Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f34382d3438203d3e203539363738.roa
File:                     323630323a666139623a3a2f34382d3438203d3e203539363738.roa (raw, json)
Hash identifier:          jb1XTbgH9dfYpVw6XK5vR1s1ZfbvK8VPt9n7fJ5p5oQ=
Subject key identifier:   F6:18:79:7D:2E:22:6F:9B:96:C2:15:DA:39:88:1A:11:ED:39:5A:53
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       27F2648D3CED3E70E7F543FFE5FC57B0B4252A45
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f34382d3438203d3e203539363738.roa
Signing time:             Mon 26 Feb 2024 12:08:49 +0000
ROA not before:           Mon 26 Feb 2024 12:03:49 +0000
ROA not after:            Mon 24 Feb 2025 12:08:49 +0000
asID:                     59678
IP address blocks:        2602:fa9b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f2:64:8d:3c:ed:3e:70:e7:f5:43:ff:e5:fc:57:b0:b4:25:2a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:49 2024 GMT
            Not After : Feb 24 12:08:49 2025 GMT
        Subject: CN=F618797D2E226F9B96C215DA39881A11ED395A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:6d:2f:37:4e:a3:29:a4:c2:99:bb:53:18:
                    26:58:8e:68:ba:3c:f4:f7:a5:e7:9a:0a:4e:bd:89:
                    2e:a9:f8:dd:b7:39:e3:95:d2:77:91:f0:8d:db:10:
                    80:c3:20:5d:73:dc:38:be:e9:49:3a:96:32:56:7f:
                    28:a8:01:4b:db:84:fd:f3:4a:93:7f:59:5e:f2:c0:
                    5f:42:0e:cb:fb:0c:c8:42:8c:a4:44:86:5e:ce:ca:
                    a3:ee:7a:b7:49:a7:e4:a2:70:7c:ef:56:08:67:a8:
                    3e:27:2b:64:8c:ac:47:2e:b1:26:e2:d3:8d:cc:17:
                    1c:1f:d5:1a:8e:bc:eb:12:96:71:a0:70:3f:31:34:
                    c5:25:9a:8f:0a:93:0f:51:56:47:ef:f7:58:9a:76:
                    b4:6f:48:69:86:33:62:dc:6b:a3:b4:a2:29:61:33:
                    c5:da:43:45:18:18:0f:09:8c:ac:fd:87:ed:e8:0e:
                    ec:ec:4d:08:33:90:84:4b:b4:c0:d9:a7:c8:58:4c:
                    80:64:ff:ec:e2:5f:96:55:dd:b9:11:91:83:1f:24:
                    11:bf:3d:58:c4:ae:fe:5a:9d:27:9d:3f:51:6a:cd:
                    ee:30:a4:82:ad:a1:af:fd:57:bb:bb:84:0e:c8:a5:
                    27:64:24:83:8e:13:d0:36:ae:4d:d8:a4:97:83:21:
                    6a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:18:79:7D:2E:22:6F:9B:96:C2:15:DA:39:88:1A:11:ED:39:5A:53
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a3a2f34382d3438203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:48:f3:66:dc:65:13:26:80:61:be:6a:bd:c0:28:e7:bd:90:
         a5:fc:7b:95:ec:84:40:b7:e4:71:dd:a8:a9:56:fd:d7:70:06:
         8e:d1:c3:c2:44:cf:14:80:e8:e1:04:bf:b1:dc:2b:58:ca:7b:
         7d:47:7d:1a:44:46:87:0c:07:7b:92:38:fe:bf:84:07:39:30:
         2e:2b:a4:ef:7c:30:33:94:96:83:42:4c:f4:4f:f7:cd:1a:9d:
         5a:60:e8:f3:ab:c4:5b:aa:2f:6a:fd:47:11:24:69:68:9c:86:
         b1:cf:97:b7:e3:b0:cc:01:ae:c2:64:42:25:7a:ce:6b:24:d5:
         b7:a2:1a:b5:a1:15:e6:08:03:13:e8:56:58:90:08:22:4e:d9:
         0a:d7:15:86:9f:d8:44:8f:55:0c:1e:79:70:02:32:22:67:12:
         97:65:9f:cd:09:fd:f5:c6:64:ef:ad:c1:b8:24:03:0e:61:3f:
         c7:41:ab:c9:fb:e0:ec:88:32:d1:e0:ee:17:2e:f4:d2:40:de:
         d3:b3:62:ee:d5:a7:30:5d:66:c0:af:cf:91:55:87:53:00:0d:
         d3:05:57:97:a4:96:cb:64:f3:22:54:6d:70:3f:ea:6b:ad:bc:
         a8:3a:5b:e8:6f:59:56:cc:5a:49:0e:d6:4d:4d:55:02:02:ac:
         9b:4f:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:17 2024 by rpki-client on console-fra.rpki-client.org