Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203236313935.roa
File:                     323630323a666134613a3a2f34302d3430203d3e203236313935.roa (raw, json)
Hash identifier:          PhrbKeOJi8ax0UFivnnhrCTX4GW6ENWa8GWgcrXmJI4=
Subject key identifier:   98:B1:5D:19:E5:66:1B:63:AD:55:8D:C7:26:4E:6C:AA:7F:22:AE:E5
Certificate issuer:       /CN=589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9
Certificate serial:       265E7D26EE7FCE84B3B2F1E07584A8E9B2203DA5
Authority key identifier: E4:5A:B0:95:6C:BB:0D:ED:33:89:02:52:EB:8E:19:AA:87:33:AD:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203236313935.roa
Signing time:             Wed 06 Mar 2024 07:13:02 +0000
ROA not before:           Wed 06 Mar 2024 07:08:02 +0000
ROA not after:            Wed 05 Mar 2025 07:13:02 +0000
asID:                     26195
IP address blocks:        2602:fa4a::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/E45AB0956CBB0DED33890252EB8E19AA8733AD89.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/E45AB0956CBB0DED33890252EB8E19AA8733AD89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 02:24:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5e:7d:26:ee:7f:ce:84:b3:b2:f1:e0:75:84:a8:e9:b2:20:3d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9
        Validity
            Not Before: Mar  6 07:08:02 2024 GMT
            Not After : Mar  5 07:13:02 2025 GMT
        Subject: CN=98B15D19E5661B63AD558DC7264E6CAA7F22AEE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0e:c0:dd:9a:4e:3e:a8:e3:b3:8b:70:49:4b:
                    34:a4:fa:a4:67:f8:30:42:fb:7a:39:de:55:06:b4:
                    c7:7e:0d:40:59:a1:fd:e4:f5:71:47:bf:09:b3:b4:
                    60:ce:7f:cf:3f:c6:e9:09:2b:3d:fc:76:3b:dc:cc:
                    0e:3e:ae:c6:89:d0:59:31:61:62:f8:64:e9:fa:94:
                    25:df:f3:63:f2:48:1c:9c:b1:33:a7:ea:97:2a:60:
                    d3:c0:1e:c3:a9:3b:dd:1e:c5:67:d7:d8:2d:1c:a9:
                    1f:b5:08:51:00:c3:c7:56:10:06:9c:4e:64:d2:f7:
                    ec:b4:1b:8f:b8:2e:3f:c0:5b:de:f8:75:e1:b6:cb:
                    46:0f:1d:d9:6f:40:6e:04:67:76:1b:b8:87:2e:66:
                    e7:51:68:e5:f4:7e:99:0e:e7:27:ee:fc:f6:3c:55:
                    a9:ef:3c:90:f3:35:23:5b:1a:49:52:1b:40:51:73:
                    ff:e4:51:7b:47:ac:db:2f:36:f9:e6:90:46:8f:59:
                    99:2d:a1:bf:4b:4a:07:55:98:f3:fd:1f:0b:2f:44:
                    80:bf:27:99:e2:46:d2:97:79:1a:5f:31:ca:9c:06:
                    ba:af:72:a1:c0:41:89:5f:40:7f:0c:ce:37:49:36:
                    31:44:ff:99:04:4e:1b:82:3e:ae:18:30:b4:1a:ee:
                    bd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B1:5D:19:E5:66:1B:63:AD:55:8D:C7:26:4E:6C:AA:7F:22:AE:E5
            X509v3 Authority Key Identifier:
                keyid:E4:5A:B0:95:6C:BB:0D:ED:33:89:02:52:EB:8E:19:AA:87:33:AD:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/E45AB0956CBB0DED33890252EB8E19AA8733AD89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a16997b4277977b09df9fd5c57dc3f7cfa7d2cba7c9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203236313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4a::/40

