Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399156.roa
File:                     AS399156.roa (raw, json)
Hash identifier:          eURw+UZJxJ5JY14Zi80w8EeYpMW2EKKlaNWyvTLP80I=
Subject key identifier:   C7:D8:5E:67:12:77:E7:05:5C:A0:18:5F:45:D6:84:DC:A7:D1:A8:C3
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       50E5DDD595D4D6C0B88786672F9181DD56CBB795
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399156.roa
Signing time:             Sat 06 Jan 2024 10:34:13 +0000
ROA not before:           Sat 06 Jan 2024 10:29:13 +0000
ROA not after:            Sat 04 Jan 2025 10:34:13 +0000
asID:                     399156
IP address blocks:        2607:fc50:3000:456::/64 maxlen: 64
                          2607:fc50:3000:457::/64 maxlen: 64
                          2607:fc50:3000:458::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:36:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e5:dd:d5:95:d4:d6:c0:b8:87:86:67:2f:91:81:dd:56:cb:b7:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Jan  6 10:29:13 2024 GMT
            Not After : Jan  4 10:34:13 2025 GMT
        Subject: CN=C7D85E671277E7055CA0185F45D684DCA7D1A8C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b3:95:e4:46:e5:2a:58:ae:21:3f:45:9f:cd:
                    b3:c6:8d:72:57:bc:62:e4:fb:da:34:b9:10:a9:57:
                    11:c9:44:6d:4c:d5:9c:af:b4:35:65:fc:29:65:f0:
                    82:28:5e:0f:f8:3d:01:de:11:92:e6:45:f7:47:bd:
                    f9:4d:61:5d:f6:19:67:a7:6a:59:e7:ef:ff:ab:ec:
                    06:2b:f8:24:a5:3c:74:1b:9b:78:f9:ef:d7:44:4e:
                    82:c8:09:3f:93:09:a1:ac:4f:89:95:9e:74:6c:0b:
                    aa:6e:4e:4e:59:b2:1e:32:39:7f:3e:a0:b8:c9:99:
                    e0:16:dc:e8:0c:cc:8d:07:fa:46:c6:a5:d0:8b:8f:
                    66:da:06:9a:a6:e5:28:bc:6c:99:be:a5:13:9d:db:
                    9d:d0:01:f4:48:36:ae:bc:d1:03:20:08:36:f9:80:
                    34:b4:c9:6b:b7:a6:34:98:cc:e5:60:1f:07:87:1a:
                    4c:9c:06:e4:fa:92:13:d7:87:7f:b3:f2:c7:5d:98:
                    d8:1d:ef:be:0c:eb:9b:c9:2b:78:cf:d7:56:b8:22:
                    0f:2d:90:51:5f:e7:27:a1:87:74:53:1d:12:9d:51:
                    38:79:59:f2:ef:16:29:86:fd:09:71:48:7c:43:b6:
                    f4:c0:3a:67:51:62:d7:81:9b:4d:c0:35:3e:e9:59:
                    ae:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D8:5E:67:12:77:E7:05:5C:A0:18:5F:45:D6:84:DC:A7:D1:A8:C3
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399156.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc50:3000:456::-2607:fc50:3000:458:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         31:79:91:b3:e5:16:c9:1e:e7:e5:f7:d7:eb:cd:e3:65:5e:da:
         0e:3f:5e:10:dd:70:a1:02:14:dd:c8:1d:18:01:f3:97:72:00:
         53:fb:9e:52:69:c7:b8:c5:c7:2c:cb:bf:46:c1:06:6d:05:3b:
         83:97:b7:0f:03:2c:be:30:42:c4:43:3a:78:f3:74:39:0f:43:
         4a:0b:4c:7f:a7:ca:f3:64:0f:7f:40:b6:00:23:1d:07:e1:d9:
         c2:48:8c:e4:c7:e9:b5:61:9b:28:f6:19:ad:55:4b:f1:f6:e4:
         5c:a9:5c:49:8c:ea:eb:c1:ef:08:31:24:30:6d:f5:de:22:87:
         40:27:ec:16:2b:8f:e3:e2:5d:ec:bd:34:8c:40:16:e1:08:52:
         45:3f:b4:22:5e:b4:be:53:cb:2e:0b:57:93:d1:4c:67:bd:4b:
         03:ad:02:6f:5d:b6:82:80:93:ee:c2:3c:fd:fe:1f:14:29:68:
         f2:c4:6f:44:de:15:ca:d3:2f:17:f2:3a:80:f7:95:53:9f:92:
         d2:d3:37:bf:89:ef:98:e2:8c:31:e9:64:40:72:ad:62:7f:58:
         71:df:5f:87:0e:3c:b9:f9:74:9d:c8:4e:f2:fa:68:d3:be:44:
         69:1d:41:1e:20:17:81:64:9d:b9:65:d5:d5:be:3c:3e:4a:3f:
         2c:74:47:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:46:01 2024 by rpki-client on console-ams.rpki-client.org