Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203534363831.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier:          ZZiPBYWwkFss9Z5gIIjmb6Yh+tkoDBY/FJM+m66uQE4=
Subject key identifier:   81:AE:82:B2:05:67:F0:C8:14:CD:63:A4:C2:DA:A0:33:F7:E0:D6:E5
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       58B9BECC416116D7E8CB29A62C79A48947DAE0C5
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203534363831.roa
Signing time:             Mon 26 Feb 2024 12:08:47 +0000
ROA not before:           Mon 26 Feb 2024 12:03:47 +0000
ROA not after:            Mon 24 Feb 2025 12:08:47 +0000
asID:                     54681
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 11:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b9:be:cc:41:61:16:d7:e8:cb:29:a6:2c:79:a4:89:47:da:e0:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:47 2024 GMT
            Not After : Feb 24 12:08:47 2025 GMT
        Subject: CN=81AE82B20567F0C814CD63A4C2DAA033F7E0D6E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:ce:d8:2e:60:63:ad:2c:6b:0f:2f:4e:1d:
                    89:cd:2d:2a:9e:fc:49:8e:6e:28:a8:fe:90:0d:ef:
                    6b:ed:d3:1f:63:44:92:9f:fa:d3:4b:f0:70:bb:6b:
                    5a:75:4e:33:17:a0:51:8e:0d:d1:e9:2b:e2:41:db:
                    cf:0d:2c:f3:18:01:43:33:7d:4a:ed:bb:8e:de:82:
                    f5:39:ae:26:60:ae:c7:2f:98:7d:c1:32:3e:65:6d:
                    b2:0a:f9:7d:dd:f7:6f:79:75:03:b5:23:be:ab:80:
                    02:b7:c1:0e:b0:ed:4a:aa:c5:1f:12:b9:bd:02:d4:
                    c3:4a:17:56:17:dd:f9:2f:85:9a:b6:e1:79:ae:96:
                    60:82:4d:3d:83:11:98:ad:d5:c8:60:8b:7e:6a:76:
                    21:b9:28:d9:e2:f5:96:be:2c:ce:d1:ab:b0:5d:9c:
                    67:a2:d9:96:70:77:a6:e9:60:71:94:be:5b:a6:19:
                    0a:b2:39:a1:71:c6:90:dc:50:bd:eb:28:d5:40:76:
                    9f:46:99:f1:26:2a:87:a3:6d:72:52:3f:01:2d:a8:
                    b8:ca:39:2e:21:84:b7:d7:2d:53:31:1c:25:9e:7e:
                    0a:b7:d6:3c:51:d8:e5:49:96:70:cd:03:07:4d:9d:
                    a4:cd:d8:3c:1c:5f:d6:cd:bd:b0:9d:4a:aa:f7:70:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AE:82:B2:05:67:F0:C8:14:CD:63:A4:C2:DA:A0:33:F7:E0:D6:E5
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203534363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:09:46:08:3a:6d:94:37:25:18:59:12:4d:8c:6d:32:b0:44:
         0f:8a:47:cf:b9:2f:c2:87:50:00:cb:ba:db:b5:03:b1:8c:d0:
         a2:2c:b5:06:14:5e:8b:2e:0e:be:57:de:2f:46:c6:70:7b:b3:
         10:bf:f9:c6:0e:c3:73:b3:04:f6:83:a5:8d:fd:78:f1:61:0b:
         60:d0:c4:c6:78:da:30:dd:78:be:44:65:08:35:7b:e1:9c:22:
         e9:31:fd:ff:a2:d2:94:e0:11:d8:9c:fa:01:d2:f4:72:41:5c:
         75:43:b5:2b:87:5f:7a:52:d6:be:1a:55:6c:d5:32:d5:d8:56:
         cc:53:69:c2:8b:ab:33:a2:75:6d:9d:2c:d1:ef:84:d7:54:48:
         61:9c:38:5b:d9:36:3a:af:db:eb:c1:3f:ec:fc:af:59:50:58:
         5d:d8:5c:42:da:7f:71:a6:09:58:fa:f6:e2:a8:5b:5e:61:a6:
         68:3e:d6:8b:29:63:c7:98:11:22:e5:81:b3:51:16:7d:c2:e6:
         a9:e7:78:54:13:05:ad:db:ad:f6:bd:4a:b1:c2:bd:93:58:77:
         fe:7e:da:83:f6:0f:cc:e7:40:2d:33:fe:91:2d:d5:ed:b7:00:
         d4:55:71:b7:d7:25:b5:8f:a1:eb:0c:b5:bb:21:01:47:d2:4b:
         ac:77:00:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:14 2024 by rpki-client on console-fra.rpki-client.org