Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203530373535.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e203530373535.roa (raw, json)
Hash identifier:          7ucJGnTAUDcFjJNCgJL2TpfKtdjhY6xUkPc9FSM9VOk=
Subject key identifier:   A9:BD:1F:EE:02:AF:C0:68:92:FE:CC:2E:CB:47:D1:2A:95:5D:DE:89
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       77FDB30616B7FD2C3B13680EC66EB8DD831E20C3
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203530373535.roa
Signing time:             Mon 26 Feb 2024 12:08:48 +0000
ROA not before:           Mon 26 Feb 2024 12:03:48 +0000
ROA not after:            Mon 24 Feb 2025 12:08:48 +0000
asID:                     50755
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 11:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fd:b3:06:16:b7:fd:2c:3b:13:68:0e:c6:6e:b8:dd:83:1e:20:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:48 2024 GMT
            Not After : Feb 24 12:08:48 2025 GMT
        Subject: CN=A9BD1FEE02AFC06892FECC2ECB47D12A955DDE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f8:0a:fb:90:28:0e:01:f1:d0:dd:73:88:c8:
                    44:21:48:13:6d:3b:41:4c:94:a5:3d:10:dd:e4:e3:
                    9e:e5:36:ae:21:b1:17:5e:87:b1:f6:7b:ec:80:99:
                    f0:89:a6:99:3d:1b:68:2a:c2:c1:aa:6e:2d:24:c5:
                    15:fa:98:d3:85:5b:d9:62:27:67:89:82:3f:bf:82:
                    8c:02:1c:a4:cb:76:3a:a0:ee:74:22:c7:49:c2:0a:
                    d3:e2:b5:c2:fb:fc:2e:8c:c7:f7:92:6b:5b:92:4a:
                    4b:e4:14:9b:54:71:de:56:f8:de:eb:f7:f0:32:fa:
                    02:f0:ee:3c:27:d6:99:68:70:41:59:b6:ed:e5:b6:
                    3b:31:c5:6d:b9:1e:f9:7b:d0:4d:99:15:f2:b2:e0:
                    81:84:a4:db:70:4d:cd:64:57:94:c0:8e:e5:2f:61:
                    59:d3:af:71:6a:49:04:c2:35:55:83:0d:73:91:03:
                    96:0c:79:e9:75:da:4d:e7:ab:db:42:18:a6:2e:a9:
                    fd:5d:5d:75:ae:45:3a:71:b4:c3:5a:ce:57:9e:ce:
                    af:f4:43:ea:22:2d:d2:e1:b2:f9:79:24:ba:55:b1:
                    8f:4b:71:2e:ae:4c:6e:85:79:83:ac:82:9d:7b:eb:
                    9a:5e:06:37:84:15:cd:0a:b1:d7:77:d2:5b:15:20:
                    83:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BD:1F:EE:02:AF:C0:68:92:FE:CC:2E:CB:47:D1:2A:95:5D:DE:89
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203530373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:16:b5:2e:cb:81:db:1c:4a:b4:5d:7e:f7:a2:91:c1:43:54:
         6b:ad:b9:45:bc:64:a2:09:71:35:ce:b8:0c:92:bc:1e:db:06:
         13:da:f8:57:c1:08:ad:43:0b:33:83:a6:d8:93:a8:cb:7d:98:
         f6:8a:a6:b7:ab:7b:18:26:10:ed:eb:da:26:f1:ed:04:df:5f:
         26:0d:26:a1:f9:c7:ba:3d:f7:07:af:ce:1e:f1:c6:68:20:ae:
         c2:53:e5:60:7f:6d:fb:10:ea:36:51:42:e4:65:f7:4a:01:75:
         e4:50:c7:21:5f:da:4e:65:27:25:99:06:e4:01:0b:28:5f:a8:
         e9:0d:e5:09:c4:26:be:b5:b6:eb:2d:26:ee:81:63:63:51:49:
         e2:9a:48:5d:e0:2a:49:26:ea:91:70:cc:67:44:26:7c:38:c5:
         c6:ff:9d:9c:3f:37:72:d9:c3:51:53:bd:c6:3a:57:d7:bb:a1:
         b2:a4:83:17:31:d3:97:fd:18:ba:66:b5:35:56:a4:e8:ff:de:
         7e:96:03:e5:18:dd:62:a5:bf:cd:16:62:62:d7:b2:d0:d6:81:
         2a:ae:36:af:21:2b:0d:d1:21:6f:75:9b:a4:fd:24:5e:b3:eb:
         64:94:9e:a7:0e:04:7a:a4:ff:26:7b:55:9e:0a:a2:1f:9b:9e:
         0b:1e:eb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:56 2024 by rpki-client on console-ams.rpki-client.org