Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030363736.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          bPAAiMWvkneLZ3CCXAgK05ZiO+Dj7QOWgsRaK2Sc8PI=
Subject key identifier:   97:EA:75:2E:6B:F6:F9:A3:36:E6:B1:C3:DA:90:A3:97:04:C3:2D:37
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       22654526A89FC19D2A68B2F32A0F505745E07FD8
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Mon 27 Jan 2025 12:14:10 +0000
ROA not before:           Mon 27 Jan 2025 12:09:10 +0000
ROA not after:            Mon 26 Jan 2026 12:14:10 +0000
asID:                     200676
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 00:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:65:45:26:a8:9f:c1:9d:2a:68:b2:f3:2a:0f:50:57:45:e0:7f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Jan 27 12:09:10 2025 GMT
            Not After : Jan 26 12:14:10 2026 GMT
        Subject: CN=97EA752E6BF6F9A336E6B1C3DA90A39704C32D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:66:6b:0d:72:21:fb:87:0a:18:9b:62:ef:
                    ed:fc:7b:93:27:3a:19:de:ed:65:bc:d6:b4:d0:03:
                    27:5c:05:a7:d0:29:90:ee:4b:e1:9d:a5:a7:2b:80:
                    ce:80:b7:30:8a:f7:df:d8:11:3a:a6:28:e4:e2:35:
                    9e:5c:aa:86:48:f9:dc:34:b6:92:a1:7f:9e:4e:6d:
                    1a:18:de:45:fd:51:06:b4:fa:37:a5:86:ad:c2:1f:
                    38:22:d6:e4:2d:f9:d8:c0:e3:ec:32:62:35:9a:05:
                    88:07:ea:99:8b:16:35:60:fc:1a:60:58:74:c2:2e:
                    7f:a6:63:d2:f3:f6:a2:59:81:9f:8a:f9:23:87:41:
                    a4:dd:84:fb:72:1c:0f:55:99:ef:8c:58:41:29:39:
                    0c:2b:df:9b:1e:c3:6b:5e:ab:d4:b1:ed:62:cf:2f:
                    71:d6:d7:19:f6:a4:09:60:fa:b3:13:93:7b:2a:c2:
                    a5:70:4a:43:f0:8b:1b:51:20:3c:34:4f:47:45:72:
                    de:f6:db:e1:a4:2d:c8:20:aa:34:bf:c4:1d:6a:01:
                    67:21:f5:2a:45:a3:fd:54:fc:f8:85:33:41:87:2a:
                    08:6d:8b:06:a0:7a:c9:5e:10:99:09:41:45:c7:73:
                    5f:6d:89:f5:09:38:a4:60:34:9b:e0:50:04:01:23:
                    20:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EA:75:2E:6B:F6:F9:A3:36:E6:B1:C3:DA:90:A3:97:04:C3:2D:37
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:3e:0a:1b:32:60:83:1b:e8:ab:97:bc:74:5b:6a:aa:c7:e1:
         ee:69:89:03:54:14:5c:70:88:4e:e7:9e:bc:b7:36:fa:26:55:
         c5:15:37:f4:23:ce:1c:35:e7:75:9d:f5:a5:0d:48:94:48:68:
         3e:11:1f:be:0b:18:4a:cb:df:87:43:5f:2f:3f:6e:a8:81:95:
         b0:75:9e:de:ae:dd:6e:63:b4:ee:05:2d:38:e3:53:3a:b7:84:
         34:6b:4b:67:8d:a2:97:03:c2:a0:82:72:b9:ff:14:ba:05:b8:
         17:74:f9:77:12:16:99:2a:1b:b9:15:6f:92:bc:9a:fb:b4:0b:
         02:64:0d:77:94:73:87:08:cd:8f:47:90:27:1c:5a:ff:77:43:
         c4:4b:ae:7c:d8:8d:c8:33:ad:0a:37:ed:2b:2c:08:b6:43:0c:
         bd:36:df:89:63:92:e2:de:7c:dd:06:ab:a3:3a:4a:48:78:c4:
         66:3a:ca:d1:d9:5f:fa:5a:2e:94:dc:f9:19:1a:26:d6:98:9a:
         71:3d:4e:2c:39:d9:66:2b:e2:71:df:aa:7d:7c:bb:aa:84:4f:
         37:c6:b3:07:9f:fd:58:46:ee:6c:db:c9:89:23:06:d4:8d:09:
         d3:4c:4d:a1:6e:ed:5b:41:49:05:57:47:91:7f:2c:ed:8f:f3:
         26:10:97:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:20:04 2025 by rpki-client