Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203236313935.roa
File:                     323630323a666134613a3a2f34302d3430203d3e203236313935.roa (raw, json)
Hash identifier:          8450EXcUUhIAdd9L+sPVVZ9nigSwUwt453MCMfBaeW0=
Subject key identifier:   AB:75:57:FD:5C:E5:86:61:36:87:4B:58:98:31:82:6B:92:01:69:CD
Certificate issuer:       /CN=589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1
Certificate serial:       10B6F0111B79FA436DD8C03556B7080EC3B396FB
Authority key identifier: 27:A0:E6:8D:4A:47:87:B2:07:C9:52:03:6C:00:BF:CC:15:AB:F2:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203236313935.roa
Signing time:             Wed 09 Oct 2024 18:07:23 +0000
ROA not before:           Wed 09 Oct 2024 18:02:23 +0000
ROA not after:            Wed 08 Oct 2025 18:07:23 +0000
asID:                     26195
IP address blocks:        2602:fa4a::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/33ecaab9-1807-4780-80d0-6a8df954060e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b6:f0:11:1b:79:fa:43:6d:d8:c0:35:56:b7:08:0e:c3:b3:96:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1
        Validity
            Not Before: Oct  9 18:02:23 2024 GMT
            Not After : Oct  8 18:07:23 2025 GMT
        Subject: CN=AB7557FD5CE5866136874B589831826B920169CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ea:fd:66:1b:c9:1d:6a:e6:b2:1f:22:c3:30:
                    a8:2a:88:d1:71:62:f5:3d:09:75:41:b4:5c:83:31:
                    33:ea:b2:18:84:5b:ab:7c:c1:ed:6e:11:e9:9d:11:
                    a8:0f:79:45:fe:ea:6b:c8:3e:6f:1f:37:4d:b8:ae:
                    dd:14:be:44:2f:16:15:f7:c0:e6:2c:9f:91:be:04:
                    f4:58:99:9e:e3:25:36:cd:70:3a:b2:64:be:6f:b7:
                    74:14:d0:4f:99:2d:fb:66:91:20:50:dc:c2:cf:4c:
                    fe:75:b9:ff:ce:9c:75:cd:55:6b:28:5c:77:61:f7:
                    44:15:50:06:f1:fb:ff:87:03:7b:2b:c5:47:07:98:
                    3a:6c:3c:99:d2:25:80:27:02:55:86:8c:3d:b6:9c:
                    79:ec:d6:ce:42:43:65:fc:7a:50:85:21:4f:67:7c:
                    7a:b6:4e:da:37:5d:6b:60:ef:b1:a3:85:ff:0d:33:
                    a1:d2:06:76:78:6e:33:59:9d:27:46:61:a2:e9:d6:
                    87:56:b3:b1:8a:f5:60:02:cf:b5:d4:a2:81:89:07:
                    d8:52:8a:ac:2d:b8:2d:14:18:b9:a3:8c:19:52:79:
                    37:bc:72:56:2b:c5:09:3b:e6:40:c8:a4:7f:59:84:
                    76:e4:98:a9:51:94:04:7d:d5:10:79:03:8c:89:93:
                    f4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:75:57:FD:5C:E5:86:61:36:87:4B:58:98:31:82:6B:92:01:69:CD
            X509v3 Authority Key Identifier:
                keyid:27:A0:E6:8D:4A:47:87:B2:07:C9:52:03:6C:00:BF:CC:15:AB:F2:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/27A0E68D4A4787B207C952036C00BFCC15ABF226.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/33ecaab9-1807-4780-80d0-6a8df954060e/589b794a164f3066f5cca03ce78d5eaa85e01e66b618375cf1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/0/323630323a666134613a3a2f34302d3430203d3e203236313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa4a::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:2a:1d:5a:23:86:60:17:76:bf:6a:10:8e:11:f0:1c:71:58:
         aa:79:c4:fe:aa:cb:06:39:3a:67:f0:f9:be:1a:da:95:5a:fd:
         64:b0:c4:1b:c4:ce:3a:94:4e:d9:ea:f7:88:cb:07:cf:ca:d3:
         ff:9b:19:b6:ef:da:74:e5:18:00:e4:4f:dd:2d:f8:67:c1:37:
         ec:af:3c:f7:0e:12:2b:d1:52:dd:60:03:14:8b:f6:4e:c2:7c:
         e4:fa:44:d0:5d:bb:e2:db:9b:9f:9f:1b:ae:ab:f5:b1:f6:10:
         15:ad:7f:5e:d0:a8:a7:fd:fa:cf:b0:99:4e:7a:d7:13:e4:f5:
         2e:2d:d6:4c:ee:38:34:9d:b3:b7:28:37:9c:22:63:72:38:63:
         31:c1:69:b8:95:8b:af:cd:dc:70:04:b9:75:99:06:02:e2:ad:
         19:2e:30:c1:15:d4:08:54:f0:ea:4f:29:c1:d5:85:49:1d:3e:
         68:1c:5d:da:7b:4c:ac:67:d0:ee:6e:20:90:19:3d:c9:10:1c:
         ef:92:da:ea:ac:ca:b3:c5:f0:ff:46:62:7a:ed:bd:4e:e8:70:
         12:37:d9:6b:fe:90:1d:66:9c:d0:b1:b3:bd:38:72:0a:1d:ff:
         45:8b:3c:1f:5c:3e:8f:75:c6:2c:c9:24:d7:d3:8f:ce:e3:70:
         22:f5:49:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:04:01 2024 by rpki-client on console-ams.rpki-client.org