Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323130363637.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e20323130363637.roa (raw, json)
Hash identifier:          PDg2w6pPwlYpPPrFfHDQ74IAZb3AiC5n4m7I/LUyVSQ=
Subject key identifier:   E6:A7:FD:52:57:BE:6A:42:FF:37:3F:F7:0A:58:8C:5D:A3:30:A9:81
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       64E9D2B88B640FE2CA188FA5268251FA8938F370
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323130363637.roa
Signing time:             Mon 26 Feb 2024 12:08:48 +0000
ROA not before:           Mon 26 Feb 2024 12:03:48 +0000
ROA not after:            Mon 24 Feb 2025 12:08:48 +0000
asID:                     210667
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 11:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e9:d2:b8:8b:64:0f:e2:ca:18:8f:a5:26:82:51:fa:89:38:f3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:48 2024 GMT
            Not After : Feb 24 12:08:48 2025 GMT
        Subject: CN=E6A7FD5257BE6A42FF373FF70A588C5DA330A981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b8:b3:af:e6:7b:8a:b2:c2:d8:e7:15:e8:e7:
                    aa:47:00:f7:ec:f3:da:da:73:0d:a8:cd:4d:e0:f7:
                    8c:97:96:c5:53:28:1c:97:50:92:d9:34:54:37:b2:
                    1a:a8:e5:5b:04:bb:f1:8e:50:8d:a4:a6:40:89:13:
                    ad:e7:4e:c8:0e:30:df:3f:e5:65:51:69:c6:55:aa:
                    03:52:c5:fa:6e:ef:d0:09:82:98:33:d3:e8:83:9b:
                    75:27:d7:1b:b3:25:ef:65:00:3f:d6:cf:58:4b:05:
                    aa:48:60:06:4b:6a:ae:a6:b1:14:83:45:3d:2b:8b:
                    9c:59:6a:fd:05:81:48:b0:92:75:d4:39:e9:cc:8f:
                    f0:c5:02:5c:23:c3:4b:bb:d0:e9:65:e4:1b:2b:43:
                    ee:40:58:c7:3e:b9:44:4b:09:6e:27:73:0e:ad:d7:
                    40:1b:dc:22:c9:93:d3:ff:78:2e:27:8b:05:cf:67:
                    bd:2a:b8:cd:45:54:46:f7:15:c3:83:46:c2:ca:f5:
                    05:b5:64:50:62:dc:a4:57:df:7e:de:3f:27:39:cd:
                    e6:3f:cc:ea:ab:61:5a:1b:74:d7:98:60:46:af:a1:
                    e4:c0:62:0f:f8:f9:24:92:06:42:1a:ee:c6:c5:02:
                    a9:f2:60:2f:be:c5:3d:fe:c6:f4:31:b1:bd:fa:ed:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A7:FD:52:57:BE:6A:42:FF:37:3F:F7:0A:58:8C:5D:A3:30:A9:81
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323130363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:9a:e4:12:22:20:ef:0f:43:06:2e:3c:06:c0:96:6a:59:5a:
         2f:23:ed:eb:3f:b1:24:1d:e6:dc:8a:e9:f8:25:be:c4:9a:8c:
         93:22:57:16:de:10:08:05:5b:74:e7:fb:61:50:d6:eb:eb:6f:
