Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030353a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030353a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          QZV3I2DpK4ZFlBlcAWv1lnm+gs5NoYjlpOaUPUaFQ1o=
Subject key identifier:   A6:73:6B:F5:51:18:1C:60:64:76:29:CA:57:B0:72:C5:9F:A6:6C:26
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       4FE1984B8A678AE1EC182807232E27ACBC6317F9
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030353a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Sun 07 Jan 2024 23:43:51 +0000
ROA not before:           Sun 07 Jan 2024 23:38:51 +0000
ROA not after:            Sun 05 Jan 2025 23:43:51 +0000
asID:                     215907
IP address blocks:        2602:817:1005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e1:98:4b:8a:67:8a:e1:ec:18:28:07:23:2e:27:ac:bc:63:17:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Jan  7 23:38:51 2024 GMT
            Not After : Jan  5 23:43:51 2025 GMT
        Subject: CN=A6736BF551181C60647629CA57B072C59FA66C26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:42:c9:cb:1d:df:70:5e:bf:d7:52:da:7c:77:
                    a7:bb:f4:06:b3:69:c3:0e:88:f8:25:88:1c:8b:f6:
                    28:59:7f:7f:fe:2d:2d:d0:c2:89:0c:cb:1d:ee:e9:
                    d8:98:61:b6:72:24:68:b6:57:56:33:01:12:96:2c:
                    99:9f:fb:e6:71:70:a5:1a:dd:7f:93:47:e1:30:5e:
                    db:8e:74:20:00:71:d9:45:50:39:ec:e4:37:81:a4:
                    67:07:2c:b1:05:60:87:5b:68:12:7b:94:9a:ed:0a:
                    d2:e4:4b:4f:9a:d5:be:1e:b6:b5:df:77:48:10:a3:
                    63:f8:82:b9:7b:67:ff:95:4c:53:07:e3:a5:d7:a4:
                    23:9a:3b:f2:0f:c5:20:2e:c3:8c:08:8d:dd:20:ce:
                    ae:25:0f:09:fc:f2:82:5b:58:8e:44:f5:f8:b6:27:
                    dc:d5:b6:83:a8:62:a7:29:c7:0c:0e:0d:a3:36:67:
                    8e:68:f8:f9:fc:f9:d5:52:5b:1d:cf:2f:a0:c9:6f:
                    75:76:4b:0c:b7:7e:3b:b9:8a:bc:0b:32:c6:08:54:
                    1f:6c:6e:64:e2:8e:3d:1d:f2:3e:a3:7f:98:8c:9f:
                    02:52:de:74:a4:98:4a:cd:95:d5:5b:f8:0f:d8:18:
                    d6:63:17:6e:62:00:f4:cb:e0:26:6d:ac:79:0c:ee:
                    0e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:73:6B:F5:51:18:1C:60:64:76:29:CA:57:B0:72:C5:9F:A6:6C:26
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030353a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1005::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:3c:d7:00:91:73:26:1e:0b:e4:6e:5a:b0:0d:5c:58:9a:97:
         52:ea:d7:95:f3:07:f7:ea:ec:6c:c7:ba:a5:b4:0e:98:92:d0:
         e9:ae:2e:dd:72:1b:a9:45:89:c6:b7:87:b9:78:f6:55:2e:ac:
         9e:b9:5b:95:1e:c1:8a:a3:99:9a:97:23:81:31:5f:72:0c:e0:
         72:c0:ea:e2:16:cb:0a:a0:97:8c:87:31:70:05:41:47:57:9f:
         89:79:f6:41:e3:20:47:05:be:8a:b1:ff:21:64:e7:1d:98:17:
         9e:04:24:23:aa:29:73:2a:da:37:ff:0d:28:43:3a:39:96:b5:
         5a:63:d0:b4:12:d1:51:35:47:7d:f2:48:4b:25:71:73:04:77:
         04:32:49:01:88:af:7e:4d:49:4e:30:37:70:6e:f5:0f:bc:10:
         ed:79:8e:56:c7:e2:a2:d7:20:fe:ef:eb:a9:e6:57:45:aa:8f:
         88:95:dc:49:6c:f1:03:ef:ba:a9:32:65:cd:27:4d:de:12:4c:
         8e:53:03:12:28:38:da:a0:0c:6a:c1:da:1a:35:e7:43:1f:7e:
         46:fe:ed:88:8c:79:ad:2d:fa:3f:ff:55:c1:81:01:dd:c8:f2:
         af:0c:3c:36:86:10:53:a8:af:39:ac:99:77:56:56:76:49:12:
         86:6f:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:37 2024 by rpki-client on console-ams.rpki-client.org