8:8f:4a:7e:ba:45:2d:74:71:8d:a7:6a:6c:a4:4d:ec:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Apr 19 21:11:21 2024 GMT
            Not After : Apr 18 21:16:21 2025 GMT
        Subject: CN=F35DAE57A4863C8BD0CE01B839FE11E4FEDFE705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:31:8f:a4:88:d2:4d:6b:86:89:2b:c0:b3:0d:
                    88:48:36:ae:52:e1:ba:d4:8c:8e:53:7c:c5:9b:bc:
                    20:d4:24:43:ec:c0:e3:86:08:4f:78:af:70:d3:51:
                    84:c1:e4:75:ab:3e:36:e5:be:00:b8:68:49:b8:50:
                    0d:9d:7b:a5:4b:47:46:d3:92:22:b1:98:7b:ca:7f:
                    d3:e8:c2:02:28:1c:ac:06:36:96:3a:1b:26:7b:12:
                    60:01:01:ec:de:be:1d:3a:17:d3:1f:03:8a:cf:84:
                    c6:22:8d:2b:e6:76:c0:4e:b9:3e:81:c8:e2:eb:fe:
                    0e:8e:2b:0f:68:1b:bf:71:22:50:90:05:b0:1c:50:
                    91:1a:a7:48:9b:4d:cb:4a:98:b7:b4:62:b1:f5:c8:
                    f8:b0:11:9e:20:48:10:6c:4c:da:d7:fb:8a:a4:d3:
                    11:47:3d:33:4c:3a:cd:08:4a:10:6c:66:92:9b:63:
                    1c:9c:7d:7d:c3:fc:51:d8:fa:63:1e:01:58:60:12:
                    ff:bf:e6:2c:3f:11:cb:bc:f7:15:ec:e7:b5:83:7c:
                    a3:83:fa:cb:9d:36:e6:a3:3b:c4:85:bb:1d:6e:78:
                    0f:67:c7:c8:10:a5:b4:f9:bc:7f:54:56:09:94:c0:
                    c8:d6:de:24:bd:66:c3:00:9c:bc:38:f9:64:b6:df:
                    24:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5D:AE:57:A4:86:3C:8B:D0:CE:01:B8:39:FE:11:E4:FE:DF:E7:05
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31303a3a2f34342d3434203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc68:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         cd:02:1a:f9:00:86:19:74:5f:85:7c:03:40:da:38:ce:b1:56:
         29:db:a5:b5:ec:4f:d0:37:1f:2d:49:df:15:97:97:06:3d:81:
         5c:d1:c4:05:9c:20:a9:1c:44:d1:73:fc:4d:f7:02:28:85:1f:
         e0:a2:53:1a:f5:71:03:79:8c:51:65:8d:b9:cf:d1:21:b6:95:
         08:9b:e1:f9:47:e3:6f:e4:71:9c:70:95:02:82:70:f3:6b:8c:
         38:65:f2:7b:1c:92:e6:d9:9e:8a:86:88:cf:32:c7:f7:4c:3e:
         cb:a5:43:94:0c:8d:e1:60:c4:36:2c:90:1f:ed:1a:07:45:f7:
         21:31:08:dc:4b:dd:33:0a:c6:59:0e:75:18:a7:34:42:82:e2:
         7c:4d:40:5d:1f:fc:e3:39:bc:1a:9b:45:b1:da:f7:5b:a0:5e:
         76:f1:c8:3a:57:a0:fd:79:82:4c:dc:3d:aa:c2:c1:74:fc:e4:
         26:2a:00:06:1c:1a:98:c5:64:fb:dc:ab:c5:26:56:ac:9f:d5:
         22:f2:b9:29:06:81:34:58:5f:e8:67:22:7e:67:8b:32:e2:16:
         31:8e:16:fe:63:42:79:12:2e:b6:0b:a2:67:37:28:5f:e2:ec:
         ad:92:f3:1e:65:f7:52:ca:01:57:c7:1a:f1:e6:98:21:06:55:
         b8:5d:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:20 2024 by rpki-client on console-fra.rpki-client.org