Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323133313633.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e20323133313633.roa (raw, json)
Hash identifier:          ff0OYnJnbvKGWkxc/6Za4kKcrJ/3UudKUaQ59jbceng=
Subject key identifier:   85:B7:F5:AD:39:FC:B7:E9:04:72:D7:A1:D9:96:94:0F:49:69:D7:23
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       71232035CA8C42DCD3768AA0A22E6E32F203789A
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323133313633.roa
Signing time:             Mon 26 Feb 2024 12:08:48 +0000
ROA not before:           Mon 26 Feb 2024 12:03:48 +0000
ROA not after:            Mon 24 Feb 2025 12:08:48 +0000
asID:                     213163
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 06:54:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:23:20:35:ca:8c:42:dc:d3:76:8a:a0:a2:2e:6e:32:f2:03:78:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:48 2024 GMT
            Not After : Feb 24 12:08:48 2025 GMT
        Subject: CN=85B7F5AD39FCB7E90472D7A1D996940F4969D723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:c5:93:f7:c5:22:08:35:de:29:88:8c:f6:
                    cf:4a:0e:9e:88:ca:cb:05:2c:73:4e:e6:ba:52:a8:
                    d2:7c:fc:20:f2:1c:40:cc:5e:99:f3:ce:59:38:3a:
                    8f:1e:37:9c:b1:e4:35:0d:30:cd:07:c3:2d:62:f5:
                    f7:8d:c6:9d:b0:5b:ec:ce:1a:6a:e7:90:87:1d:12:
                    78:0b:6d:ef:7e:54:1a:77:58:65:70:11:fe:2d:63:
                    57:2a:71:07:01:63:c4:56:6d:4d:ee:13:2f:8a:3f:
                    38:2c:6f:bc:c4:3e:dd:ed:09:b5:0f:dc:97:80:e7:
                    75:73:9b:40:54:bf:cc:5a:a2:89:d3:78:16:4f:8b:
                    14:86:1a:3a:6a:c0:16:71:a9:42:01:0a:5b:c9:27:
                    4b:cd:3e:d7:d9:e8:f6:3e:0f:0e:61:dc:b1:c9:d1:
                    85:5e:2a:da:f3:ca:0d:f5:b9:78:08:d0:ff:07:8a:
                    bd:ee:f8:7f:8a:04:b5:36:3c:13:c6:11:2f:0f:c3:
                    8e:69:39:f5:ed:2a:4f:aa:a2:9f:da:08:49:f7:4d:
                    da:dd:5d:da:06:17:3f:f4:41:da:58:16:19:06:ba:
                    57:4e:07:36:3c:f9:31:cd:ab:32:85:c0:93:71:37:
                    09:1f:6d:12:13:7b:01:eb:b9:7e:23:d4:27:f7:f3:
                    d4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B7:F5:AD:39:FC:B7:E9:04:72:D7:A1:D9:96:94:0F:49:69:D7:23
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e20323133313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:04:fb:66:12:90:f6:0b:bd:bc:1c:3b:8a:2f:14:33:40:c4:
         ed:bb:19:94:76:17:e3:e9:37:34:15:0b:33:10:60:ed:a6:6e:
         dd:70:1e:13:d9:3a:43:75:91:73:71:2a:43:45:fe:0f:8d:47:
