Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203539393933.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e203539393933.roa (raw, json)
Hash identifier:          IRQhoi7I48HSYViiyjZzT+nBfe4bbOPI8VHORXwPbP4=
Subject key identifier:   1D:8E:55:FF:8E:62:EA:A1:7C:71:F8:C4:E2:18:D9:0A:75:90:99:17
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       7128D652FE061DC42E2669EFE29761E5B072DB10
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203539393933.roa
Signing time:             Mon 26 Feb 2024 12:08:48 +0000
ROA not before:           Mon 26 Feb 2024 12:03:48 +0000
ROA not after:            Mon 24 Feb 2025 12:08:48 +0000
asID:                     59993
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 11:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:28:d6:52:fe:06:1d:c4:2e:26:69:ef:e2:97:61:e5:b0:72:db:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:48 2024 GMT
            Not After : Feb 24 12:08:48 2025 GMT
        Subject: CN=1D8E55FF8E62EAA17C71F8C4E218D90A75909917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:b0:6b:0b:8e:2c:44:6d:52:b4:19:56:62:
                    27:5e:0d:29:7e:f0:b7:00:f5:38:34:fd:8a:95:ff:
                    d0:d7:e6:21:5c:4c:85:f5:41:3a:83:b5:d0:38:02:
                    5a:b7:34:89:af:98:16:ba:4f:5b:74:18:9e:b8:c1:
                    28:0d:30:01:8a:ac:2e:68:98:1f:06:56:f6:08:0d:
                    ab:5f:8b:d4:f6:c1:a3:f4:ae:ac:d7:e9:f6:ab:aa:
                    eb:d9:2b:21:86:51:a4:5d:6b:f2:b0:05:41:7c:23:
                    a3:92:36:4a:b5:3c:4a:95:99:45:96:0b:8a:bd:af:
                    32:16:13:82:b7:e2:24:8d:a5:57:d7:1d:e0:5e:93:
                    32:59:55:da:33:b2:94:39:44:6b:9d:a3:0b:34:f7:
                    22:0e:65:27:2a:1b:9c:16:33:cd:6d:45:95:4d:04:
                    59:37:2b:cd:27:7f:eb:95:7a:02:ae:a4:12:28:dc:
                    b5:2f:74:28:97:61:7a:d4:58:8b:d7:a4:ba:98:d6:
                    8e:d5:65:a1:7e:85:09:24:7e:0a:92:39:b7:8c:70:
                    40:b6:34:22:2a:64:fb:d9:ec:95:11:da:fb:c3:a8:
                    99:34:95:f0:de:22:1b:e4:4b:9c:0c:3f:49:5a:11:
                    4b:6f:9e:36:67:86:c7:93:76:3d:e3:50:58:62:f6:
                    64:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8E:55:FF:8E:62:EA:A1:7C:71:F8:C4:E2:18:D9:0A:75:90:99:17
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203539393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:83:22:92:29:c1:54:0d:7f:65:08:05:22:f5:11:39:a9:63:
         6d:ce:d3:9f:e0:45:d7:2a:5e:cd:6e:6f:cc:e8:3b:de:02:6c:
         f0:a8:d5:7b:32:a3:40:45:34:f0:21:42:70:7d:16:0b:6b:dd:
         e8:c4:b2:b1:94:0f:93:85:93:e6:38:8a:29:2d:2f:33:ea:24:
         5e:55:f4:77:e3:6b:7b:0d:a4:5f:bf:7e:95:86:3a:43:7a:fb:
         1e:cc:47:6c:f8:94:c6:ac:10:13:2f:51:09:63:41:13:2a:4e:
         b7:74:2e:1d:81:b5:b2:8b:65:70:db:93:7f:79:60:a6:9e:50:
         68:06:45:db:10:f8:a0:1d:53:ec:99:f1:25:64:1a:78:d8:f1:
         3d:a0:ce:89:92:a5:6e:c0:78:a1:e9:33:b0:ff:a6:3b:0f:f6:
         f2:3c:2f:1b:c5:08:16:62:8f:65:9c:21:48:1d:24:ac:59:9e:
         0c:c0:90:a5:68:56:9a:32:b2:58:c7:88:79:e9:4c:ec:5b:ec:
         5d:2a:42:6e:2b:a4:5a:82:49:63:87:4d:cb:02:6b:90:6a:0d:
         56:0d:b3:16:de:b9:01:84:56:86:6b:2b:93:f3:a2:59:9a:81:
         ff:8f:70:bb:ce:4b:30:85:5e:ad:84:1b:e1:a0:44:fa:65:bf:
         3d:22:61:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:14 2024 by rpki-client on console-fra.rpki-client.org