Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030363930.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e20323030363930.roa (raw, json)
Hash identifier:          i3zH5fpF6HCq7iMP/aJCL6fcwrFwr8IC6UPlLqgVTtQ=
Subject key identifier:   E1:04:A5:6B:39:90:B8:38:55:6E:BE:F2:79:96:6F:30:95:E4:51:B8
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       7977F9AC05B49A2A0D96DB7D310FECB32C0B29EE
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030363930.roa
Signing time:             Mon 26 Feb 2024 12:08:49 +0000
ROA not before:           Mon 26 Feb 2024 12:03:49 +0000
ROA not after:            Mon 24 Feb 2025 12:08:49 +0000
asID:                     200690
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 11:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:77:f9:ac:05:b4:9a:2a:0d:96:db:7d:31:0f:ec:b3:2c:0b:29:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:49 2024 GMT
            Not After : Feb 24 12:08:49 2025 GMT
        Subject: CN=E104A56B3990B838556EBEF279966F3095E451B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:cb:31:bd:9f:f2:c7:fd:5d:00:9e:6d:31:
                    d7:7e:6b:61:f6:6e:1d:19:98:21:4d:c0:4f:ce:23:
                    f7:b1:a5:4e:84:a5:b1:da:2b:ed:8e:28:8a:90:9d:
                    f8:3f:69:00:9b:ec:57:7f:fc:3c:88:d5:11:d7:12:
                    09:f1:c5:b9:33:cf:70:a0:f1:fc:89:4c:97:e6:fa:
                    c7:a5:d9:41:f9:a5:95:16:7e:7e:d2:a1:45:a9:f9:
                    a9:42:61:5e:e3:d9:89:86:6e:ae:85:97:13:68:e0:
                    19:b9:be:67:df:44:f0:d9:63:ae:53:d3:ca:82:be:
                    3c:fb:ad:d1:b8:51:09:f7:08:51:e0:bd:b7:cf:3b:
                    75:25:4d:c0:88:dc:26:e8:de:67:5b:e0:59:5f:5a:
                    2c:40:fa:82:57:37:48:e5:ae:11:ae:f0:2c:3c:3e:
                    91:62:b3:c1:7c:bf:ec:f1:95:d6:d3:ea:eb:22:38:
                    de:35:5c:26:4a:d3:82:14:32:28:d5:79:2b:d9:96:
                    2e:8f:5a:df:f9:a4:91:39:ce:22:7f:f0:01:5c:da:
                    5b:eb:c4:c0:13:23:bd:a8:1a:9b:ca:d3:bf:2a:59:
                    78:1c:f3:7e:62:78:54:97:f3:1a:15:f3:f9:f1:09:
                    a6:9d:92:09:d3:0c:0a:d8:36:e0:09:cd:39:de:f5:
                    f4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:04:A5:6B:39:90:B8:38:55:6E:BE:F2:79:96:6F:30:95:E4:51:B8
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323030363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:8a:c2:32:e2:13:2b:59:9e:31:09:5a:0b:45:84:f6:f0:29:
         22:7e:67:c8:65:0a:c3:83:41:9a:13:e7:ff:b8:8d:3b:5d:0a:
         e3:cb:dc:10:27:f6:f9:95:c9:d4:58:b2:2a:fa:4f:aa:96:a5:
         aa:ae:23:a8:df:30:bb:17:3e:8e:f2:1f:b8:fb:b3:3e:15:83:
         0d:03:a5:73:63:b1:7f:3f:8c:e2:78:b0:ff:24:22:3a:ec:28:
         56:fe:03:44:2b:bc:fb:08:83:2f:40:62:0e:5c:f9:53:b5:e8:
         4f:09:1d:46:07:e4:2b:c1:33:7e:64:e7:9c:75:f4:e4:17:c6:
         40:96:e9:5e:b5:65:81:0e:dc:fa:a7:4c:98:a0:31:55:9e:0a:
         5d:1b:52:50:8d:a8:73:39:11:33:e0:d7:60:de:c3:bf:a0:15:
         06:a3:6e:ac:be:8b:99:22:65:ed:e8:cc:38:37:5d:60:09:72:
         d7:10:45:9f:fd:66:3f:95:04:52:4e:87:95:42:6f:9c:21:35:
         87:d3:93:7f:19:6e:fb:15:9c:f1:9e:32:1d:62:fa:91:88:a3:
         63:05:a0:54:63:c7:cd:14:4a:73:eb:e6:f4:62:70:86:1a:65:
         c2:fd:fa:44:5d:97:3d:a3:bb:ba:cb:77:ee:d8:92:87:39:e9:
         a3:10:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:14 2024 by rpki-client on console-fra.rpki-client.org