Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a36333a3a2f34382d3438203d3e20343030383137.roa
File:                     323630323a3239363a36333a3a2f34382d3438203d3e20343030383137.roa (raw, json)
Hash identifier:          aItoYCsbOZm5E60S35Hq10ooUHT8coccORD7Tqq5PcQ=
Subject key identifier:   A5:2F:60:08:7C:34:A4:CF:39:15:67:80:C7:A4:8D:EB:43:8E:26:5F
Certificate issuer:       /CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
Certificate serial:       16C0A43307FED88EE0A28E7BE6885C0FC4D65006
Authority key identifier: 18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a36333a3a2f34382d3438203d3e20343030383137.roa
Signing time:             Wed 14 Feb 2024 11:49:35 +0000
ROA not before:           Wed 14 Feb 2024 11:44:35 +0000
ROA not after:            Wed 12 Feb 2025 11:49:35 +0000
asID:                     400817
IP address blocks:        2602:296:63::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 07:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c0:a4:33:07:fe:d8:8e:e0:a2:8e:7b:e6:88:5c:0f:c4:d6:50:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
        Validity
            Not Before: Feb 14 11:44:35 2024 GMT
            Not After : Feb 12 11:49:35 2025 GMT
        Subject: CN=A52F60087C34A4CF39156780C7A48DEB438E265F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:5c:04:5e:38:d3:c0:e6:96:11:ea:13:b8:
                    30:e6:c0:cf:d5:62:4b:18:e8:a1:ad:7b:ad:dd:ae:
                    5f:09:9f:05:7c:da:bc:21:13:45:0b:c7:89:ad:72:
                    c6:36:53:3e:94:64:ae:ea:45:df:ec:bd:b4:98:96:
                    73:3c:c1:22:92:b9:0e:3e:ca:0f:ea:dc:9d:9e:56:
                    d1:a1:7b:45:5c:99:86:62:3d:82:78:ba:9d:77:b1:
                    8d:d8:eb:b4:69:d7:69:d4:71:39:ad:29:f0:c0:8a:
                    60:6b:d0:ee:1d:de:9a:09:ae:a4:f6:59:15:74:aa:
                    1e:d0:2c:03:2c:a5:17:d4:a6:e7:c9:1e:e2:20:ac:
                    5d:be:f9:ff:2c:31:06:ad:7a:77:ea:26:81:24:04:
                    ba:58:6c:92:c4:5c:f7:d4:e0:8e:21:27:a8:76:7e:
                    ce:78:70:4b:a5:0a:a4:28:bd:ac:76:e5:f3:06:98:
                    55:af:ee:27:a1:17:30:c1:48:d8:d3:e9:6a:6b:71:
                    bb:f0:8a:7e:52:e7:e4:af:73:13:67:e0:23:9b:09:
                    1b:a7:cc:b6:f5:72:75:68:82:2e:1e:58:e2:f9:88:
                    2c:7f:05:2c:8c:60:87:bd:ce:2c:c6:32:a5:38:7a:
                    6c:07:83:94:8c:fc:4e:38:38:94:84:31:bf:eb:bc:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:2F:60:08:7C:34:A4:CF:39:15:67:80:C7:A4:8D:EB:43:8E:26:5F
            X509v3 Authority Key Identifier:
                keyid:18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a36333a3a2f34382d3438203d3e20343030383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:296:63::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:3d:c2:3a:17:4a:0a:1c:89:b9:3f:18:39:42:97:b1:68:9b:
         23:96:e1:8c:6c:90:e9:95:71:0a:61:db:d7:58:0b:1d:bf:49:
         c0:81:c4:60:22:3f:01:e1:bc:4b:e5:3e:0c:25:77:1f:a9:b5:
         c4:5c:21:37:69:5a:8f:74:cd:87:9e:fa:43:73:1a:fd:c9:32:
         44:90:af:14:56:4e:65:a0:56:61:5b:4d:a8:02:eb:01:d5:93:
         d3:22:f7:6a:20:7f:9c:70:89:02:28:95:73:7a:67:3d:1f:9b:
         95:29:5e:3b:43:9a:0f:2b:0c:f7:23:60:b1:37:91:c7:32:5c:
         f7:8b:7f:b6:70:4d:53:62:95:97:e3:a2:28:65:5d:12:3a:7b:
         fe:98:7a:55:57:75:20:6a:f1:04:dc:91:12:a5:8b:a5:f3:47:
         04:63:04:d5:4e:d1:c5:11:93:96:3d:20:7e:7b:59:7d:ca:6d:
         37:e1:68:25:60:ef:e5:3c:3d:f2:a6:52:6a:07:9f:9d:08:38:
         6b:c7:b3:fb:ad:36:64:f5:df:13:8d:5a:f8:f8:b7:f7:da:46:
         2a:fd:39:76:e0:fa:35:88:80:f5:6a:53:53:0c:6e:40:00:30:
         d0:5d:64:39:78:12:9d:aa:af:30:0f:8c:83:e4:1e:40:dd:c0:
         2b:f7:8a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:45:03 2024 by rpki-client on console-fra.rpki-client.org