Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f33372d3337203d3e203539363738.roa
File:                     323630323a666139623a3a2f33372d3337203d3e203539363738.roa (raw, json)
Hash identifier:          gKyOTpNOeTyCCEgr93vt9/v9AAQ8jp9Yh9hwWzTjjaY=
Subject key identifier:   5B:16:DB:B7:A1:DE:A2:BF:E8:27:DE:E9:0D:7A:EC:37:C2:BE:49:6B
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       7542D5294C55B5A27653F5E1E4E1E7E8C5A171E4
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f33372d3337203d3e203539363738.roa
Signing time:             Mon 26 Feb 2024 12:08:49 +0000
ROA not before:           Mon 26 Feb 2024 12:03:49 +0000
ROA not after:            Mon 24 Feb 2025 12:08:49 +0000
asID:                     59678
IP address blocks:        2602:fa9b::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:42:d5:29:4c:55:b5:a2:76:53:f5:e1:e4:e1:e7:e8:c5:a1:71:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:49 2024 GMT
            Not After : Feb 24 12:08:49 2025 GMT
        Subject: CN=5B16DBB7A1DEA2BFE827DEE90D7AEC37C2BE496B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:49:b0:65:f4:5a:b6:72:23:79:8a:6d:9e:44:
                    9c:27:86:47:7d:5e:51:77:38:66:b3:f9:76:4a:2f:
                    cb:e6:45:48:28:15:0b:3c:4f:8c:e0:4c:3d:e7:97:
                    2e:9c:e7:3e:6a:b8:0d:5e:36:ef:d4:c4:5f:61:f5:
                    56:5a:bd:f3:31:94:68:74:fb:05:be:3b:a2:72:e3:
                    c8:0e:9c:f2:75:a9:a4:b7:12:d2:dc:38:98:4f:0a:
                    f3:19:90:1f:4b:a6:6f:ac:3c:17:04:8d:a9:e3:1d:
                    b1:13:d7:aa:d9:3e:b3:fe:33:58:76:ae:1b:3c:d7:
                    e3:d2:0f:e8:82:eb:3b:e9:04:45:b5:92:ad:cb:3d:
                    e9:a2:db:2c:c3:5e:ac:19:d2:d2:c2:5e:e3:fe:dc:
                    4e:52:df:bd:4a:7b:ad:0a:13:6d:53:6b:b1:a6:d5:
                    f2:83:c5:66:01:49:b3:76:f2:9f:c9:f2:5a:5f:9f:
                    0c:a4:f0:71:4b:d1:1c:c0:3b:9c:94:32:a8:fe:fd:
                    7f:b5:aa:b6:52:32:32:62:29:f5:de:2d:7d:97:bc:
                    1c:0f:a2:eb:2f:a2:32:29:cc:9c:73:10:eb:8c:21:
                    ed:e7:ed:9c:6e:5b:c3:33:21:4e:62:84:7c:78:74:
                    10:90:d4:7a:7e:77:c3:59:c9:09:59:97:5a:83:10:
                    32:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:16:DB:B7:A1:DE:A2:BF:E8:27:DE:E9:0D:7A:EC:37:C2:BE:49:6B
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f33372d3337203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b::/37

    Signature Algorithm: sha256WithRSAEncryption
         0d:52:e9:42:44:2d:23:8f:5c:4a:fa:65:2e:17:97:aa:d3:60:
         8b:2a:13:13:20:a8:d7:7b:4f:4a:43:6e:dc:8a:2f:d5:64:9a:
         53:12:f4:6f:1e:b3:12:6a:f3:27:3f:90:31:42:2e:52:f5:f6:
         8d:87:36:95:98:9a:f2:13:4c:4b:77:1b:c6:a0:88:c9:ce:f5:
         4c:aa:70:41:1f:00:3c:7a:d1:34:8b:62:e2:17:a6:f7:41:d4:
         47:f3:8a:01:5a:76:df:58:ef:c2:0d:05:72:34:03:f8:15:a6:
         0f:43:ed:35:d5:cc:5a:34:cb:07:99:1f:9e:fb:b3:bd:ab:55:
         05:e3:3b:50:66:28:e0:05:95:9c:bc:ca:d0:ad:de:d4:a5:43:
         9e:f1:56:15:0e:d5:c9:4b:6d:97:4e:a6:d6:92:fe:9e:1f:72:
         e6:45:48:c9:68:8c:66:f3:43:c7:97:1d:bb:cd:9e:21:aa:89:
         46:3b:7c:31:49:d5:23:eb:44:87:a4:a4:25:1a:ac:bf:86:b5:
         50:37:4a:ff:41:53:cc:d0:d2:02:00:95:e8:0d:ad:1d:17:25:
         9c:c6:12:32:f7:56:9a:5a:86:d4:1a:74:e7:70:87:f2:2a:99:
         08:9e:87:19:e3:54:99:3f:67:48:03:4d:25:30:86:1e:b4:3b:
         ee:fa:88:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:17 2024 by rpki-client on console-fra.rpki-client.org