Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a333a3a2f34382d3438203d3e20323632323837.roa
File:                     323630323a666164343a333a3a2f34382d3438203d3e20323632323837.roa (raw, json)
Hash identifier:          aXIbGPa6HVYl5qVSKzxyzakbr8McJcAgsEO1aNezS38=
Subject key identifier:   AE:E8:5C:0A:50:2A:BB:28:7E:71:B6:D4:94:09:72:E9:78:80:C5:D6
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       7150926A8D8A50ADEC1E3A2FEDCF3C6461A73B9F
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a333a3a2f34382d3438203d3e20323632323837.roa
Signing time:             Thu 27 Jun 2024 12:03:01 +0000
ROA not before:           Thu 27 Jun 2024 11:58:01 +0000
ROA not after:            Thu 26 Jun 2025 12:03:01 +0000
asID:                     262287
IP address blocks:        2602:fad4:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 09:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:50:92:6a:8d:8a:50:ad:ec:1e:3a:2f:ed:cf:3c:64:61:a7:3b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jun 27 11:58:01 2024 GMT
            Not After : Jun 26 12:03:01 2025 GMT
        Subject: CN=AEE85C0A502ABB287E71B6D4940972E97880C5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:ec:e7:27:8a:03:84:df:ff:3a:7c:f1:b4:
                    0c:5b:4e:e4:6f:3e:d0:57:87:ba:a5:da:b0:46:af:
                    ad:32:d1:e9:74:ca:d6:20:a4:cc:6b:a7:97:55:2f:
                    89:0f:53:29:c9:71:58:25:8b:74:36:a4:19:48:07:
                    a9:ec:bb:aa:3d:da:61:e5:3f:ef:03:0d:1e:88:b4:
                    8a:5e:c4:2f:aa:8b:04:8f:24:c8:c4:e8:ed:c8:34:
                    32:13:e7:79:be:02:88:4b:94:24:10:32:ca:a9:78:
                    bc:52:57:d5:01:5e:20:dd:a0:17:ee:0d:69:69:38:
                    82:1a:61:17:83:ca:3a:8c:30:17:f0:fb:c8:0c:0f:
                    21:d3:d4:ac:0c:78:46:58:2c:6f:2c:e7:97:e5:00:
                    0b:4f:d1:2f:22:41:88:c4:cc:28:36:90:f6:73:d5:
                    d8:98:97:c2:9a:5d:17:c0:47:d2:64:1b:a9:90:c3:
                    2a:cf:da:6f:86:4d:b8:c4:38:e1:cd:13:61:30:79:
                    7f:b4:cd:82:51:bf:c9:b1:95:9b:33:e5:5d:a1:7c:
                    1c:af:e3:73:3f:e3:42:7a:3d:52:cc:1e:0d:42:ae:
                    62:34:a8:92:d9:77:b7:fd:d9:4d:57:d3:0b:ae:c2:
                    72:70:d2:f3:fd:d3:44:ab:b7:21:17:d4:98:ee:26:
                    f9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E8:5C:0A:50:2A:BB:28:7E:71:B6:D4:94:09:72:E9:78:80:C5:D6
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a333a3a2f34382d3438203d3e20323632323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:59:b0:2d:39:fb:4c:fa:98:6e:62:c8:a5:a0:56:ee:87:84:
         5b:81:a1:00:82:57:fb:78:e5:32:d8:e4:c0:c1:a8:b5:49:0d:
         cc:04:a9:cb:47:23:4f:ef:ef:6f:45:84:f5:95:bb:b5:6d:32:
         d6:52:a2:11:e6:cd:08:5c:f5:ea:20:b4:db:d9:86:dd:63:50:
         83:1a:cd:53:af:8c:e9:27:0e:9c:24:44:06:2a:0e:8d:ec:51:
         8d:f1:51:65:20:27:bd:97:52:46:ac:97:fb:de:8b:3a:70:dd:
         3b:0b:13:30:73:e7:78:0c:9e:6f:bf:12:7f:35:5e:a0:cf:63:
         ca:4d:c1:80:34:0f:98:a3:1a:f8:a4:1b:d4:20:76:a0:4a:b4:
         b0:21:2c:52:2c:81:ed:67:7d:97:ef:0c:9e:16:1f:bf:ea:fc:
         32:90:50:34:b7:66:37:98:b1:e0:9d:53:49:19:35:20:3d:f7:
         63:1f:a5:54:e6:3a:4f:2f:d1:9b:9a:dc:f1:9b:2f:4e:1e:74:
         dd:d8:b1:61:6d:d5:71:7b:1e:f6:a9:94:cb:9e:9c:2e:de:32:
         3d:94:16:0c:4d:d7:6e:ca:6c:6c:c9:82:38:a5:b9:43:1e:4f:
         b4:9e:81:2d:5d:33:d9:58:e3:83:b5:c4:11:15:5b:24:75:94:
         a6:7d:6c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:35 2025 by rpki-client