Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31313a3a2f34382d3438203d3e2033323830.roa
File:                     323630323a666336383a31313a3a2f34382d3438203d3e2033323830.roa (raw, json)
Hash identifier:          YEArkTTo1pfWFPzmDYr12t3Ci6pUkYEycXHM+d0/2Vs=
Subject key identifier:   3A:18:79:84:DA:FA:A1:0B:9F:64:4B:C1:0C:DD:33:D2:DB:38:BC:75
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       012EC08F901C3E566736F2F0549CC8222CD2B559
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31313a3a2f34382d3438203d3e2033323830.roa
Signing time:             Fri 19 Apr 2024 21:16:21 +0000
ROA not before:           Fri 19 Apr 2024 21:11:21 +0000
ROA not after:            Fri 18 Apr 2025 21:16:21 +0000
asID:                     3280
IP address blocks:        2602:fc68:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2e:c0:8f:90:1c:3e:56:67:36:f2:f0:54:9c:c8:22:2c:d2:b5:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Apr 19 21:11:21 2024 GMT
            Not After : Apr 18 21:16:21 2025 GMT
        Subject: CN=3A187984DAFAA10B9F644BC10CDD33D2DB38BC75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:71:b1:29:c0:74:cd:78:42:2f:b0:b8:b7:df:
                    5d:60:f7:ca:41:7c:53:7c:42:12:15:5c:48:40:4c:
                    10:e6:90:90:eb:96:82:05:37:59:ef:64:6d:9d:59:
                    42:98:9d:a6:7b:b7:cd:e2:93:ce:21:32:82:1b:5c:
                    78:cc:9b:34:19:e9:78:8e:fd:f9:37:ef:48:67:f3:
                    ff:80:38:0c:8c:3c:f1:59:14:8c:39:7b:df:a2:66:
                    be:20:22:bc:48:d9:0e:5c:69:c9:b9:51:78:78:55:
                    6a:be:92:14:5e:e4:a2:d5:a9:02:c9:43:b4:e3:03:
                    30:1f:1c:f8:e9:81:95:dd:76:7a:ca:78:a8:0a:18:
                    fb:0d:8f:b1:8b:59:85:9e:f9:30:5a:4c:3a:b5:cd:
                    42:50:f2:47:c6:50:d1:fd:9f:e4:25:7b:d5:10:6a:
                    f8:5c:5f:6a:94:02:93:e9:20:be:aa:ba:d6:23:d7:
                    cd:36:e2:e1:92:b5:52:87:4a:90:30:ce:05:89:7c:
                    ea:26:51:ab:2a:32:96:d1:1e:13:4a:a3:17:8b:0c:
                    cb:f6:e5:50:a9:c7:3d:19:38:62:d5:e1:22:6b:da:
                    99:40:31:08:9a:59:dc:2b:a4:9c:e8:d8:1e:27:59:
                    ce:35:59:44:30:74:37:30:26:47:12:d9:60:bf:ab:
                    53:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:18:79:84:DA:FA:A1:0B:9F:64:4B:C1:0C:DD:33:D2:DB:38:BC:75
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a31313a3a2f34382d3438203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc68:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:f1:64:68:84:e8:25:6b:de:51:89:4b:0e:20:d1:fd:bb:
         3f:fe:f8:70:9f:3d:2c:cc:f6:50:72:db:81:8f:7a:cf:c6:a2:
         96:07:f2:eb:81:42:cb:8f:b0:aa:e4:4a:d7:0a:5d:0c:e3:29:
         fc:56:70:27:67:b9:6c:58:40:81:15:3e:51:18:88:c8:3d:1f:
         6d:52:d7:eb:08:9d:f3:f6:ab:77:af:b3:b7:ae:2d:c9:f7:bd:
         d3:a8:d0:42:ca:44:4f:db:ad:89:64:a6:6a:7e:74:ba:cd:0c:
         59:11:59:10:a2:ba:74:1e:15:84:92:25:cb:35:b3:3d:68:0b:
         8b:c7:9a:84:1c:6c:a8:7d:f0:6c:17:cf:c4:a9:11:65:2d:d0:
         18:bf:ce:49:83:9f:11:44:2c:fe:45:2f:03:0f:43:bf:a7:ca:
         dc:c4:e6:7d:8c:97:b2:ec:e5:11:d8:4b:5e:ad:cc:f8:55:20:
         7a:62:dd:1b:6e:af:f6:7c:16:1c:f8:2e:c5:5d:4f:35:09:80:
         0b:98:f7:e1:a0:0d:44:6f:51:b7:82:8a:eb:8f:c9:e2:59:05:
         15:77:e8:f1:4b:3c:8c:0f:4e:3a:19:de:86:63:c2:6d:98:79:
         47:83:53:a7:78:d4:80:4f:53:de:5d:42:29:8f:c5:27:fd:3d:
         41:fd:ea:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:15 2024 by rpki-client on console-ams.rpki-client.org