Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030313a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030313a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          UrP+/ciHHGewJwGTk1wlbg1GYJydlXDOod0GUX+402o=
Subject key identifier:   25:EB:40:76:F7:E6:B1:E4:A3:17:AD:99:2B:C6:F7:82:17:84:DD:ED
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       04BDDF86494FFFEAE9371D90C989B443A68DAE51
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030313a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Sun 07 Jan 2024 23:41:57 +0000
ROA not before:           Sun 07 Jan 2024 23:36:57 +0000
ROA not after:            Sun 05 Jan 2025 23:41:57 +0000
asID:                     215907
IP address blocks:        2602:817:1001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:bd:df:86:49:4f:ff:ea:e9:37:1d:90:c9:89:b4:43:a6:8d:ae:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Jan  7 23:36:57 2024 GMT
            Not After : Jan  5 23:41:57 2025 GMT
        Subject: CN=25EB4076F7E6B1E4A317AD992BC6F7821784DDED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:58:46:a5:79:05:8d:da:f2:88:b3:72:44:73:
                    1f:35:ec:ee:63:ee:93:50:71:4d:40:12:64:54:23:
                    67:e7:d4:e4:1d:91:03:c9:66:e0:ea:ff:bf:21:7e:
                    c6:37:06:47:98:97:c3:c8:55:0f:99:86:89:85:49:
                    e9:87:ef:94:30:72:02:4f:07:d7:73:a2:07:8c:71:
                    ca:7e:06:ee:18:1f:79:92:f2:47:26:22:42:e8:82:
                    52:95:bd:a8:b0:a3:a5:00:1e:a8:b1:e3:13:a4:2a:
                    cf:5e:5e:a3:56:b0:dd:71:60:4e:d0:38:25:43:f8:
                    43:87:28:4c:8e:d0:49:cf:ab:ba:e5:db:aa:e5:c0:
                    91:65:2c:60:1d:73:02:2a:11:e4:ec:f3:8a:41:9b:
                    78:6f:75:2a:2d:56:a5:de:3f:9a:bd:d4:d2:74:b1:
                    1d:03:8e:15:8c:b4:a1:69:71:fc:d5:d9:ad:92:b0:
                    56:c9:9a:86:01:06:fd:9d:55:c5:cd:e6:07:14:ff:
                    a7:48:1c:db:aa:d6:45:12:f6:6f:19:f0:f6:55:70:
                    db:fc:f2:c0:4a:fb:34:7f:2c:ec:3b:54:b7:ad:b5:
                    1c:4f:ad:51:73:81:1c:09:53:ad:c1:8f:fe:fc:6e:
                    7d:3f:ca:10:27:f7:58:ec:ff:e8:97:c9:aa:d2:28:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EB:40:76:F7:E6:B1:E4:A3:17:AD:99:2B:C6:F7:82:17:84:DD:ED
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030313a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:4b:d0:d1:d7:33:8c:73:14:45:e8:3e:74:e0:14:39:c5:31:
         9e:26:24:39:25:81:38:fd:50:f6:24:05:a8:60:63:26:6f:f4:
         82:a4:d2:f2:73:34:4d:c3:54:44:db:66:32:7f:22:82:65:ee:
