Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030313a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030313a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          NEw4U5Ih0UB8anf02xtgACB98fI5EjizTbQPOt1ACDI=
Subject key identifier:   35:C1:61:52:56:6E:21:B9:F4:E6:E6:E1:91:34:EB:29:9A:8E:EF:BD
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       0EC4AD40D5056CB980DF9DE76607EFBC4C769A4E
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030313a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Mon 09 Dec 2024 00:06:48 +0000
ROA not before:           Mon 09 Dec 2024 00:01:48 +0000
ROA not after:            Mon 08 Dec 2025 00:06:48 +0000
asID:                     215907
IP address blocks:        2602:817:1001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 19:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c4:ad:40:d5:05:6c:b9:80:df:9d:e7:66:07:ef:bc:4c:76:9a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Dec  9 00:01:48 2024 GMT
            Not After : Dec  8 00:06:48 2025 GMT
        Subject: CN=35C16152566E21B9F4E6E6E19134EB299A8EEFBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f0:2e:ef:75:ea:97:42:c4:49:77:cf:d1:1c:
                    10:f3:b3:ac:c7:ab:41:71:89:6a:d3:59:35:a4:8d:
                    c7:8c:ff:d0:8d:71:26:d2:15:d6:f0:56:8b:4e:14:
                    45:f4:df:d4:b1:46:5b:d5:ae:6e:af:e0:ff:9d:5f:
                    1b:97:0d:7f:2c:69:5b:58:15:cd:a5:a5:d7:41:26:
                    43:75:85:5c:46:7b:f7:92:50:2c:e6:9d:b8:ad:13:
                    d0:ac:4a:24:af:be:9a:5e:14:3c:a4:66:e3:93:eb:
                    25:a5:18:04:44:66:5a:97:59:d3:5a:ce:0f:9f:94:
                    26:32:50:fc:35:6f:1e:19:f6:c4:ac:58:36:53:8b:
                    25:98:23:20:6c:b2:0a:af:a1:d6:20:32:f7:c2:6c:
                    b1:98:b7:c4:9a:94:af:5e:57:8e:b2:d6:3d:ff:d1:
                    de:1c:99:15:04:3e:a1:d5:61:7d:57:77:4e:f4:3b:
                    0e:ab:59:1c:70:eb:27:89:00:50:bd:bb:4d:68:b8:
                    1e:55:f3:9c:12:fe:65:6e:8d:9d:45:df:f1:84:d2:
                    b0:40:29:05:6e:0a:4f:84:df:1f:26:6f:96:fa:43:
                    67:10:22:c0:83:88:9f:78:75:c9:b8:0b:11:a9:8f:
                    f7:18:87:2e:09:b0:93:27:b9:ae:f5:bd:5c:7f:85:
                    80:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C1:61:52:56:6E:21:B9:F4:E6:E6:E1:91:34:EB:29:9A:8E:EF:BD
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030313a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1001::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:55:f7:9a:ed:2d:d1:5a:9c:1c:10:c7:d2:74:2e:fc:e1:9f:
         bc:36:f7:01:f0:3a:79:b7:55:1f:b6:2d:56:8b:38:ad:48:94:
         0d:99:85:3c:29:08:c0:e7:4a:14:ce:9c:65:e1:b3:6d:4b:c7:
         da:3a:97:41:0e:a4:52:9d:c5:54:5e:a3:fd:09:1e:aa:61:68:
         89:4a:3d:d4:09:e2:d8:69:fe:76:ca:1b:73:df:9a:4b:e1:05:
         b6:92:95:86:c0:ac:88:4c:86:89:60:8c:75:7c:89:b4:cf:bc:
         ae:39:31:6d:e4:5e:19:ba:ff:17:9f:ce:5c:d2:1e:e6:82:b9:
         22:78:bd:f2:01:6b:08:e4:c1:31:ca:b4:c2:2f:64:22:d5:27:
         08:be:ff:41:d7:1a:b2:54:d9:ff:fd:fd:3a:01:ae:49:aa:2c:
         74:fd:82:e1:80:68:9d:63:1e:c7:7a:d4:33:00:5d:99:01:1b:
         ed:e1:52:0b:ca:4f:42:73:1f:d0:31:b8:ca:18:6d:8c:8e:6e:
         96:81:e2:e4:c0:db:84:65:bc:29:49:aa:b9:fe:36:0b:83:42:
         71:5d:a7:41:ff:cd:0e:05:11:6b:58:d5:5a:9e:bc:50:7b:f3:
         4a:dc:de:26:88:47:e9:c0:31:23:4c:42:bc:93:69:ea:86:8c:
         a3:dd:d4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:38:54 2025 by rpki-client