Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/323630323a666139313a3a2f34382d3438203d3e203533343237.roa
File:                     323630323a666139313a3a2f34382d3438203d3e203533343237.roa (raw, json)
Hash identifier:          s3uK2OEg0e9L8LAd0OzrCd+g/88MDJ30UbEJKSOEbuQ=
Subject key identifier:   BA:30:2A:BD:92:08:9B:4B:EF:A0:DC:41:86:D4:CD:E7:DA:AF:E5:5A
Certificate issuer:       /CN=dd9d9fe5ccb47bb94f8eb964236a5c3f27851abd8c6ad6869e
Certificate serial:       78CEC50E7D510542D349999C1DFE80DD62E1F79A
Authority key identifier: DA:28:0F:70:DF:67:81:E8:89:EB:4B:A3:E0:D9:BB:69:FA:6A:09:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/dd9d9fe5ccb47bb94f8eb964236a5c3f27851abd8c6ad6869e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/323630323a666139313a3a2f34382d3438203d3e203533343237.roa
Signing time:             Sat 21 Sep 2024 15:43:26 +0000
ROA not before:           Sat 21 Sep 2024 15:38:26 +0000
ROA not after:            Sat 20 Sep 2025 15:43:26 +0000
asID:                     53427
IP address blocks:        2602:fa91::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/DA280F70DF6781E889EB4BA3E0D9BB69FA6A0905.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/DA280F70DF6781E889EB4BA3E0D9BB69FA6A0905.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/dd9d9fe5ccb47bb94f8eb964236a5c3f27851abd8c6ad6869e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/88c69486-3e14-4f26-9f99-02cf7aaab7bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ce:c5:0e:7d:51:05:42:d3:49:99:9c:1d:fe:80:dd:62:e1:f7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9d9fe5ccb47bb94f8eb964236a5c3f27851abd8c6ad6869e
        Validity
            Not Before: Sep 21 15:38:26 2024 GMT
            Not After : Sep 20 15:43:26 2025 GMT
        Subject: CN=BA302ABD92089B4BEFA0DC4186D4CDE7DAAFE55A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:93:fb:45:16:02:f2:5c:aa:18:bb:cf:7d:1f:
                    5e:e2:02:ee:78:f1:52:c9:f5:42:6a:da:9d:70:a5:
                    a2:a4:73:ff:00:cc:52:d4:3c:52:23:a2:c7:14:7c:
                    98:c8:0b:24:ac:9a:d9:73:ab:f0:fd:12:52:8c:b0:
                    75:ba:c5:6c:ac:01:4c:c7:2b:09:12:5b:b9:ad:44:
                    ab:5c:39:1c:8f:64:a1:82:44:f9:23:74:36:b2:5b:
                    dc:4f:dd:f5:3b:0e:ec:75:9f:5d:49:27:7c:27:b3:
                    eb:ac:19:c0:c4:11:88:b8:8d:11:df:f4:50:53:dd:
                    39:57:1b:c0:46:1b:f8:68:e5:7f:8a:fb:47:97:ff:
                    9c:f5:67:3d:f2:5d:a3:06:94:39:36:5d:38:f4:0c:
                    1a:59:a0:88:d2:0d:dd:06:ec:6b:cb:e8:95:ca:1a:
                    37:94:97:84:ff:cc:b8:08:cd:24:49:9e:9b:46:8d:
                    00:cc:2b:71:34:cc:41:1b:27:43:f5:6b:40:69:dc:
                    c6:38:36:68:dc:e2:e6:6f:ef:75:a6:db:a5:f5:3f:
                    d0:2a:12:c1:43:05:45:02:2c:13:11:53:c6:ec:14:
                    e6:24:ef:74:31:1c:28:1f:5a:91:f1:06:e2:6a:e1:
                    c8:28:0a:c9:15:4a:e4:cd:63:69:91:8b:c3:d9:c4:
                    86:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:30:2A:BD:92:08:9B:4B:EF:A0:DC:41:86:D4:CD:E7:DA:AF:E5:5A
            X509v3 Authority Key Identifier:
                keyid:DA:28:0F:70:DF:67:81:E8:89:EB:4B:A3:E0:D9:BB:69:FA:6A:09:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/DA280F70DF6781E889EB4BA3E0D9BB69FA6A0905.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/88c69486-3e14-4f26-9f99-02cf7aaab7bf/dd9d9fe5ccb47bb94f8eb964236a5c3f27851abd8c6ad6869e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186f0d510a65d11/0/323630323a666139313a3a2f34382d3438203d3e203533343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa91::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:3b:ef:af:33:26:ba:89:93:c5:1f:20:58:70:f1:33:a8:29:
         39:c1:20:06:7f:d7:e5:bc:a9:bc:40:0e:1e:88:6d:6d:eb:d6:
         41:f0:92:44:58:5f:9a:dd:27:12:47:0e:b4:f2:64:f2:5d:0f:
         fe:f2:a6:6a:85:fe:e4:23:10:49:5d:ae:2d:2a:38:a2:01:36:
         03:98:ce:06:81:fd:00:ef:d6:b9:7c:30:79:94:ab:45:9f:59:
         af:1d:b1:32:2b:13:82:4a:bc:75:b4:cc:97:12:bc:5a:00:16:
         2c:01:bc:58:cf:d4:93:cd:58:7f:56:81:5d:33:ff:25:a7:5d:
         0c:b0:49:10:da:cb:ba:8f:ab:2a:07:0e:7a:57:1c:7b:e7:ed:
         33:ce:27:74:57:f8:63:a1:74:fc:04:a7:78:bb:47:36:0a:e9:
         cf:78:6d:94:d2:96:91:01:ab:7f:68:11:e4:e3:82:c1:7d:d8:
         d4:92:d4:ed:e7:26:5d:4a:43:6b:55:2f:ed:b5:a7:27:ae:3c:
         82:10:1f:e3:41:34:5f:5b:72:ff:83:d3:d9:28:a3:d6:a0:58:
         37:1f:c2:ec:1f:3e:e0:38:40:79:87:56:3d:42:34:4e:07:2d:
         88:8a:97:1b:7a:71:04:df:98:cf:af:f6:c7:ce:b4:3f:14:22:
         42:70:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org