Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/323630363a346438303a3a2f33322d3332203d3e2035363530.roa
File:                     323630363a346438303a3a2f33322d3332203d3e2035363530.roa (raw, json)
Hash identifier:          +dmGx98JsFSjqze5GG7i6fsE8J7HMk3+48cjyvgIydM=
Subject key identifier:   5D:F7:27:36:F3:5E:92:73:37:14:BD:3A:DA:A9:A2:1F:F0:8E:4A:B2
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       6865601ED7ABB78065398F210EF17480027F3609
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/323630363a346438303a3a2f33322d3332203d3e2035363530.roa
Signing time:             Thu 28 Mar 2024 04:18:23 +0000
ROA not before:           Thu 28 Mar 2024 04:13:23 +0000
ROA not after:            Thu 27 Mar 2025 04:18:23 +0000
asID:                     5650
IP address blocks:        2606:4d80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 May 2024 16:43:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:65:60:1e:d7:ab:b7:80:65:39:8f:21:0e:f1:74:80:02:7f:36:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 28 04:13:23 2024 GMT
            Not After : Mar 27 04:18:23 2025 GMT
        Subject: CN=5DF72736F35E92733714BD3ADAA9A21FF08E4AB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:df:e6:76:c7:09:45:6c:69:f4:7b:7f:4f:8d:
                    b9:b7:a1:c6:57:14:b7:49:fd:61:b9:74:10:61:b5:
                    4c:99:e4:7b:c8:0a:e9:c6:6e:d2:30:c5:1c:ef:9c:
                    4a:ed:20:0a:82:52:0f:69:d9:77:35:3c:5e:4a:e5:
                    2e:42:d0:b8:99:b2:43:bd:40:bf:09:77:86:a0:05:
                    f5:1f:91:49:e4:1f:ce:36:15:af:84:de:b5:d2:a7:
                    a8:fe:16:df:5a:ad:80:93:22:c4:41:5f:bb:40:1e:
                    fa:7a:63:5b:f5:89:ea:14:08:1d:70:dc:78:48:38:
                    ee:3c:f5:81:e8:11:b5:e2:06:92:92:62:0d:2b:a9:
                    45:ce:c6:f0:29:45:84:b2:8e:e7:f3:50:48:85:50:
                    e4:10:0c:47:20:a0:34:2b:19:7c:7d:30:26:95:18:
                    71:d8:f9:26:b7:2b:0d:a5:78:0f:a6:b2:ec:5c:12:
                    cc:dc:8d:22:68:e8:b1:da:65:70:e0:af:3f:ac:8d:
                    bb:32:1d:98:76:a0:aa:b7:30:c0:1c:97:4d:f8:08:
                    61:57:d5:c9:bd:f4:ff:65:ad:75:91:6d:1b:a2:6a:
                    c8:2b:a1:26:44:96:04:a3:13:7a:5b:4f:7f:ee:00:
                    f4:6d:f5:f6:b7:de:56:09:68:8f:97:1f:f8:81:45:
                    f0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F7:27:36:F3:5E:92:73:37:14:BD:3A:DA:A9:A2:1F:F0:8E:4A:B2
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/323630363a346438303a3a2f33322d3332203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:9f:52:a8:ed:03:fd:10:c4:40:1f:39:7e:04:6e:6a:01:68:
         cb:3d:b3:e0:3f:20:be:a5:bc:b2:58:00:39:1f:32:13:41:1d:
         51:37:94:36:f2:29:ed:a3:38:39:1a:7c:a5:39:69:39:9d:c3:
         99:97:bb:f3:68:e4:5c:fe:38:27:4f:01:2c:65:80:13:b4:44:
         39:2b:3d:aa:92:2d:a4:25:f8:d9:6b:b8:72:39:89:b3:17:7d:
         e6:46:99:25:94:7c:73:ea:29:7e:a3:a7:d3:a1:58:86:b7:0d:
         9d:b4:4c:ee:0b:69:6d:6e:fa:57:33:b7:7a:9e:43:fe:7b:39:
         42:60:23:79:ff:f2:55:e4:eb:b5:44:69:8b:8b:da:0d:2b:58:
         d6:18:2f:2e:5e:be:28:81:cc:6f:f8:7f:96:e8:1a:32:84:f1:
         f5:5b:47:e6:2d:af:84:94:3d:5c:95:42:ac:6d:2e:17:7b:24:
         ad:a8:02:85:8f:5a:64:36:16:ae:cf:6d:b2:23:f3:0f:4d:28:
         27:96:5b:b5:5e:f8:f7:59:80:57:28:d5:0b:3c:1f:c0:a6:8b:
         e8:9b:31:28:87:f6:b9:e8:30:75:ff:f8:8e:40:ce:8f:c7:74:
         32:7a:e6:23:8a:bd:dc:64:e7:b7:e2:9a:93:01:bd:2a:33:27:
         e9:13:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 16:04:26 2024 by rpki-client on console-fra.rpki-client.org