Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203534363831.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e203534363831.roa (raw, json)
Hash identifier:          Zf6bVJw4ZQUXxL8xvEesoODXaVSQITGBv0Iy3t4S16c=
Subject key identifier:   85:6D:4C:01:46:F0:32:93:7B:25:89:42:E8:1C:69:8C:C7:B0:AA:FC
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       5550A1BE8B57413A03451EC4B864FF00820F60E1
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203534363831.roa
Signing time:             Mon 27 Jan 2025 12:14:11 +0000
ROA not before:           Mon 27 Jan 2025 12:09:11 +0000
ROA not after:            Mon 26 Jan 2026 12:14:11 +0000
asID:                     54681
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 00:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:50:a1:be:8b:57:41:3a:03:45:1e:c4:b8:64:ff:00:82:0f:60:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Jan 27 12:09:11 2025 GMT
            Not After : Jan 26 12:14:11 2026 GMT
        Subject: CN=856D4C0146F032937B258942E81C698CC7B0AAFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1a:61:bf:bf:08:6d:96:88:cd:11:3f:1d:93:
                    e9:28:94:59:8b:69:2f:53:60:9e:3a:e6:11:96:06:
                    27:1b:ea:63:3a:b0:70:02:50:db:2e:76:1c:86:6d:
                    a2:38:41:b5:25:8b:dd:65:1d:93:a1:5d:95:a4:9a:
                    98:13:22:17:14:81:8c:78:b3:49:04:a3:d1:80:0b:
                    f2:f1:1d:c6:4f:f1:2b:e9:de:f6:6d:ea:ff:3a:1c:
                    9f:c3:a6:5d:ef:7a:6a:77:64:8d:40:22:3b:75:ad:
                    b1:57:de:da:a2:49:a2:b6:2d:d2:5b:36:a8:12:2d:
                    98:8b:1b:1e:08:67:04:8c:ea:76:44:78:e5:a1:6a:
                    04:4c:25:43:35:e0:41:f8:c3:d7:6f:80:21:18:65:
                    8e:3c:e8:fb:c4:a5:3c:8c:78:f6:5c:78:31:d3:c1:
                    89:b4:93:12:3a:05:bc:65:d3:54:78:3d:9e:74:79:
                    d3:52:79:0f:21:70:fa:34:48:17:43:fe:94:0b:8d:
                    6c:ea:4f:c5:f9:ee:8b:c5:05:f3:fa:9c:15:c7:a6:
                    e4:54:32:32:7e:8e:2d:42:e3:43:36:f4:43:2e:52:
                    84:cf:20:a6:91:d0:70:78:8a:7b:fd:fb:46:ea:2b:
                    16:e0:06:b5:e8:cd:0e:f3:f5:a9:9d:f3:1d:81:7c:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6D:4C:01:46:F0:32:93:7B:25:89:42:E8:1C:69:8C:C7:B0:AA:FC
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203534363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         e7:80:b7:44:67:90:e4:52:08:f3:95:db:e1:4b:dc:48:43:af:
         a3:83:01:5e:be:e0:a4:83:32:46:2e:23:4d:1c:e4:69:51:ce:
         54:a3:c7:db:c6:59:f3:a8:cc:0a:ed:86:42:1e:4b:f5:1b:61:
         4a:59:f9:06:48:0b:98:80:25:3a:ad:92:f5:2f:d8:ec:4b:02:
         b9:8f:79:e8:19:ce:7b:ce:f7:c5:50:28:6f:90:e5:c6:e1:cc:
         cd:99:f8:bc:35:bd:eb:5e:42:2c:68:fc:83:a9:2d:c1:c9:7b:
         9b:f3:1f:21:66:b2:b0:83:ea:11:bd:e5:fb:bf:cf:67:76:36:
         50:ad:73:e2:36:b2:9f:84:d8:d7:70:cc:2c:4d:6f:19:44:40:
         71:67:1a:4a:80:89:c3:51:b5:4c:72:b4:4f:88:fb:3b:d9:26:
         ad:0c:1c:1e:7f:22:ed:c7:f4:8f:10:e7:38:8c:e9:34:2a:e9:
         a5:c6:04:2f:8d:5a:24:ec:f5:05:84:6c:55:9d:af:25:ff:e3:
         9f:17:1f:37:cb:d6:2d:d6:7c:89:20:0d:08:58:5e:57:7e:2f:
         aa:a2:77:e7:88:d1:cf:dc:46:7a:eb:09:2b:5b:79:a5:dc:5d:
         db:57:05:48:44:c5:1f:b9:59:f0:da:aa:09:93:bb:9f:f1:fe:
         7a:f3:4e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:16:11 2025 by rpki-client