Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030363736.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e20323030363736.roa (raw, json)
Hash identifier:          21L4qmn91HsabVn+h5MrwKC8w45BeU3Ku6230vEkrtE=
Subject key identifier:   E5:07:86:B3:94:AB:C4:B4:8B:B9:7F:5D:26:AE:7A:63:DF:4F:AB:A0
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       40A76D9FA39ABAA288AD95B687597935D73737FB
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030363736.roa
Signing time:             Mon 26 Feb 2024 12:08:49 +0000
ROA not before:           Mon 26 Feb 2024 12:03:49 +0000
ROA not after:            Mon 24 Feb 2025 12:08:49 +0000
asID:                     200676
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 11:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a7:6d:9f:a3:9a:ba:a2:88:ad:95:b6:87:59:79:35:d7:37:37:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:49 2024 GMT
            Not After : Feb 24 12:08:49 2025 GMT
        Subject: CN=E50786B394ABC4B48BB97F5D26AE7A63DF4FABA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:74:dc:50:0e:d9:68:e0:c6:7d:3d:3b:0e:dd:
                    ea:3f:87:c9:dd:d2:c1:47:b2:e2:18:93:0c:6b:1a:
                    a2:e8:30:3e:90:d8:aa:00:f2:24:ca:2c:c3:61:c2:
                    59:6b:e4:22:04:ea:b3:e9:17:d0:d7:73:f3:ed:5c:
                    34:37:e0:83:d5:6d:90:4d:91:1b:ab:61:7a:a7:80:
                    a6:b1:fc:c9:ec:58:bf:38:03:6d:29:32:c0:67:fc:
                    7a:ca:12:c5:3b:1b:9f:97:67:02:af:2b:c1:32:fa:
                    c2:14:e4:5a:ca:50:5f:15:59:6d:3f:69:ad:98:1a:
                    1c:b2:41:02:f5:fe:5b:ff:95:8a:b9:a3:b5:a6:bc:
                    7b:d6:3b:e4:c5:02:bc:0d:aa:e5:9e:34:18:d0:ff:
                    b7:50:42:6c:b7:57:ac:9c:8e:a5:cb:0b:1f:74:06:
                    86:46:87:82:16:18:38:37:23:3e:bf:2d:aa:91:7e:
                    b0:25:8c:ae:c2:ae:1a:da:9a:06:24:00:14:c2:98:
                    cf:3d:18:fc:55:e3:6e:06:d0:ef:b9:6b:60:f3:cd:
                    f6:8a:40:aa:41:c5:3c:42:49:2c:09:0f:97:42:7d:
                    7b:f4:c6:d9:23:22:d6:bb:3e:84:86:e6:9c:6e:65:
                    b1:54:66:91:28:b0:d2:86:21:e5:f4:99:cd:92:30:
                    13:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:07:86:B3:94:AB:C4:B4:8B:B9:7F:5D:26:AE:7A:63:DF:4F:AB:A0
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:b6:b9:8f:94:1f:44:0e:02:fc:11:62:3d:5e:d6:a2:3e:0e:
         18:a8:35:de:12:cd:01:5e:25:fd:09:7b:cc:a4:dc:e3:ba:e2:
         e0:65:78:86:42:a5:08:20:42:60:77:be:67:e8:e6:d6:2b:a0:
         a9:9c:23:55:fc:1c:48:e9:a6:e9:46:c9:a9:dc:52:96:fb:00:
         2f:66:65:e1:b2:7f:f1:e3:82:de:b7:f5:b2:9e:51:a4:78:e5:
         75:a6:38:29:b5:3a:d7:99:f8:b6:79:7c:37:7b:fb:aa:5a:57:
         d6:f6:76:b5:ef:a3:29:56:38:9b:7e:38:2b:ae:05:92:53:1e:
         ca:31:e1:25:d1:0f:dc:44:a2:a8:26:f4:db:c4:7d:7e:bf:ba:
         0c:e4:07:5a:a5:ba:bc:2f:f0:fc:19:b4:b4:36:0a:30:d7:81:
         84:98:12:32:55:fd:13:17:1a:90:50:de:5f:be:38:3b:78:6c:
         55:06:df:7a:80:98:ab:68:82:79:94:e9:6b:e5:57:09:a5:49:
         4b:5d:2b:77:1b:c0:04:3b:53:e3:6e:f1:dc:2e:31:cc:0c:92:
         b0:e0:ac:e8:84:8b:d8:0d:92:62:3c:fb:3e:58:f9:b4:ac:33:
         9d:78:ab:0f:5e:31:6e:a0:4f:c1:e9:c4:fd:13:41:2f:73:67:
         aa:4e:27:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:56 2024 by rpki-client on console-ams.rpki-client.org