Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030363a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030363a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          zDVAj6e3N/0l9aA7Ch5L0ub7KxGIxrSO8UZaB5RKtOM=
Subject key identifier:   2C:A1:FE:15:EB:9B:51:92:69:B0:01:DC:DA:B1:C8:AE:18:7F:D7:CF
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       68C342155DD6867B0B59E65087CB408FE1D8D467
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030363a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Tue 09 Jan 2024 02:23:26 +0000
ROA not before:           Tue 09 Jan 2024 02:18:26 +0000
ROA not after:            Tue 07 Jan 2025 02:23:26 +0000
asID:                     215907
IP address blocks:        2602:817:1006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c3:42:15:5d:d6:86:7b:0b:59:e6:50:87:cb:40:8f:e1:d8:d4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Jan  9 02:18:26 2024 GMT
            Not After : Jan  7 02:23:26 2025 GMT
        Subject: CN=2CA1FE15EB9B519269B001DCDAB1C8AE187FD7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:20:bd:cf:84:5d:36:d4:2f:7b:50:5f:78:
                    cd:77:12:1c:46:1b:93:6b:a4:3d:1e:97:a0:b1:9c:
                    df:93:a4:fb:c5:79:73:5c:6e:7f:e8:9f:10:b3:4a:
                    de:d2:c8:6d:fd:9f:8c:41:88:37:e3:fe:87:f1:36:
                    55:9e:87:e0:ba:a9:a9:e9:30:c0:d3:24:3b:b3:a8:
                    88:a2:58:5b:4f:fa:15:bf:76:27:90:e0:fc:5f:2b:
                    eb:04:bb:79:f2:1e:88:2d:97:1e:ab:83:9e:11:26:
                    92:c8:9d:09:df:a6:47:e4:cd:09:3f:77:40:d0:56:
                    d8:3a:37:55:04:4a:93:fe:51:01:45:68:bc:6c:05:
                    e4:1f:0b:0a:f9:36:43:fb:67:c6:8b:74:d4:05:f6:
                    9d:1e:fb:27:1b:b1:1f:3c:0a:26:c1:63:ed:3b:cb:
                    76:94:1d:69:f0:9a:a9:b1:5e:3b:96:a9:58:bd:45:
                    27:d6:b4:c5:ac:d2:8e:69:2d:cd:f0:73:54:0f:02:
                    96:1c:33:b5:15:10:77:1b:7a:92:0d:5f:11:10:09:
                    b5:e5:a1:3f:21:b5:06:61:ab:ba:65:3a:10:0c:c8:
                    76:e5:26:9c:9e:0f:aa:e9:8a:57:ae:68:07:c7:6c:
                    f2:ea:48:15:53:59:b4:84:c0:e1:2a:50:cb:92:df:
                    93:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A1:FE:15:EB:9B:51:92:69:B0:01:DC:DA:B1:C8:AE:18:7F:D7:CF
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030363a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1006::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:22:6e:04:86:fe:99:72:72:40:bd:b8:a3:29:d3:3b:86:65:
         f4:1c:13:ae:6f:bf:72:ff:0a:4a:dc:2c:c3:2f:77:2d:1e:56:
         24:37:4a:6a:d4:18:c9:39:b0:c7:74:e2:20:c3:01:e0:8e:2e:
         b5:e9:67:89:30:84:21:2c:33:2a:89:0b:81:3a:dd:08:ee:28:
         62:e6:c1:af:c3:7c:3d:61:32:b9:cf:3a:68:3e:15:99:74:a3:
         87:79:aa:09:04:e6:69:46:e6:60:6f:d0:bb:67:ee:37:12:80:
         07:fd:d2:be:ff:94:6c:35:d8:e5:c4:62:b4:24:0a:db:05:16:
         c3:0b:97:b5:c9:35:e2:fa:d5:46:c4:f2:7c:f4:21:92:2b:93:
         da:5a:1e:8f:64:70:ce:62:a0:d1:07:6d:0a:6a:3d:cc:d9:03:
         bf:84:34:f6:fc:ad:ed:47:26:1f:c8:56:d3:63:aa:50:a9:30:
         61:5d:42:e9:78:87:a2:d2:24:52:80:8a:be:47:cd:80:ba:48:
         e7:64:bb:96:26:9b:ec:1a:ce:1c:f8:0d:c2:f1:63:ac:88:cd:
         1e:53:2a:f0:72:c8:0f:4e:05:b7:c0:9a:15:e4:6e:69:d1:70:
         e4:c2:3f:5c:ce:b6:4c:6d:1e:18:ab:a6:56:07:7d:f4:e2:52:
         0a:ce:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:37 2024 by rpki-client on console-ams.rpki-client.org