Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f34382d3438203d3e203539363738.roa
File:                     323630323a666139623a3a2f34382d3438203d3e203539363738.roa (raw, json)
Hash identifier:          nIREu0Pkg2hKu9l1tZgYCwQm4s1J2gZynGm9kFy+DKU=
Subject key identifier:   39:00:AC:7E:C0:1D:AF:DA:10:69:12:7A:40:56:4F:26:8E:D0:69:65
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       041CAE66A1793FDDEB04897369381D5E0C6AB373
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f34382d3438203d3e203539363738.roa
Signing time:             Mon 27 Jan 2025 12:14:12 +0000
ROA not before:           Mon 27 Jan 2025 12:09:12 +0000
ROA not after:            Mon 26 Jan 2026 12:14:12 +0000
asID:                     59678
IP address blocks:        2602:fa9b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Apr 2025 13:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1c:ae:66:a1:79:3f:dd:eb:04:89:73:69:38:1d:5e:0c:6a:b3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Jan 27 12:09:12 2025 GMT
            Not After : Jan 26 12:14:12 2026 GMT
        Subject: CN=3900AC7EC01DAFDA1069127A40564F268ED06965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ed:ec:a3:ad:8f:e6:a1:ce:cf:ed:7d:df:57:
                    5c:b3:db:99:01:de:11:ed:f4:58:85:1b:6d:6f:c2:
                    6b:55:fa:0d:d9:ab:8d:0b:e4:b7:03:d1:4a:a5:8b:
                    6d:8e:2d:17:5a:1d:00:3b:68:ed:73:83:09:68:92:
                    13:89:63:f9:5b:d1:f6:5e:74:00:84:58:9e:22:f6:
                    2c:1b:5c:02:b3:c2:c2:36:84:f8:4c:dd:3e:0a:3d:
                    f1:ab:00:fb:f2:69:a8:4a:6c:59:a3:2c:51:08:8d:
                    12:c5:e2:91:e6:d6:85:51:0f:47:e9:46:78:53:50:
                    af:5b:bf:58:3c:a4:ee:1b:94:86:00:8b:8d:13:dd:
                    33:7f:1b:30:10:4a:ca:03:e3:24:8f:5e:17:77:73:
                    12:c2:73:f6:be:0a:69:58:58:09:32:8b:84:30:5b:
                    48:13:0e:4e:1a:01:da:d8:8a:5a:90:50:db:de:5e:
                    d9:f1:c2:04:96:fe:4b:65:b6:88:a9:b0:63:21:bb:
                    5a:9b:8b:16:0c:86:a2:6a:6f:78:83:00:3b:be:10:
                    c6:5e:29:41:a6:5b:aa:f1:69:05:f2:99:d2:b4:4f:
                    f1:b2:05:03:b0:c4:c1:fa:2f:41:91:51:a5:83:52:
                    52:b2:ed:9b:b0:a2:35:3f:97:4e:bd:ff:3d:9f:2d:
                    e5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:00:AC:7E:C0:1D:AF:DA:10:69:12:7A:40:56:4F:26:8E:D0:69:65
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f34382d3438203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b::/48

    Signature Algorithm: sha256WithRSAEncryption
         d4:86:72:69:de:95:cd:5f:d8:30:7d:3c:25:44:92:bb:61:74:
         c3:30:c4:93:50:00:1f:af:16:2f:b9:2a:e8:83:cd:32:2c:33:
         9b:73:d0:03:66:9d:42:13:65:2c:db:f0:c9:6e:80:95:9b:91:
         d4:63:0c:46:2b:6f:50:2a:11:cb:1d:42:08:37:09:11:f2:a8:
         42:dd:8b:9d:3b:3c:d1:51:84:2c:2a:d6:f6:e5:a3:31:0b:4a:
         27:ac:07:0f:3d:58:cb:bd:07:b8:42:95:40:1e:13:c4:6e:43:
         50:8c:fa:ea:29:b8:a5:fd:fa:a8:05:30:ef:70:c5:73:9f:7e:
         01:9c:c0:6a:d9:e9:f9:1f:36:cd:6a:97:85:29:2a:61:14:20:
         1f:6b:f3:8d:d0:44:fd:8c:d9:d1:04:5f:2c:c7:9d:6f:8b:ab:
         22:d5:c3:fd:e4:bb:41:c6:17:c4:88:a9:4a:24:c7:e0:77:ea:
         b4:ca:64:e7:5b:69:44:fb:fb:ea:02:2b:7c:60:6d:e3:f4:33:
         41:d6:67:9b:68:e6:14:20:6f:2b:fa:48:05:4c:57:d2:c4:3b:
         93:a1:9a:27:d7:43:9d:e7:96:81:9f:72:f5:d1:f0:a9:1d:e8:
         8a:4a:5c:ba:0a:45:1a:50:61:06:5f:91:b6:ca:0e:0d:32:a6:
         b2:e0:28:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:09:26 2025 by rpki-client