Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030333a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030333a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          pF1FRHVOe6Qupim2QDNEeK4QuXr+7RBiM3S6LV6MNx8=
Subject key identifier:   AD:BA:97:0B:F1:25:F1:75:C7:FE:68:D5:E0:D9:1A:2D:52:12:7D:CC
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       1E7CAF76EADA3ED10EE778BF9BB0E58E0E77CF9C
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030333a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Sun 07 Jan 2024 23:42:20 +0000
ROA not before:           Sun 07 Jan 2024 23:37:20 +0000
ROA not after:            Sun 05 Jan 2025 23:42:20 +0000
asID:                     215907
IP address blocks:        2602:817:1003::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7c:af:76:ea:da:3e:d1:0e:e7:78:bf:9b:b0:e5:8e:0e:77:cf:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Jan  7 23:37:20 2024 GMT
            Not After : Jan  5 23:42:20 2025 GMT
        Subject: CN=ADBA970BF125F175C7FE68D5E0D91A2D52127DCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4b:32:52:1d:e8:45:1e:85:0b:2a:0a:d5:87:
                    2e:19:4c:7f:dc:ef:e5:03:32:65:63:62:4b:2d:7e:
                    99:ec:19:e3:fe:89:1e:87:c4:1e:71:63:9e:50:e1:
                    3c:e6:f2:3b:62:df:3f:32:f7:9e:eb:d8:7e:fa:e6:
                    94:ec:8a:ac:63:56:6e:bf:97:88:66:a0:28:ce:e8:
                    3f:69:74:ca:89:e6:1c:23:b9:9c:90:e3:e7:0f:18:
                    e2:97:32:0b:7d:4a:85:f2:1a:0b:45:dd:58:55:d6:
                    7f:86:da:93:72:ec:dc:8d:73:41:a6:18:79:cc:65:
                    97:e2:24:55:9d:bc:21:6a:72:be:38:c2:43:4c:76:
                    02:60:5e:6d:86:f7:cf:24:e9:39:29:4b:2f:5c:dc:
                    3c:ad:7c:d6:41:a3:72:11:ba:4f:0a:19:da:4a:85:
                    10:69:ef:5b:18:40:04:3a:b9:62:f3:33:e6:08:3e:
                    8f:9a:19:77:27:69:22:e8:9e:e8:4b:c1:c5:f7:24:
                    b2:0d:f6:58:4f:9f:c0:4a:55:50:c8:a4:73:98:28:
                    00:c1:82:00:29:ff:13:06:bf:7d:9b:06:7b:3d:29:
                    b2:64:94:d9:68:a2:2c:6b:06:9f:1f:10:2b:ba:33:
                    33:40:2f:f5:fb:78:0a:9e:10:15:b0:14:2d:76:5d:
                    10:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BA:97:0B:F1:25:F1:75:C7:FE:68:D5:E0:D9:1A:2D:52:12:7D:CC
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030333a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1003::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:0b:b9:11:3a:8e:bf:ad:70:43:46:24:cb:9f:22:81:e8:66:
         4a:48:2b:4b:49:43:cb:f2:8f:9f:fe:10:5e:7f:f5:a3:5c:5b:
