Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/323630353a643538303a3a2f33322d3332203d3e203436363930.roa
File:                     323630353a643538303a3a2f33322d3332203d3e203436363930.roa (raw, json)
Hash identifier:          96FVPM0LkXHrhAnAco2Ckd9iR4U+a5CLo6d/TCRterg=
Subject key identifier:   77:9A:66:B2:E1:51:92:98:A3:11:A3:32:EB:B6:C4:5E:2B:E5:73:86
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       20F222B189A618E2D40C48D00F41F060AAE1A7B3
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/323630353a643538303a3a2f33322d3332203d3e203436363930.roa
Signing time:             Thu 28 Mar 2024 04:18:44 +0000
ROA not before:           Thu 28 Mar 2024 04:13:44 +0000
ROA not after:            Thu 27 Mar 2025 04:18:44 +0000
asID:                     46690
IP address blocks:        2605:d580::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f2:22:b1:89:a6:18:e2:d4:0c:48:d0:0f:41:f0:60:aa:e1:a7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: Mar 28 04:13:44 2024 GMT
            Not After : Mar 27 04:18:44 2025 GMT
        Subject: CN=779A66B2E1519298A311A332EBB6C45E2BE57386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:ce:35:8b:57:4a:eb:85:a1:b2:ea:32:79:
                    fb:71:c2:72:95:ff:e4:0f:71:9a:93:ca:f8:39:74:
                    e7:23:9a:f6:80:16:0a:95:bb:21:c4:06:43:78:14:
                    ad:af:df:df:2d:98:28:af:dc:ff:73:57:a9:89:72:
                    ab:4c:fb:52:5b:dd:87:29:d7:9f:b7:e7:c5:f3:dc:
                    61:22:fe:dc:43:ae:99:0f:70:2a:09:2a:f5:b9:16:
                    c3:76:64:dc:b5:94:2f:51:ec:f9:12:50:4f:10:f6:
                    d3:5c:22:0e:7c:b5:97:95:b7:e0:2c:e3:ba:be:9b:
                    6b:ee:99:ab:c6:66:a2:3b:37:94:3f:11:ce:31:70:
                    21:33:89:2b:ad:27:f6:54:7e:65:c4:39:82:73:be:
                    2a:91:5e:8a:c2:3a:cc:fd:9a:5e:b5:16:11:4b:82:
                    8d:28:7f:86:88:b2:dd:1c:0a:11:d4:35:1e:9a:c5:
                    37:23:dc:13:44:11:75:8f:92:14:02:e3:bc:4f:e5:
                    af:e9:54:26:9b:b3:8a:df:95:3a:0c:49:9f:ce:58:
                    ca:ba:8f:cc:54:87:9c:77:96:43:ba:0e:fe:1c:f5:
                    8e:61:26:01:ba:be:52:c3:13:06:06:38:82:fe:bc:
                    6a:37:4a:8d:60:0e:b0:b5:35:76:c4:68:e0:05:2c:
                    c8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9A:66:B2:E1:51:92:98:A3:11:A3:32:EB:B6:C4:5E:2B:E5:73:86
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/323630353a643538303a3a2f33322d3332203d3e203436363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:d580::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:a9:88:94:cf:42:64:98:1a:bc:1f:f7:ed:43:ee:96:eb:37:
