Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030303a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030303a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          K4+OC096WVu9UJHxh0oSkzdXTZweSA7FgKirR+25sI4=
Subject key identifier:   CE:CD:E2:83:90:AB:14:4E:67:65:F2:D3:F3:F6:DA:3F:85:12:82:83
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       02C32CD4DE6B9C1D05B4212FF09D38DDB40DBD63
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030303a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Sun 07 Jan 2024 23:29:01 +0000
ROA not before:           Sun 07 Jan 2024 23:24:01 +0000
ROA not after:            Sun 05 Jan 2025 23:29:01 +0000
asID:                     215907
IP address blocks:        2602:817:1000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c3:2c:d4:de:6b:9c:1d:05:b4:21:2f:f0:9d:38:dd:b4:0d:bd:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Jan  7 23:24:01 2024 GMT
            Not After : Jan  5 23:29:01 2025 GMT
        Subject: CN=CECDE28390AB144E6765F2D3F3F6DA3F85128283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1f:19:5a:94:59:6c:f4:85:aa:66:43:96:5e:
                    7e:17:18:1f:27:f9:ba:68:8d:50:29:de:74:0f:6c:
                    4b:2e:4b:5d:a9:f1:c2:4b:2c:72:ae:73:96:fe:7b:
                    b8:c4:47:4d:9f:62:17:7d:8c:46:d3:0c:4d:41:02:
                    74:20:aa:f0:cd:38:ed:d1:9a:ce:0e:bb:59:ff:53:
                    5e:ff:73:a5:01:e5:af:34:b7:09:45:b0:67:b2:96:
                    ad:41:3b:08:ff:9b:2c:22:3b:a0:4c:42:93:11:0e:
                    da:68:16:ad:be:75:3e:52:26:32:fa:61:7a:66:2d:
                    3d:22:ca:91:65:48:1c:3b:c6:99:96:6e:68:5c:d5:
                    5a:57:fb:10:e2:8a:10:8d:4a:29:c5:ae:d5:d4:45:
                    bf:9a:2e:b9:04:5b:83:90:17:52:cb:4d:ec:4f:3b:
                    62:bb:4f:77:18:69:7a:9f:33:40:63:a6:52:98:a6:
                    3d:d3:5d:4a:3e:4c:dd:97:73:b7:22:e2:2b:dd:bd:
                    b3:07:6a:48:12:64:57:77:96:bc:15:40:bd:37:7a:
                    14:c2:a4:b8:2b:bc:60:2b:50:f8:03:64:59:2b:4f:
                    9b:ab:3c:40:8e:10:73:9e:11:0a:54:12:57:3f:fb:
                    02:8a:eb:98:b2:a7:b9:be:0e:c3:41:7a:9e:eb:75:
                    e3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CD:E2:83:90:AB:14:4E:67:65:F2:D3:F3:F6:DA:3F:85:12:82:83
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030303a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:db:f9:be:52:ac:f9:fa:fb:c1:e1:ae:f3:9d:07:cd:cf:c8:
         ee:ab:78:00:51:28:b2:d1:6d:28:29:93:82:df:39:41:c0:b4:
         51:38:48:0d:8b:c2:cd:4d:0e:bd:cc:51:66:9a:c2:53:e7:0b:
         8f:d2:2e:f9:ea:b9:a4:4f:e9:c2:f3:7d:f2:32:0b:34:5c:ed:
         6f:72:4d:57:12:a5:8b:e0:6c:da:2b:dc:23:0a:96:7c:84:ec:
         5d:ab:ec:5b:48:bf:9f:ab:99:b6:c1:4a:4c:32:00:74:8e:79:
         67:d7:ac:27:b7:6e:2e:fe:4c:d2:d9:4d:a1:8f:ea:9c:67:ae:
         95:a3:62:e2:37:aa:cf:d7:53:55:d3:fe:f3:11:42:75:21:12:
         5b:fc:91:8a:24:be:3a:48:ec:c8:b9:ee:7b:1c:9b:cc:02:1c:
         8a:3a:3e:49:b7:db:9c:f4:42:f5:c6:86:75:15:a9:04:07:b7:
         74:0e:e5:97:13:6e:df:cc:26:18:19:0d:be:4b:2f:e6:4d:41:
         a4:15:df:69:3b:f6:76:37:4c:61:6f:6a:d1:5a:d1:13:ea:b6:
         07:dd:e4:12:96:c0:5d:33:ee:7a:f3:c0:c6:da:9d:48:22:f1:
         62:b2:dc:be:51:06:21:7f:2a:69:91:b8:e2:15:05:f0:41:21:
         8c:4d:af:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:27 2024 by rpki-client on console-fra.rpki-client.org