Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323130363435.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e20323130363435.roa (raw, json)
Hash identifier:          tSEvXpPDVgFui5bKouVZcKAYAY+g/+Bu1PBDG2jrl4A=
Subject key identifier:   97:8B:A1:6E:87:24:85:13:46:79:14:4A:D4:07:78:8C:31:F3:81:42
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       459452FE1B655CE0B7180FA871265D01D2CB81DC
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323130363435.roa
Signing time:             Mon 26 Feb 2024 12:08:47 +0000
ROA not before:           Mon 26 Feb 2024 12:03:47 +0000
ROA not after:            Mon 24 Feb 2025 12:08:47 +0000
asID:                     210645
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:94:52:fe:1b:65:5c:e0:b7:18:0f:a8:71:26:5d:01:d2:cb:81:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:47 2024 GMT
            Not After : Feb 24 12:08:47 2025 GMT
        Subject: CN=978BA16E872485134679144AD407788C31F38142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8a:e7:b3:f2:09:a4:65:41:19:32:4f:01:65:
                    b6:85:03:1b:92:be:4e:ba:de:d9:dd:ce:9f:49:de:
                    58:e3:1d:98:a3:be:f6:12:6a:c8:46:49:56:43:12:
                    7e:39:5f:e6:7d:4e:bb:fc:1a:04:12:74:d6:58:2f:
                    9e:82:c1:e1:a3:d5:3e:ac:0e:38:db:67:73:90:bf:
                    b8:4f:0a:b4:27:df:71:80:43:2b:5d:22:8e:e8:84:
                    fc:ab:58:ad:36:ea:84:d4:07:bc:fe:73:b9:3c:4c:
                    8f:3e:67:55:09:10:4e:72:00:87:dd:38:65:8e:ab:
                    20:d9:bc:4d:cf:3c:1b:8b:57:62:de:f4:57:a1:78:
                    84:ae:9d:d5:bb:8a:b2:b7:a3:13:14:53:84:7f:7a:
                    5d:b9:f4:9b:5a:99:dc:d9:ec:da:3b:18:55:d0:52:
                    96:8b:6d:d8:d9:9e:0b:75:fd:c6:48:47:06:33:8c:
                    56:fe:4d:74:49:d6:a2:7d:3d:4e:be:29:4f:23:b7:
                    e1:9e:26:b7:9f:04:6e:c9:5a:87:66:86:3e:64:e5:
                    61:88:a5:68:16:fe:af:a4:c1:1f:27:3d:4a:9f:ff:
                    8a:8d:ec:5b:6b:07:f0:35:fe:38:fa:8c:7d:d6:e3:
                    55:c2:9d:31:03:1a:eb:17:06:93:b4:ce:77:e2:69:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8B:A1:6E:87:24:85:13:46:79:14:4A:D4:07:78:8C:31:F3:81:42
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323130363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:5a:40:88:a7:d7:14:0a:f6:dc:37:3a:47:87:81:a3:88:59:
         7f:96:fb:7c:b2:e1:c8:6d:83:7a:15:ae:59:e0:f3:c2:8e:68:
         64:4d:86:4d:3e:b8:1c:fe:9e:cf:74:23:21:49:bb:99:20:dd:
         ed:26:ca:f0:f3:ba:39:08:1a:1b:ef:75:e1:31:3f:e8:2a:33:
         dd:3b:bd:90:6f:0c:6b:84:74:3c:d6:98:0f:e0:6b:a8:f9:69:
         9f:f8:9a:eb:09:9b:70:f6:29:86:2c:e8:e0:b3:4f:67:fe:17:
         af:77:38:07:60:7a:3b:58:44:83:09:12:c1:6d:d7:d7:a6:ba:
         51:2d:5a:31:09:32:01:8b:49:d0:e5:c9:0e:44:b5:c2:ca:48:
         3f:4e:86:2c:82:9f:30:54:07:a3:5d:45:98:57:fa:1d:43:9b:
         d9:8b:b7:61:a4:21:49:6d:42:29:af:4b:68:ff:46:55:7e:41:
         e2:38:82:67:51:5c:b6:bc:ea:f7:0e:43:8a:ab:22:e2:7a:fc:
         93:5e:77:5e:c1:db:da:2f:91:f1:e3:68:3d:a9:21:41:9a:39:
         2f:ae:66:47:2c:58:e5:3b:27:2e:b1:96:90:2a:a3:5b:d8:dc:
         96:59:00:fa:12:16:e7:0c:f1:87:57:b1:f9:e0:6a:f9:ad:49:
         0f:1d:4c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:45:24 2024 by rpki-client on console-ams.rpki-client.org