Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030343534.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e20323030343534.roa (raw, json)
Hash identifier:          jTUIb4sEwtKcFvRt4LvwBTce2mSOEjpOhU3vQ+RpPJ8=
Subject key identifier:   D5:32:8F:D2:99:FA:69:0D:C0:D7:D9:0C:78:CC:92:A2:C6:53:2F:18
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       62560DEF3304841C41923ECBCB3100207C70D33E
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030343534.roa
Signing time:             Mon 26 Feb 2024 12:08:48 +0000
ROA not before:           Mon 26 Feb 2024 12:03:48 +0000
ROA not after:            Mon 24 Feb 2025 12:08:48 +0000
asID:                     200454
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:56:0d:ef:33:04:84:1c:41:92:3e:cb:cb:31:00:20:7c:70:d3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:48 2024 GMT
            Not After : Feb 24 12:08:48 2025 GMT
        Subject: CN=D5328FD299FA690DC0D7D90C78CC92A2C6532F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ed:e5:57:73:1c:14:1b:09:a3:72:5d:53:23:
                    1f:0b:96:e9:72:9d:8e:e2:f6:86:df:2a:51:8b:32:
                    65:4b:53:e9:98:a5:2a:c4:d7:c8:c3:47:fd:91:3d:
                    2c:89:83:4e:72:05:58:07:40:b5:6a:f8:72:e8:69:
                    22:68:98:19:3e:8e:11:aa:ea:63:b2:e0:e7:a5:fb:
                    28:b3:b3:9d:db:c6:6b:ee:8b:20:df:0a:96:86:c0:
                    a2:2f:e6:bd:02:b1:2f:45:22:f0:38:6b:cc:e7:62:
                    96:ef:3e:c8:82:5e:67:88:f7:ec:42:d5:58:28:e0:
                    40:8f:2c:c7:60:37:c3:ec:70:58:73:95:ec:8b:1c:
                    c7:f7:a8:60:58:66:d1:36:53:d3:da:36:8c:cc:41:
                    3d:fc:1d:c6:e7:a9:80:4a:c3:2b:c8:0b:0a:6f:06:
                    14:48:a8:5c:1e:77:b1:ba:9f:c6:c1:11:3c:00:ce:
                    b4:62:d3:bf:6c:71:a2:78:3c:d1:12:6b:82:0b:0f:
                    5b:23:53:87:41:a3:2f:6a:42:21:0a:b1:1c:bc:4a:
                    0c:11:17:de:43:bf:e7:ea:b8:09:f3:6a:5b:fc:98:
                    5f:a2:84:88:c2:a3:02:89:0b:99:df:15:45:35:fb:
                    8a:8b:52:db:79:e0:dd:88:4e:b4:a8:d0:a6:87:17:
                    a1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:32:8F:D2:99:FA:69:0D:C0:D7:D9:0C:78:CC:92:A2:C6:53:2F:18
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:f6:87:b8:06:aa:bd:31:8b:9d:45:cc:34:05:8e:7e:30:16:
         33:a7:10:cc:fa:d3:ec:07:94:40:56:e3:c4:64:bf:24:d4:21:
         a9:16:35:87:d4:e1:55:e4:91:12:4a:06:76:6a:ee:80:69:de:
         35:0c:61:7e:9d:b1:5d:9e:f1:00:dc:e1:d2:24:e1:52:98:c2:
         89:fe:b2:1c:07:f5:27:3f:dd:40:06:6f:1a:8b:18:3d:83:57:
         a0:4e:90:64:b2:ef:61:be:7c:4d:13:b6:cf:88:4d:23:5a:82:
         94:c2:13:86:75:55:fa:1a:35:0f:7e:2f:37:6a:39:70:64:08:
         ce:4c:95:95:f8:7a:e8:e9:88:27:6f:10:43:1b:45:a8:32:3a:
         1f:b1:39:f1:52:77:ad:f2:41:ea:97:2a:ef:7c:01:1b:97:13:
         8e:71:b7:d2:09:45:94:02:82:b2:0d:6f:31:ea:72:3e:85:43:
         94:5a:1c:dc:db:5d:9d:9e:95:f8:80:04:f7:3e:4b:6a:08:90:
         3c:40:eb:d8:8e:26:7a:19:cd:92:8c:25:34:9e:22:e9:5b:c1:
         05:94:8d:be:93:c3:da:97:5d:b2:7c:d1:87:0e:a0:af:69:f1:
         90:f7:89:fa:35:ac:f8:b9:2c:ea:81:6a:1e:d7:39:70:b6:12:
         42:83:7b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:17 2024 by rpki-client on console-fra.rpki-client.org