Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a6630303a3a2f34302d3430203d3e20313339333131.roa
File:                     323630323a666131633a6630303a3a2f34302d3430203d3e20313339333131.roa (raw, json)
Hash identifier:          T9qvR0/SW2k7ZxuczXYCPdcILvt4uTgKNLqXIn5kto8=
Subject key identifier:   57:02:09:0C:2E:60:5A:D4:4D:1A:3B:CF:97:A2:5D:39:AD:94:5A:84
Certificate issuer:       /CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
Certificate serial:       48D6EF45611F45B559F28821A7E88002B2B00ADF
Authority key identifier: EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a6630303a3a2f34302d3430203d3e20313339333131.roa
Signing time:             Mon 25 Mar 2024 03:07:52 +0000
ROA not before:           Mon 25 Mar 2024 03:02:52 +0000
ROA not after:            Mon 24 Mar 2025 03:07:52 +0000
asID:                     139311
IP address blocks:        2602:fa1c:f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/8ac1752e-3020-499d-a952-d54bdfadf765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/8ac1752e-3020-499d-a952-d54bdfadf765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:47:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d6:ef:45:61:1f:45:b5:59:f2:88:21:a7:e8:80:02:b2:b0:0a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7
        Validity
            Not Before: Mar 25 03:02:52 2024 GMT
            Not After : Mar 24 03:07:52 2025 GMT
        Subject: CN=5702090C2E605AD44D1A3BCF97A25D39AD945A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:7a:0f:bc:45:a5:2b:be:5c:ae:e1:51:7c:3d:
                    60:18:c8:2d:41:e9:59:92:01:60:57:0d:af:27:e1:
                    8d:71:b8:2d:1d:c1:33:3e:ab:d9:35:b9:f4:ac:ff:
                    a7:f3:98:fd:e9:51:9a:f6:2a:2d:30:f0:0f:f7:cd:
                    57:82:9c:48:88:8d:7f:76:99:54:a0:29:7c:86:33:
                    9f:6e:41:b9:e3:6f:4d:7f:2c:75:0a:15:a7:b2:fb:
                    9c:56:21:59:e0:52:9c:d6:96:eb:a1:82:05:fc:02:
                    ac:8b:89:d1:be:c7:c0:47:b8:09:12:28:02:4e:d2:
                    0a:3d:c2:af:55:10:13:e9:52:f8:85:7c:e8:7f:24:
                    89:92:ad:dd:17:f8:8c:3c:17:30:c1:57:a6:e3:67:
                    8b:59:67:f0:7d:a4:1a:b0:97:d6:8e:7a:da:57:8d:
                    7d:47:25:4e:34:31:7b:e4:fa:97:1e:14:e4:38:4e:
                    6e:85:2a:16:1a:07:7e:b0:d6:82:03:72:d4:22:30:
                    fe:41:3f:75:fb:f4:1e:55:ce:18:fd:59:77:89:49:
                    44:fa:52:fc:86:78:81:2a:75:92:a3:99:d3:3a:e6:
                    f4:3a:a2:5c:40:17:4e:a4:ff:0a:41:04:7c:10:fd:
                    03:0d:0c:6f:32:70:b6:2a:6f:55:56:67:32:7b:5f:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:02:09:0C:2E:60:5A:D4:4D:1A:3B:CF:97:A2:5D:39:AD:94:5A:84
            X509v3 Authority Key Identifier:
                keyid:EC:95:74:5C:25:59:94:3A:CE:43:95:74:C9:86:86:65:E1:68:8B:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/EC95745C2559943ACE439574C9868665E1688B08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8ac1752e-3020-499d-a952-d54bdfadf765/16904f79ba12ab12b4af08f2c5b88707f856d2ef6313be52b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade89e025a7018ab3cccd0c1000/0/323630323a666131633a6630303a3a2f34302d3430203d3e20313339333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa1c:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:21:db:2b:a8:f3:65:49:74:ca:3a:b3:39:2b:a5:ec:74:5e:
         de:01:42:cb:80:14:d6:84:59:fa:8a:2e:ac:24:a3:74:f7:d2:
         6d:47:d9:be:5c:c4:ce:dd:81:db:11:1e:88:54:a3:0b:63:bd:
         c1:e4:76:ce:e6:91:2c:11:fd:28:22:e4:44:9f:e8:9b:4e:66:
         bb:9b:0c:07:f7:32:44:6f:8c:d3:e3:35:5f:54:e8:6c:7c:c4:
         fa:a2:49:a0:c1:13:5b:b0:9f:57:8c:1d:2f:dd:f3:18:93:f3:
         4e:22:c5:81:f3:3d:3e:aa:3f:54:1b:75:b8:28:e5:9f:07:ed:
         1c:a6:3d:f6:91:5b:b6:1a:cb:43:da:5a:e6:7b:01:f7:04:a7:
         ec:ed:ea:cb:32:be:d9:21:53:07:af:0a:ea:2b:e3:5d:7b:95:
         31:7f:ff:17:24:9b:65:a4:b7:46:0d:57:37:73:ba:f0:21:29:
         e0:e0:78:e0:30:3f:89:b0:2e:76:5b:d0:3e:36:c0:41:09:19:
         dc:69:e4:23:80:a5:67:37:65:bf:93:6f:5b:f2:bd:6f:85:90:
         84:62:c1:41:f6:04:22:5b:2e:4b:a4:6e:44:42:79:04:06:8f:
         f0:d9:a6:27:af:84:40:58:92:82:99:5d:72:37:04:75:ed:d9:
         44:f2:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:11:14 2024 by rpki-client on console-fra.rpki-client.org