         9b:89:80:49:57:27:10:f1:81:68:40:a5:2b:af:e1:53:16:ed:
         b1:ca:c6:af:97:9f:96:0e:32:3b:1c:4a:dd:46:67:a6:aa:07:
         a3:48:aa:d0:84:70:5a:96:c8:c8:d4:02:49:c3:14:0f:fd:8f:
         39:41:21:da:3b:6b:3a:18:65:bc:e7:46:c6:5c:7a:1b:a1:6a:
         39:d3:3d:b3:ed:c8:d7:43:cb:31:7a:09:60:14:3b:7d:07:1d:
         80:99:58:5d:0d:21:85:88:98:31:50:46:9c:9a:0e:3e:43:4c:
         5c:30:e3:5f:ce:4b:4c:a1:6a:a4:56:17:46:35:1b:a4:60:40:
         7d:93:39:cc:71:31:16:8c:ed:6d:35:82:20:02:56:60:09:b5:
         bc:d0:e8:16:d9:0c:eb:79:b1:6a:c7:f2:b3:c1:28:6b:16:8f:
         5d:a4:74:65:11:03:e1:3b:01:e6:1f:70:f8:a4:0b:35:11:ff:
         21:c1:00:10:64:c7:35:ca:8f:00:02:c9:90:8f:a9:28:f9:9b:
         47:cc:89:2c
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUBL3fhklP/+rpNx2QyYm0Q6aNrlEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTdkZGViZjFhZDM3ZDdjYmNhMzAzM2E2MGU3ZjAzMDJk
NjI2Yjk2YTBmY2Y5N2ZmM2QwHhcNMjQwMTA3MjMzNjU3WhcNMjUwMTA1MjM0MTU3
WjAzMTEwLwYDVQQDEygyNUVCNDA3NkY3RTZCMUU0QTMxN0FEOTkyQkM2Rjc4MjE3
ODREREVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFhGpXkFjdry
iLNyRHMfNezuY+6TUHFNQBJkVCNn59TkHZEDyWbg6v+/IX7GNwZHmJfDyFUPmYaJ
hUnph++UMHICTwfXc6IHjHHKfgbuGB95kvJHJiJC6IJSlb2osKOlAB6oseMTpCrP
Xl6jVrDdcWBO0DglQ/hDhyhMjtBJz6u65duq5cCRZSxgHXMCKhHk7POKQZt4b3Uq
LVal3j+avdTSdLEdA44VjLShaXH81dmtkrBWyZqGAQb9nVXFzeYHFP+nSBzbqtZF
EvZvGfD2VXDb/PLASvs0fyzsO1S3rbUcT61Rc4EcCVOtwY/+/G59P8oQJ/dY7P/o
l8mq0iiftwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFCXrQHb35rHkoxetmSvG94IX
hN3tMB8GA1UdIwQYMBaAFEa5/bwgGWKKgFXQOrgnyefkAHO/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThjZGNmMmM4MzU0YjUyLzAv
NDZCOUZEQkMyMDE5NjI4QTgwNTVEMDNBQjgyN0M5RTdFNDAwNzNCRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhiN2I4ZjIyLTU4N2QtNDFlOS1hNzk4LTkzYzQ3NzVmN2ZhMS9lN2Rk
ZWJmMWFkMzdkN2NiY2EzMDMzYTYwZTdmMDMwMmQ2MjZiOTZhMGZjZjk3ZmYzZC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4Y2Rj
ZjJjODM1NGI1Mi8wLzMyMzYzMDMyM2EzODMxMzczYTMxMzAzMDMxM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzMTM1MzkzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFxABMA0G
CSqGSIb3DQEBCwUAA4IBAQAgS9DR1zOMcxRF6D504BQ5xTGeJiQ5JYE4/VD2JAWo
YGMmb/SCpNLyczRNw1RE22YyfyKCZe6biYBJVycQ8YFoQKUrr+FTFu2xysavl5+W
DjI7HErdRmemqgejSKrQhHBalsjI1AJJwxQP/Y85QSHaO2s6GGW850bGXHoboWo5
0z2z7cjXQ8sxeglgFDt9Bx2AmVhdDSGFiJgxUEacmg4+Q0xcMONfzktMoWqkVhdG
NRukYEB9kznMcTEWjO1tNYIgAlZgCbW80OgW2QzrebFqx/KzwShrFo9dpHRlEQPh
OwHmH3D4pAs1Ef8hwQAQZMc1yo8AAsmQj6ko+ZtHzIks
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:37 2024 by rpki-client on console-ams.rpki-client.org