Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203539363738.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e203539363738.roa (raw, json)
Hash identifier:          j/e6U8u3AO7888lV00o9Jn4E3QOxOc0DZc1AZ70pMmI=
Subject key identifier:   2A:C8:D5:3F:86:8F:DA:6E:A1:D9:09:D2:6D:1C:49:AF:EC:7F:05:22
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       246998EB44228F523B28BFD66B30DD7096416066
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203539363738.roa
Signing time:             Mon 26 Feb 2024 12:08:48 +0000
ROA not before:           Mon 26 Feb 2024 12:03:48 +0000
ROA not after:            Mon 24 Feb 2025 12:08:48 +0000
asID:                     59678
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Jun 2024 21:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:69:98:eb:44:22:8f:52:3b:28:bf:d6:6b:30:dd:70:96:41:60:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:48 2024 GMT
            Not After : Feb 24 12:08:48 2025 GMT
        Subject: CN=2AC8D53F868FDA6EA1D909D26D1C49AFEC7F0522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:f2:92:4d:49:b1:19:81:b9:b7:47:e7:a1:
                    9a:89:40:44:d2:47:8b:c3:23:95:8a:cf:94:f4:96:
                    f4:22:fe:c3:2b:a2:ce:c9:5b:ef:a9:db:f8:56:1c:
                    06:81:21:17:25:09:5a:da:ff:41:25:7c:10:8a:cb:
                    37:2a:f1:ad:a9:f8:62:00:c5:a7:cc:d1:9f:e4:fd:
                    fc:ad:67:4d:ab:b7:60:4a:e1:25:f3:d1:3d:ad:62:
                    f8:73:d0:8f:b4:bb:21:1d:e1:bd:b8:b5:15:42:3f:
                    54:ee:cf:8f:1e:e4:e1:ff:82:8e:45:f2:50:e3:03:
                    79:99:2c:3a:6e:ee:16:96:91:00:bb:ed:74:67:de:
                    0c:13:c5:57:0c:14:ac:b3:fc:b7:d3:bb:27:92:49:
                    a7:13:90:57:56:8c:93:b2:5f:f8:13:84:00:02:3a:
                    c4:c6:9d:d5:7c:ec:6e:25:b3:c6:0f:04:26:79:76:
                    55:d2:a9:02:61:cd:6a:ee:c6:a9:d0:63:04:f1:b3:
                    3f:01:9a:ba:aa:db:47:91:3f:5a:72:79:f5:58:54:
                    56:ab:87:16:ae:4f:53:86:43:ba:af:0c:f0:44:64:
                    03:51:92:57:fa:26:89:8b:a8:4a:c8:9a:7f:2e:2e:
                    2d:f1:d9:6e:b0:6c:6b:0d:28:5e:30:de:a3:c4:6d:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C8:D5:3F:86:8F:DA:6E:A1:D9:09:D2:6D:1C:49:AF:EC:7F:05:22
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203539363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:79:b2:b9:84:95:14:5f:1e:f7:eb:0c:f0:99:9a:18:a1:3f:
         23:a2:c8:19:1b:ea:b8:a2:fb:c2:e6:fe:9b:3c:5a:18:7d:65:
         bf:41:35:a3:88:78:b3:59:c8:b3:e6:2b:04:7f:77:3e:35:26:
         a1:64:be:19:79:e8:74:cf:7d:f5:c8:0a:60:3e:a1:47:e8:06:
         f9:0c:4b:88:65:b1:d0:fb:0f:82:22:da:9f:e3:d5:07:e0:8f:
         bb:7d:a2:53:38:a8:44:a3:23:1b:32:5b:77:76:a2:4e:87:1c:
         a3:db:60:55:ad:81:06:00:a2:66:79:ec:a8:df:37:77:de:ac:
         2e:cc:db:fe:fb:3d:f9:a9:90:b0:a4:0e:b4:f0:69:b4:42:a8:
         87:91:a8:bd:a0:e0:d9:b3:d2:65:4b:40:76:85:7c:e9:fb:dd:
         98:c3:d9:11:44:58:15:b1:73:ba:8f:58:7d:fb:0f:f6:0d:ae:
         f1:af:8d:f0:5d:70:d6:45:58:6b:4c:b8:7d:cf:24:ca:2c:f5:
         79:2e:7f:80:12:72:67:56:33:e0:15:a6:de:11:07:e7:45:67:
         d4:62:c4:d3:3f:65:12:52:b9:81:58:89:c7:31:43:12:c2:78:
         88:52:0f:0e:6b:c7:2b:61:f0:f3:aa:fc:dd:c2:d2:ea:ce:52:
         06:43:b3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:12:55 2024 by rpki-client on console-fra.rpki-client.org