         84:ae:19:cf:ca:48:37:88:36:56:28:6a:4a:a6:ec:cf:0b:b0:
         21:15:85:e7:60:33:ed:95:80:5f:fd:ad:49:1d:cc:4b:71:b5:
         28:a0:28:c9:78:9d:cc:42:8d:86:80:06:6a:da:a5:8c:cf:7b:
         90:67:0c:ad:6a:f8:07:9e:1c:e8:25:e7:28:5d:cd:ae:6d:3f:
         7e:de:5f:d0:6a:1f:0c:66:75:70:65:30:50:4e:f3:bd:8b:f9:
         52:c6:4b:07:8a:f4:73:e0:a8:51:2e:8d:b9:52:7b:18:2f:73:
         b4:a1:e5:29:7a:50:4a:8f:17:04:b8:e0:bd:41:d6:f7:3a:ff:
         23:8a:58:53:0c:88:64:e1:1c:83:8f:ea:bd:79:e8:35:19:74:
         c9:3c:d5:78:e6:83:5a:f4:42:8f:6f:fb:1a:35:98:af:e3:3e:
         bd:03:d1:34:8e:0a:b2:b2:c9:1a:76:9b:03:9c:63:c5:82:8c:
         d6:16:e2:87:dc:8d:80:50:f6:de:3f:c9:c6:fa:0c:b3:8a:43:
         61:6f:01:6a:8c:0a:15:53:f1:79:bf:27:c6:a7:7f:6b:3b:34:
         de:43:0e:ec
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUHnyvduraPtEO53i/m7Dljg53z5wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZTdkZGViZjFhZDM3ZDdjYmNhMzAzM2E2MGU3ZjAzMDJk
NjI2Yjk2YTBmY2Y5N2ZmM2QwHhcNMjQwMTA3MjMzNzIwWhcNMjUwMTA1MjM0MjIw
WjAzMTEwLwYDVQQDEyhBREJBOTcwQkYxMjVGMTc1QzdGRTY4RDVFMEQ5MUEyRDUy
MTI3RENDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0syUh3oRR6F
CyoK1YcuGUx/3O/lAzJlY2JLLX6Z7Bnj/okeh8QecWOeUOE85vI7Yt8/Mvee69h+
+uaU7IqsY1Zuv5eIZqAozug/aXTKieYcI7mckOPnDxjilzILfUqF8hoLRd1YVdZ/
htqTcuzcjXNBphh5zGWX4iRVnbwhanK+OMJDTHYCYF5thvfPJOk5KUsvXNw8rXzW
QaNyEbpPChnaSoUQae9bGEAEOrli8zPmCD6Pmhl3J2ki6J7oS8HF9ySyDfZYT5/A
SlVQyKRzmCgAwYIAKf8TBr99mwZ7PSmyZJTZaKIsawafHxArujMzQC/1+3gKnhAV
sBQtdl0Q6QIDAQABo4ICvTCCArkwHQYDVR0OBBYEFK26lwvxJfF1x/5o1eDZGi1S
En3MMB8GA1UdIwQYMBaAFEa5/bwgGWKKgFXQOrgnyefkAHO/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThjZGNmMmM4MzU0YjUyLzAv
NDZCOUZEQkMyMDE5NjI4QTgwNTVEMDNBQjgyN0M5RTdFNDAwNzNCRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzhiN2I4ZjIyLTU4N2QtNDFlOS1hNzk4LTkzYzQ3NzVmN2ZhMS9lN2Rk
ZWJmMWFkMzdkN2NiY2EzMDMzYTYwZTdmMDMwMmQ2MjZiOTZhMGZjZjk3ZmYzZC5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4Y2Rj
ZjJjODM1NGI1Mi8wLzMyMzYzMDMyM2EzODMxMzczYTMxMzAzMDMzM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzMTM1MzkzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFxADMA0G
CSqGSIb3DQEBCwUAA4IBAQBHC7kROo6/rXBDRiTLnyKB6GZKSCtLSUPL8o+f/hBe
f/WjXFuErhnPykg3iDZWKGpKpuzPC7AhFYXnYDPtlYBf/a1JHcxLcbUooCjJeJ3M
Qo2GgAZq2qWMz3uQZwytavgHnhzoJecoXc2ubT9+3l/Qah8MZnVwZTBQTvO9i/lS
xksHivRz4KhRLo25UnsYL3O0oeUpelBKjxcEuOC9Qdb3Ov8jilhTDIhk4RyDj+q9
eeg1GXTJPNV45oNa9EKPb/saNZiv4z69A9E0jgqysskadpsDnGPFgozWFuKH3I2A
UPbeP8nG+gyzikNhbwFqjAoVU/F5vyfGp39rOzTeQw7s
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:37 2024 by rpki-client on console-ams.rpki-client.org