Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203630373433.roa
File:                     323630323a666139623a63303a3a2f34382d3438203d3e203630373433.roa (raw, json)
Hash identifier:          B6IHvW6DqXkC8S3t7ffXt4xrpPY8SDosnk1mJeN6En0=
Subject key identifier:   E7:E2:B0:45:8A:97:32:DE:93:7F:FF:CD:E5:7D:F3:F6:E9:6B:E5:1C
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       5708FD5D2218D5B17EE9ED2F7F59B41D74ADC162
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203630373433.roa
Signing time:             Mon 26 Feb 2024 12:08:47 +0000
ROA not before:           Mon 26 Feb 2024 12:03:47 +0000
ROA not after:            Mon 24 Feb 2025 12:08:47 +0000
asID:                     60743
IP address blocks:        2602:fa9b:c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 11:53:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:08:fd:5d:22:18:d5:b1:7e:e9:ed:2f:7f:59:b4:1d:74:ad:c1:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Feb 26 12:03:47 2024 GMT
            Not After : Feb 24 12:08:47 2025 GMT
        Subject: CN=E7E2B0458A9732DE937FFFCDE57DF3F6E96BE51C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3f:bf:f1:86:25:49:4f:d4:87:19:d9:45:2e:
                    c2:6e:2d:78:88:c3:4c:92:7b:d4:66:2f:c9:52:f9:
                    52:07:22:a3:42:e5:bd:3f:a5:b1:89:0f:6e:93:5d:
                    a3:d7:db:dd:07:38:7d:3d:d9:ba:ea:7a:6a:d8:cb:
                    e2:f4:0f:63:d3:46:e5:a8:38:f1:12:77:a9:c2:0d:
                    d2:2f:db:2e:2d:9e:3d:3e:a5:b5:34:f9:52:10:c0:
                    c4:56:72:6d:d2:de:ce:e7:40:d6:a6:c1:cc:f8:21:
                    3e:01:2a:e8:e6:db:83:d0:0d:ab:1a:fa:fb:8d:f5:
                    90:0d:76:b3:59:20:82:27:c0:ba:a0:71:d2:12:60:
                    9a:71:0f:d2:ca:e3:5b:66:5d:4a:b9:b4:7c:f8:f4:
                    66:bc:ef:87:7a:ac:15:fb:8e:19:4c:d5:8e:3a:d6:
                    fd:e1:b9:65:40:e8:b2:2c:2e:3a:e8:65:5a:e4:4e:
                    32:15:8a:ec:ff:b1:e6:19:6f:1c:53:65:6f:0d:6e:
                    8f:73:b5:66:2d:07:0e:a8:27:bb:a3:50:db:91:28:
                    d5:d8:eb:1a:87:cf:bd:ec:66:74:f5:57:22:76:3c:
                    cd:5d:70:35:fc:bd:c3:a5:59:07:9b:c7:e0:43:b7:
                    01:92:d1:fb:b3:e2:a6:ce:53:10:dc:49:f6:f5:98:
                    c4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E2:B0:45:8A:97:32:DE:93:7F:FF:CD:E5:7D:F3:F6:E9:6B:E5:1C
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/323630323a666139623a63303a3a2f34382d3438203d3e203630373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa9b:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:48:5c:34:64:f8:de:14:fa:e8:e7:30:46:f5:42:64:c0:85:
         9a:d8:be:2b:6f:90:a1:03:c2:ce:b1:c3:d0:c6:32:57:45:2f:
         09:0c:d5:75:87:3d:c4:28:c8:8a:61:4e:95:dd:ed:01:a2:43:
         e1:2b:d2:a8:62:e7:96:98:94:1a:cd:32:27:0a:77:55:8c:e1:
         d8:87:e9:0e:b6:b7:5b:cb:a8:19:48:06:c9:50:11:8d:41:b8:
         aa:f5:c5:6e:ab:2b:98:d7:ca:1b:50:ab:24:e7:26:72:91:aa:
         02:3a:00:8f:14:bf:bc:7c:45:06:6a:bc:0e:ac:93:6f:cf:b4:
         7d:db:2d:1e:e3:08:9f:1d:22:19:9b:b2:d5:eb:ce:b6:4e:25:
         32:84:72:00:91:88:b5:d5:34:de:c3:15:40:f9:9c:0e:01:b2:
         f0:35:7e:87:83:53:c0:a7:e4:d5:b4:7d:85:fd:8e:f2:1d:9f:
         e0:6b:18:6c:58:64:34:01:22:01:28:80:47:97:55:c4:9a:40:
         f7:26:03:b3:02:cb:ae:1b:4f:2d:ff:be:14:d4:16:61:22:f0:
         ea:6f:f8:30:bc:bb:24:b7:ba:51:c2:9c:44:86:f0:71:d5:26:
         eb:d7:33:d2:74:23:51:3a:4f:9c:c8:fc:b4:80:66:77:5d:bc:
         6d:4f:27:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:14 2024 by rpki-client on console-fra.rpki-client.org