         2d:0d:c6:83:cb:96:83:53:d5:b9:4e:8f:fb:e9:50:11:80:16:
         a4:28:98:1f:0f:75:ec:e9:79:fe:07:23:c8:df:81:4f:a3:19:
         42:63:cc:24:1b:19:f9:8a:53:b8:fd:a0:1b:bb:97:70:e1:32:
         cb:93:fa:62:1b:bb:b9:12:55:e9:aa:d3:66:53:10:56:08:d0:
         14:d8:ac:18:2f:9c:68:a9:aa:36:28:ba:c3:e5:0b:20:5e:3c:
         7c:58:a8:db:23:31:9a:c5:1f:7f:9e:ca:15:3d:b5:e5:5d:6e:
         ff:79:d7:bb:7e:e8:53:14:12:6f:6a:14:72:27:74:18:be:88:
         c6:a8:9f:ca:74:d7:f6:86:8e:15:81:66:3d:5d:41:10:f2:a9:
         a2:05:26:17:69:5e:07:76:9e:c3:7d:26:44:d2:d2:aa:f6:8b:
         6a:a8:99:10:45:84:11:fc:f3:49:1a:14:a2:41:65:0b:93:8f:
         86:b6:a9:b8:6c:66:28:c6:80:4a:5d:0b:e0:71:c3:70:73:6a:
         85:70:c4:1c
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUcSMgNcqMQtzTdoqgoi5uMvIDeJowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzI0MTM5ZWYyYjEyYjgzMDA5Nzk3YjhkNmMwYjQzMDY1
MDdiZDdkNjM4Y2U5NDE4MDUwHhcNMjQwMjI2MTIwMzQ4WhcNMjUwMjI0MTIwODQ4
WjAzMTEwLwYDVQQDEyg4NUI3RjVBRDM5RkNCN0U5MDQ3MkQ3QTFEOTk2OTQwRjQ5
NjlENzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynvFk/fFIgg1
3imIjPbPSg6eiMrLBSxzTua6UqjSfPwg8hxAzF6Z885ZODqPHjecseQ1DTDNB8Mt
YvX3jcadsFvszhpq55CHHRJ4C23vflQad1hlcBH+LWNXKnEHAWPEVm1N7hMvij84
LG+8xD7d7Qm1D9yXgOd1c5tAVL/MWqKJ03gWT4sUhho6asAWcalCAQpbySdLzT7X
2ej2Pg8OYdyxydGFXira88oN9bl4CND/B4q97vh/igS1NjwTxhEvD8OOaTn17SpP
qqKf2ghJ903a3V3aBhc/9EHaWBYZBrpXTgc2PPkxzasyhcCTcTcJH20SE3sB67l+
I9Qn9/PUwwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFIW39a05/LfpBHLXodmWlA9J
adcjMB8GA1UdIwQYMBaAFNDmx2ut7KXL2pLJGLl8f0WZ77bPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MGM5ZmVlYzEyNDllLzEv
RDBFNkM3NkJBREVDQTVDQkRBOTJDOTE4Qjk3QzdGNDU5OUVGQjZDRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2JjOTQyZjY4LWNiMzMtNGEwNS1hNzI3LTNmOTNlNjEwMzkzZS83MjQx
MzllZjJiMTJiODMwMDk3OTdiOGQ2YzBiNDMwNjUwN2JkN2Q2MzhjZTk0MTgwNS5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBj
OWZlZWMxMjQ5ZS8xLzMyMzYzMDMyM2E2NjYxMzk2MjNhNjMzMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMyMzEzMzMxMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+psAwDANBgkq
hkiG9w0BAQsFAAOCAQEAvAT7ZhKQ9gu9vBw7ii8UM0DE7bsZlHYX4+k3NBULMxBg
7aZu3XAeE9k6Q3WRc3EqQ0X+D41HLQ3Gg8uWg1PVuU6P++lQEYAWpCiYHw917Ol5
/gcjyN+BT6MZQmPMJBsZ+YpTuP2gG7uXcOEyy5P6Yhu7uRJV6arTZlMQVgjQFNis
GC+caKmqNii6w+ULIF48fFio2yMxmsUff57KFT215V1u/3nXu37oUxQSb2oUcid0
GL6IxqifynTX9oaOFYFmPV1BEPKpogUmF2leB3aew30mRNLSqvaLaqiZEEWEEfzz
SRoUokFlC5OPhrapuGxmKMaASl0L4HHDcHNqhXDEHA==
-----END CERTIFICATE-----
Generated at Thu May 2 08:02:20 2024 by rpki-client on console-ams.rpki-client.org