Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203537383730.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e203537383730.roa (raw, json)
Hash identifier:          HXv63WOMrrfcIzGDdBocCn/6TSK/K/9SaYFWf8AZgrY=
Subject key identifier:   3E:4D:85:AE:8F:C6:A6:40:11:55:F7:5D:19:F6:7D:F0:4A:A2:4E:50
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       0B2938CD410D269E53062816C009D38C649CBA03
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203537383730.roa
Signing time:             Mon 26 Feb 2024 12:08:48 +0000
ROA not before:           Mon 26 Feb 2024 12:03:48 +0000
ROA not after:            Mon 24 Feb 2025 12:08:48 +0000
asID:                     57870
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 11:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:29:38:cd:41:0d:26:9e:53:06:28:16:c0:09:d3:8c:64:9c:ba:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:48 2024 GMT
            Not After : Feb 24 12:08:48 2025 GMT
        Subject: CN=3E4D85AE8FC6A6401155F75D19F67DF04AA24E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:d9:a8:13:79:36:3b:33:70:02:f6:a7:41:
                    e9:fa:96:37:10:90:4c:10:7e:92:cd:e9:52:73:03:
                    f5:2d:9e:3c:e3:47:f3:08:0e:c3:f5:0e:f1:8d:ca:
                    3a:28:fe:2c:e0:4e:7b:70:8c:ae:88:65:1f:1a:db:
                    50:de:2e:91:08:85:e7:b6:2e:c2:4e:3d:b9:b3:0a:
                    69:37:96:2b:87:8b:fa:86:44:82:5c:fd:49:1c:49:
                    00:63:8b:f0:a9:fa:1e:0c:14:2a:1f:50:67:8b:be:
                    1f:a4:ad:70:f1:91:4a:60:1f:a6:b1:9f:52:82:d9:
                    8c:a3:d0:25:2e:1e:f4:7b:d3:bd:be:0d:43:db:6c:
                    47:b0:31:01:fb:af:fa:14:96:5e:d2:b7:67:7f:b2:
                    3f:b0:ac:20:26:c9:c6:ff:c9:3e:44:9c:02:74:a8:
                    94:b7:64:f1:7d:81:52:50:14:9d:5b:7c:8b:f1:17:
                    72:42:62:39:ec:d1:06:1a:0b:0b:b5:4a:df:5d:8b:
                    29:5a:fe:4b:c9:43:cb:a9:dd:3f:4d:9a:82:72:bb:
                    bb:a6:4c:0b:9a:e5:c1:ce:d3:3b:15:60:20:39:df:
                    25:d3:58:b1:1f:e1:77:64:2b:ff:e4:fe:57:06:c8:
                    a2:f2:7c:1c:6a:cb:10:72:0d:24:24:ef:29:38:cf:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4D:85:AE:8F:C6:A6:40:11:55:F7:5D:19:F6:7D:F0:4A:A2:4E:50
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:06:36:3d:8b:05:76:02:5b:3a:00:e8:ee:79:de:bc:75:bf:
         b6:24:fc:45:0a:ff:1b:02:75:ce:9e:39:33:4e:bf:f0:a3:8c:
         a9:98:9a:80:69:e5:96:c4:ab:e7:bf:de:d9:5b:88:6d:b7:d1:
         c7:48:f8:2b:5b:c0:7a:d1:a2:29:82:99:a8:c1:09:1a:4c:9f:
         7d:34:44:86:c1:33:f3:4a:7b:f2:3d:a2:f9:79:dc:ae:59:97:
         e5:0f:4f:b7:b4:e9:f4:32:6d:60:f4:bb:a9:76:b0:1c:03:c4:
         13:81:3d:b3:a3:be:74:08:86:f4:fd:55:26:95:fe:f3:f5:dc:
         db:8d:e5:bc:ea:89:09:fb:f2:4a:3a:91:71:1f:b2:1a:ae:92:
         69:53:3e:0a:6e:4a:2b:04:be:3a:4c:af:92:ee:a4:88:1d:08:
         f8:85:2c:51:f1:93:3f:36:3f:d0:5a:2a:aa:0a:ab:96:1b:a9:
         4b:0a:12:4f:c9:a8:4b:14:f3:24:6b:3d:86:74:32:29:d7:9b:
         69:39:f5:6d:7c:12:8c:30:c3:ef:5c:e1:0a:f0:83:f0:c1:b3:
         72:66:94:02:03:c8:3a:71:ea:7d:69:8e:be:7b:e1:ca:bd:25:
         f1:39:0f:f8:3b:20:32:ab:4a:8c:ea:cd:92:3e:f1:12:7c:cf:
         c0:e5:12:f5
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUCyk4zUENJp5TBigWwAnTjGScugMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzI0MTM5ZWYyYjEyYjgzMDA5Nzk3YjhkNmMwYjQzMDY1
MDdiZDdkNjM4Y2U5NDE4MDUwHhcNMjQwMjI2MTIwMzQ4WhcNMjUwMjI0MTIwODQ4
WjAzMTEwLwYDVQQDEygzRTREODVBRThGQzZBNjQwMTE1NUY3NUQxOUY2N0RGMDRB
QTI0RTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiTZqBN5Njsz
cAL2p0Hp+pY3EJBMEH6SzelScwP1LZ4840fzCA7D9Q7xjco6KP4s4E57cIyuiGUf
GttQ3i6RCIXnti7CTj25swppN5Yrh4v6hkSCXP1JHEkAY4vwqfoeDBQqH1Bni74f
pK1w8ZFKYB+msZ9SgtmMo9AlLh70e9O9vg1D22xHsDEB+6/6FJZe0rdnf7I/sKwg
JsnG/8k+RJwCdKiUt2TxfYFSUBSdW3yL8RdyQmI57NEGGgsLtUrfXYspWv5LyUPL
qd0/TZqCcru7pkwLmuXBztM7FWAgOd8l01ixH+F3ZCv/5P5XBsii8nwcassQcg0k
JO8pOM+1MQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFD5Nha6PxqZAEVX3XRn2ffBK
ok5QMB8GA1UdIwQYMBaAFNDmx2ut7KXL2pLJGLl8f0WZ77bPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MGM5ZmVlYzEyNDllLzEv
RDBFNkM3NkJBREVDQTVDQkRBOTJDOTE4Qjk3QzdGNDU5OUVGQjZDRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2JjOTQyZjY4LWNiMzMtNGEwNS1hNzI3LTNmOTNlNjEwMzkzZS83MjQx
MzllZjJiMTJiODMwMDk3OTdiOGQ2YzBiNDMwNjUwN2JkN2Q2MzhjZTk0MTgwNS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBj
OWZlZWMxMjQ5ZS8xLzMyMzYzMDMyM2E2NjYxMzk2MjNhNjMzMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM1MzczODM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvqbAMAwDQYJKoZI
hvcNAQELBQADggEBAA4GNj2LBXYCWzoA6O553rx1v7Yk/EUK/xsCdc6eOTNOv/Cj
jKmYmoBp5ZbEq+e/3tlbiG230cdI+CtbwHrRoimCmajBCRpMn300RIbBM/NKe/I9
ovl53K5Zl+UPT7e06fQybWD0u6l2sBwDxBOBPbOjvnQIhvT9VSaV/vP13NuN5bzq
iQn78ko6kXEfshqukmlTPgpuSisEvjpMr5LupIgdCPiFLFHxkz82P9BaKqoKq5Yb
qUsKEk/JqEsU8yRrPYZ0MinXm2k59W18Eowww+9c4Qrwg/DBs3JmlAIDyDpx6n1p
jr574cq9JfE5D/g7IDKrSozqzZI+8RJ8z8DlEvU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:56 2024 by rpki-client on console-ams.rpki-client.org