         47:3e:d2:82:c6:df:4d:3a:7b:21:24:8f:8a:f0:32:ea:f0:3f:
         54:b0:f8:ae:09:f5:7c:e4:22:65:96:90:76:53:95:3f:1d:60:
         a6:51:25:84:b7:f6:ae:2f:86:7c:62:8b:11:71:12:f7:d6:f0:
         76:f7:d5:af:e8:69:28:31:26:f9:04:9e:ac:e0:20:0e:e4:94:
         f5:9c:c1:9b:eb:45:11:27:3f:84:1b:4b:01:32:90:da:5e:ae:
         e3:c4:8c:82:ea:66:a6:50:81:c8:9e:c3:14:2a:ba:d5:23:b9:
         f2:0a:9f:6d:8c:c3:ca:02:9b:c9:65:27:14:75:d5:aa:58:99:
         4d:fa:15:3e:c7:55:08:60:27:2e:c4:52:5f:ad:e4:7f:ea:ce:
         16:e2:0b:c0:0d:24:c1:88:72:ba:c4:f2:97:5e:be:ca:d4:6a:
         6f:07:0c:51:a8:1e:60:2f:18:1d:af:ea:32:c9:b6:a3:8a:84:
         c6:77:bd:ca:a6:ce:e6:31:44:55:cb:7c:44:af:ea:18:5b:ba:
         52:a5:16:a6:72:85:bb:81:9e:dd:b6:27:b2:ed:35:5f:16:c2:
         4e:82:61:17:12:46:0f:a4:2e:27:ba:57:76:59:37:f4:48:01:
         db:78:09:f8
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIUIPIisYmmGOLUDEjQD0HwYKrhp7MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWJmNzM5ZjYzYzY5NDM1MzVjZmU0ZWQyODEzZjgzOGVk
NTYwYjcwNzZmM2E0NTJlYjgwHhcNMjQwMzI4MDQxMzQ0WhcNMjUwMzI3MDQxODQ0
WjAzMTEwLwYDVQQDEyg3NzlBNjZCMkUxNTE5Mjk4QTMxMUEzMzJFQkI2QzQ1RTJC
RTU3Mzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4zONYtXSuuF
obLqMnn7ccJylf/kD3Gak8r4OXTnI5r2gBYKlbshxAZDeBStr9/fLZgor9z/c1ep
iXKrTPtSW92HKdeft+fF89xhIv7cQ66ZD3AqCSr1uRbDdmTctZQvUez5ElBPEPbT
XCIOfLWXlbfgLOO6vptr7pmrxmaiOzeUPxHOMXAhM4krrSf2VH5lxDmCc74qkV6K
wjrM/ZpetRYRS4KNKH+GiLLdHAoR1DUemsU3I9wTRBF1j5IUAuO8T+Wv6VQmm7OK
35U6DEmfzljKuo/MVIecd5ZDug7+HPWOYSYBur5SwxMGBjiC/rxqN0qNYA6wtTV2
xGjgBSzITwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFHeaZrLhUZKYoxGjMuu2xF4r
5XOGMB8GA1UdIwQYMBaAFOIMIy9SScttgY2J97K9muOjaXV8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzEv
RTIwQzIzMkY1MjQ5Q0I2RDgxOEQ4OUY3QjJCRDlBRTNBMzY5NzU3Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1Lzg3ZmQ5MzU1LWZmZGMtNDk4Ni05MzI5LTRkMTkwOWUwMWEyZi8xYmY3
MzlmNjNjNjk0MzUzNWNmZTRlZDI4MTNmODM4ZWQ1NjBiNzA3NmYzYTQ1MmViOC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8xLzMyMzYzMDM1M2E2NDM1MzgzMDNhM2EyZjMzMzIyZDMzMzIy
MDNkM2UyMDM0MzYzNjM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAmBdWAMA0GCSqGSIb3DQEBCwUA
A4IBAQBgqYiUz0JkmBq8H/ftQ+6W6zdHPtKCxt9NOnshJI+K8DLq8D9UsPiuCfV8
5CJllpB2U5U/HWCmUSWEt/auL4Z8YosRcRL31vB299Wv6GkoMSb5BJ6s4CAO5JT1
nMGb60URJz+EG0sBMpDaXq7jxIyC6mamUIHInsMUKrrVI7nyCp9tjMPKApvJZScU
ddWqWJlN+hU+x1UIYCcuxFJfreR/6s4W4gvADSTBiHK6xPKXXr7K1GpvBwxRqB5g
Lxgdr+oyybajioTGd73Kps7mMURVy3xEr+oYW7pSpRamcoW7gZ7dtiey7TVfFsJO
gmEXEkYPpC4nuld2WTf0SAHbeAn4
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:09 2024 by rpki-client on console-ams.rpki-client.org