Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323131333830.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e20323131333830.roa (raw, json)
Hash identifier:          ZyMMLtQo9jengm9BKHXCVJzv9kJ+ONEFHZr0jo1x/do=
Subject key identifier:   E5:04:08:43:8B:79:8E:43:64:DA:0A:1A:72:2F:6E:42:C1:57:A0:DD
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       2F5159A129EDA1E9699B3548386D208E64BB8E5F
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323131333830.roa
Signing time:             Mon 26 Feb 2024 12:08:47 +0000
ROA not before:           Mon 26 Feb 2024 12:03:47 +0000
ROA not after:            Mon 24 Feb 2025 12:08:47 +0000
asID:                     211380
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 11:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:51:59:a1:29:ed:a1:e9:69:9b:35:48:38:6d:20:8e:64:bb:8e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:47 2024 GMT
            Not After : Feb 24 12:08:47 2025 GMT
        Subject: CN=E50408438B798E4364DA0A1A722F6E42C157A0DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:7b:b7:18:b2:b9:58:fe:7b:20:9b:c7:c7:
                    f9:ad:03:01:4f:a5:6c:05:7d:87:9c:f7:a5:b0:9c:
                    34:4c:59:88:e1:f9:fd:f3:17:1f:4a:be:56:4c:85:
                    74:26:c7:93:22:a9:96:8c:e6:8d:05:e4:85:f0:d6:
                    d3:df:b8:af:08:f0:44:f5:69:f2:8d:ba:91:07:20:
                    4f:71:2a:90:bb:28:cc:c4:ac:f0:50:31:53:ac:a9:
                    78:07:f2:58:6a:74:e7:30:26:3b:07:02:8e:89:6d:
                    5f:9a:e3:c7:63:77:78:20:e8:1d:f9:87:12:6d:db:
                    d4:98:63:ba:87:17:63:1f:f5:da:e3:37:f1:3c:04:
                    87:fb:b3:06:52:b7:48:ce:06:4e:b2:99:7b:f9:54:
                    70:c4:0a:f6:02:5e:1a:4e:d6:de:fe:f4:82:7d:36:
                    65:5c:7a:df:71:0b:1b:b5:65:c3:ae:77:e8:49:b5:
                    cf:bb:cb:b5:cc:a8:de:70:7d:80:e2:69:30:e5:91:
                    f7:70:f4:9d:3b:04:9c:2b:3d:fc:ff:80:71:75:88:
                    11:64:3e:a1:44:92:29:7b:fe:46:49:b6:1c:7b:3b:
                    de:af:d1:cf:52:fb:e9:63:10:0d:b8:e5:8a:56:ea:
                    28:65:b3:c4:03:72:f8:2f:bf:a6:94:f7:23:f9:5d:
                    1d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:04:08:43:8B:79:8E:43:64:DA:0A:1A:72:2F:6E:42:C1:57:A0:DD
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323131333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         e3:bf:e7:e8:c6:26:47:24:37:08:fd:89:78:f1:55:01:f7:a8:
         cf:e6:f8:97:4d:a6:9c:16:fb:75:1e:73:98:69:e9:55:d3:9a:
         bf:99:c1:7d:ea:ff:85:c9:ed:20:53:f1:8e:7a:a1:68:11:67:
         b1:41:bf:90:9b:a4:99:7e:ab:51:3b:6b:66:30:2c:10:a0:ad:
         1d:1b:0d:a6:f9:92:14:8e:da:17:68:a4:f9:65:fe:68:47:ac:
         38:b8:6c:11:cf:6e:f0:b1:8c:22:ca:c5:2b:8d:d0:ac:c2:55:
         d8:fd:34:18:05:8e:6e:7c:19:6a:e1:38:9e:ae:58:16:07:a2:
         73:b2:27:75:2a:e7:00:32:fc:bf:f8:5a:f1:00:11:7a:f2:31:
         e9:74:12:28:84:a3:5c:79:00:cf:f4:e6:e7:ea:c9:44:b3:4e:
         1b:96:34:25:81:bc:a2:4b:85:31:74:bb:21:81:c4:98:bc:ae:
         53:60:64:81:12:97:55:c5:99:f3:7b:d8:25:68:96:6f:4d:c1:
         79:de:ba:4f:86:78:5b:3d:07:5a:2d:66:38:0a:50:c8:ac:28:
         3a:83:5c:65:98:c7:0f:78:5a:9f:bc:91:93:2e:4f:f5:81:32:
         0a:93:3b:fe:eb:5d:d3:b8:fa:e4:24:d6:90:6c:f1:4e:14:1f:
         ef:5b:e2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:14 2024 by rpki-client on console-fra.rpki-client.org