    Signature Algorithm: sha256WithRSAEncryption
         47:fe:e2:2d:ff:3e:e4:49:21:cb:41:aa:28:b6:3c:45:2a:cd:
         62:83:7b:5d:a6:bf:48:9d:d9:e7:f0:94:1f:da:88:b6:e0:e3:
         8f:4a:6d:ed:9b:31:bf:dc:ae:69:c9:8f:ac:0b:5f:ad:fb:8c:
         ff:30:82:d8:5a:7e:b2:e0:53:47:46:bc:c8:58:d2:82:c5:f9:
         8d:af:fb:5f:46:7d:3e:ab:fb:4c:22:f9:ec:bf:2c:fc:46:88:
         28:13:c8:0c:7e:66:f5:4f:9b:69:7c:fd:49:eb:78:34:09:cc:
         15:01:16:77:44:80:76:1a:09:14:10:a8:30:b4:1c:55:dd:a7:
         89:09:d4:1e:91:27:6d:27:5f:3a:b6:f9:06:9e:af:b9:0b:53:
         8e:01:e7:f1:5e:57:fe:34:f6:97:f2:d2:b2:78:57:5c:f6:55:
         ca:ec:30:6f:76:09:6b:32:b9:c6:b7:23:d6:78:ae:8f:35:c4:
         ab:18:31:40:e2:d7:da:8f:b8:34:71:a4:d9:d2:68:c4:48:ca:
         6f:70:ed:dc:7e:6f:49:52:67:9c:bc:27:b4:a7:90:cf:59:2f:
         76:4c:4b:93:a7:6d:89:cb:12:ec:d3:8d:fd:c2:39:20:5a:58:
         3e:4c:a6:54:7c:dd:95:31:80:ee:2f:74:e2:29:9a:29:97:16:
         4d:bb:14:fa
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUJl59Ju5/zoSzsvHgdYSo6bIgPaUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTg5Yjc5NGExNjk5N2I0Mjc3OTc3YjA5ZGY5ZmQ1YzU3
ZGMzZjdjZmE3ZDJjYmE3YzkwHhcNMjQwMzA2MDcwODAyWhcNMjUwMzA1MDcxMzAy
WjAzMTEwLwYDVQQDEyg5OEIxNUQxOUU1NjYxQjYzQUQ1NThEQzcyNjRFNkNBQTdG
MjJBRUU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q7A3ZpOPqjj
s4twSUs0pPqkZ/gwQvt6Od5VBrTHfg1AWaH95PVxR78Js7Rgzn/PP8bpCSs9/HY7
3MwOPq7GidBZMWFi+GTp+pQl3/Nj8kgcnLEzp+qXKmDTwB7DqTvdHsVn19gtHKkf
tQhRAMPHVhAGnE5k0vfstBuPuC4/wFve+HXhtstGDx3Zb0BuBGd2G7iHLmbnUWjl
9H6ZDucn7vz2PFWp7zyQ8zUjWxpJUhtAUXP/5FF7R6zbLzb55pBGj1mZLaG/S0oH
VZjz/R8LL0SAvyeZ4kbSl3kaXzHKnAa6r3KhwEGJX0B/DM43STYxRP+ZBE4bgj6u
GDC0Gu69iQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFJixXRnlZhtjrVWNxyZObKp/
Iq7lMB8GA1UdIwQYMBaAFORasJVsuw3tM4kCUuuOGaqHM62JMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODlkMDk1YWUwMTg5ZDMwODdmZGQwMzI2LzAv
RTQ1QUIwOTU2Q0JCMERFRDMzODkwMjUyRUI4RTE5QUE4NzMzQUQ4OS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdm
MDA5OWIyLzMzZWNhYWI5LTE4MDctNDc4MC04MGQwLTZhOGRmOTU0MDYwZS81ODli
Nzk0YTE2OTk3YjQyNzc5NzdiMDlkZjlmZDVjNTdkYzNmN2NmYTdkMmNiYTdjOS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg5ZDA5NWFlMDE4OWQz
MDg3ZmRkMDMyNi8wLzMyMzYzMDMyM2E2NjYxMzQ2MTNhM2EyZjM0MzAyZDM0MzAy
MDNkM2UyMDMyMzYzMTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAmAvpKADANBgkqhkiG9w0BAQsF
AAOCAQEAR/7iLf8+5Ekhy0GqKLY8RSrNYoN7Xaa/SJ3Z5/CUH9qItuDjj0pt7Zsx
v9yuacmPrAtfrfuM/zCC2Fp+suBTR0a8yFjSgsX5ja/7X0Z9Pqv7TCL57L8s/EaI
KBPIDH5m9U+baXz9Set4NAnMFQEWd0SAdhoJFBCoMLQcVd2niQnUHpEnbSdfOrb5
Bp6vuQtTjgHn8V5X/jT2l/LSsnhXXPZVyuwwb3YJazK5xrcj1niujzXEqxgxQOLX
2o+4NHGk2dJoxEjKb3Dt3H5vSVJnnLwntKeQz1kvdkxLk6dticsS7NON/cI5IFpY
PkymVHzdlTGA7i904imaKZcWTbsU+g==
-----END CERTIFICATE-----
Generated at Sat Jun 15 02:42:04 2024 by rpki-client on console-ams.rpki-client.org