         9f:cf:87:9f:8e:e3:09:59:56:a0:93:ca:0d:36:f0:78:5a:dc:
         46:11:4e:d4:f7:9d:c1:8d:a3:54:f0:71:11:49:86:35:b1:d8:
         bb:8e:33:88:fe:66:4a:32:07:f2:88:e8:38:19:38:69:90:f8:
         6d:9a:d1:99:ba:11:e5:d6:32:98:3f:46:0a:07:1c:52:51:2d:
         dc:b6:f1:0a:47:eb:43:9c:0b:70:0e:26:7a:7e:f6:61:3b:a5:
         e4:9d:f8:e2:86:8d:6c:c0:69:ac:b9:f5:f7:65:79:2e:17:f7:
         c1:7e:5b:78:f7:06:b9:62:8e:92:38:2d:94:de:7b:96:12:7f:
         c5:ea:97:8e:18:61:5d:66:ab:5a:2f:40:de:66:1e:fb:4c:d8:
         96:58:f6:d9:8e:b6:44:44:db:59:29:86:69:9e:86:0f:15:53:
         18:2a:9b:64:7c:7d:5d:48:86:79:f8:00:82:a3:42:ff:fc:5e:
         43:d6:80:27:ab:5a:b9:ef:cc:5b:bd:32:1e:45:cd:d9:d3:e3:
         10:68:bd:9c
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUZOnSuItkD+LKGI+lJoJR+ok483AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzI0MTM5ZWYyYjEyYjgzMDA5Nzk3YjhkNmMwYjQzMDY1
MDdiZDdkNjM4Y2U5NDE4MDUwHhcNMjQwMjI2MTIwMzQ4WhcNMjUwMjI0MTIwODQ4
WjAzMTEwLwYDVQQDEyhFNkE3RkQ1MjU3QkU2QTQyRkYzNzNGRjcwQTU4OEM1REEz
MzBBOTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrizr+Z7irLC
2OcV6OeqRwD37PPa2nMNqM1N4PeMl5bFUygcl1CS2TRUN7IaqOVbBLvxjlCNpKZA
iROt507IDjDfP+VlUWnGVaoDUsX6bu/QCYKYM9Pog5t1J9cbsyXvZQA/1s9YSwWq
SGAGS2quprEUg0U9K4ucWWr9BYFIsJJ11DnpzI/wxQJcI8NLu9DpZeQbK0PuQFjH
PrlESwluJ3MOrddAG9wiyZPT/3guJ4sFz2e9KrjNRVRG9xXDg0bCyvUFtWRQYtyk
V99+3j8nOc3mP8zqq2FaG3TXmGBGr6HkwGIP+PkkkgZCGu7GxQKp8mAvvsU9/sb0
MbG9+u0WhQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFOan/VJXvmpC/zc/9wpYjF2j
MKmBMB8GA1UdIwQYMBaAFNDmx2ut7KXL2pLJGLl8f0WZ77bPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MGM5ZmVlYzEyNDllLzEv
RDBFNkM3NkJBREVDQTVDQkRBOTJDOTE4Qjk3QzdGNDU5OUVGQjZDRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2JjOTQyZjY4LWNiMzMtNGEwNS1hNzI3LTNmOTNlNjEwMzkzZS83MjQx
MzllZjJiMTJiODMwMDk3OTdiOGQ2YzBiNDMwNjUwN2JkN2Q2MzhjZTk0MTgwNS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBj
OWZlZWMxMjQ5ZS8xLzMyMzYzMDMyM2E2NjYxMzk2MjNhNjMzMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMyMzEzMDM2MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+psAwDANBgkq
hkiG9w0BAQsFAAOCAQEABJrkEiIg7w9DBi48BsCWallaLyPt6z+xJB3m3Irp+CW+
xJqMkyJXFt4QCAVbdOf7YVDW6+tvn8+Hn47jCVlWoJPKDTbweFrcRhFO1PedwY2j
VPBxEUmGNbHYu44ziP5mSjIH8ojoOBk4aZD4bZrRmboR5dYymD9GCgccUlEt3Lbx
CkfrQ5wLcA4men72YTul5J344oaNbMBprLn192V5Lhf3wX5bePcGuWKOkjgtlN57
lhJ/xeqXjhhhXWarWi9A3mYe+0zYllj22Y62RETbWSmGaZ6GDxVTGCqbZHx9XUiG
efgAgqNC//xeQ9aAJ6taue/MW70yHkXN2dPjEGi9nA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:56 2024 by rpki-client on console-ams.rpki-client.org