Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa
File:                     323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa (raw, json)
Hash identifier:          v97kCZsLmfYAM+ImbSNV8uT30Zh3gNtMMtM15Kqs4/4=
Subject key identifier:   11:A6:C0:BC:AA:DE:55:2F:51:BD:5B:55:BA:B6:6C:B7:27:F2:A4:7A
Certificate issuer:       /CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
Certificate serial:       1F2377711BC5AE7AF42C23FE350BB6A4E03B377F
Authority key identifier: 18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa
Signing time:             Mon 07 Oct 2024 10:23:09 +0000
ROA not before:           Mon 07 Oct 2024 10:18:09 +0000
ROA not after:            Mon 06 Oct 2025 10:23:09 +0000
asID:                     400817
IP address blocks:        2602:296:123::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 07:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:23:77:71:1b:c5:ae:7a:f4:2c:23:fe:35:0b:b6:a4:e0:3b:37:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
        Validity
            Not Before: Oct  7 10:18:09 2024 GMT
            Not After : Oct  6 10:23:09 2025 GMT
        Subject: CN=11A6C0BCAADE552F51BD5B55BAB66CB727F2A47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:31:04:af:19:44:99:86:30:dc:3a:91:67:
                    dd:1e:c8:50:9d:2b:4b:db:02:f5:7f:fb:f0:66:db:
                    aa:ee:32:59:10:f4:49:66:f3:28:f7:01:6b:16:0d:
                    93:eb:04:3b:5c:dc:97:bd:b0:a5:01:66:17:ab:33:
                    f4:b0:14:37:51:df:51:98:ca:66:63:9c:5c:09:ce:
                    a9:be:22:7d:0e:72:f8:a1:f8:dc:84:35:37:23:5b:
                    8c:8a:46:a2:7c:f4:15:59:f6:c8:68:17:56:ca:63:
                    66:a5:56:22:6c:62:2f:16:51:66:d5:f1:96:da:fc:
                    85:57:f8:99:b8:f9:a4:03:b4:e7:5a:9c:28:03:86:
                    57:5d:0a:8a:49:1a:fc:ca:1a:73:cd:68:e0:bf:25:
                    e4:2e:a2:de:11:41:6d:cf:06:d5:72:a5:55:38:4e:
                    0e:1e:ec:46:8a:57:b2:4b:35:95:a6:0b:bd:ef:b3:
                    ba:62:d4:fa:b5:34:f2:c7:4f:9d:51:6f:24:58:0b:
                    92:20:36:2c:90:75:27:dd:b3:28:57:0c:72:b0:7d:
                    93:18:eb:a2:96:5d:f8:8a:9d:c3:c3:97:03:14:35:
                    98:8f:12:bc:c5:2f:00:7c:9b:69:b0:64:41:19:d5:
                    4c:40:9f:f8:1b:c7:25:6f:ac:03:8c:30:ef:96:92:
                    92:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A6:C0:BC:AA:DE:55:2F:51:BD:5B:55:BA:B6:6C:B7:27:F2:A4:7A
            X509v3 Authority Key Identifier:
                keyid:18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:296:123::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:0a:0b:87:2c:c8:9b:ca:4e:3d:21:78:76:b6:cb:b4:dc:f3:
         2e:42:b8:4a:1a:d5:16:3f:86:05:97:f4:f3:44:13:a4:18:39:
         9b:87:37:d9:df:52:fe:0d:83:da:9e:e1:e6:5c:72:30:80:fa:
         21:a5:79:14:03:88:97:11:6d:0a:6f:7f:a7:b1:e3:b0:ea:00:
         ec:4c:9a:54:f5:0f:2b:db:79:7c:16:ab:99:00:a2:a1:12:78:
         78:b9:a2:bf:10:d5:ff:12:8f:b0:c2:bf:cd:6c:9f:72:6f:c6:
         c8:ee:6e:db:ba:76:1c:a0:e4:3c:e6:6a:ae:52:16:4e:f0:6a:
         9e:b0:52:85:93:63:3a:2f:6c:62:ae:1f:82:b3:e2:16:47:89:
         55:ff:bf:c1:ce:a1:41:10:40:4c:18:10:7a:3d:52:1e:5f:6f:
         e0:0e:72:fb:39:45:13:1d:3a:0d:a4:fe:c0:2c:13:9f:4a:ad:
         f5:92:5b:3c:2e:47:ee:be:20:43:4f:d2:65:a2:5c:b8:ba:25:
         ac:f1:ef:c6:d5:de:93:b9:11:d3:ac:f6:12:be:92:5f:f8:23:
         ae:89:c1:ef:aa:cf:80:09:4b:7c:ec:8c:94:87:39:0f:ce:fe:
         00:ea:19:60:e9:5d:a7:e6:88:64:34:ee:7b:da:03:a2:21:69:
         1f:4e:48:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:45:03 2024 by rpki-client on console-fra.rpki-client.org