Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030373a3a2f34382d3438203d3e20323135393037.roa
File:                     323630323a3831373a313030373a3a2f34382d3438203d3e20323135393037.roa (raw, json)
Hash identifier:          jAqt3J7QIdhjupK4j1XLcqC14mfRak+frZ8rctXpOWY=
Subject key identifier:   FE:AA:03:E3:83:5A:10:C2:0B:1A:A2:59:03:E9:5E:A6:2A:C8:13:F1
Certificate issuer:       /CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
Certificate serial:       1EE3DE50FE3CC4B4228715B87F70025E35D076A7
Authority key identifier: 46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030373a3a2f34382d3438203d3e20323135393037.roa
Signing time:             Tue 09 Jan 2024 02:23:59 +0000
ROA not before:           Tue 09 Jan 2024 02:18:59 +0000
ROA not after:            Tue 07 Jan 2025 02:23:59 +0000
asID:                     215907
IP address blocks:        2602:817:1007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/8b7b8f22-587d-41e9-a798-93c4775f7fa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:50:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:e3:de:50:fe:3c:c4:b4:22:87:15:b8:7f:70:02:5e:35:d0:76:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d
        Validity
            Not Before: Jan  9 02:18:59 2024 GMT
            Not After : Jan  7 02:23:59 2025 GMT
        Subject: CN=FEAA03E3835A10C20B1AA25903E95EA62AC813F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0d:64:97:59:28:79:da:12:11:8b:04:3e:b2:
                    7e:26:02:de:fa:09:e7:4c:89:b3:75:99:ad:c8:2b:
                    c9:90:33:7f:81:6c:1c:d7:86:5b:f1:b1:2e:5e:b4:
                    df:02:4d:e5:cf:a2:71:2b:4c:0b:ce:c6:35:5b:38:
                    81:58:de:eb:ca:a1:8a:f7:e4:82:c2:31:72:e1:11:
                    00:c2:62:2b:ed:be:41:fe:67:30:5c:d9:44:f4:fe:
                    1e:ba:3a:3b:a5:e3:4f:90:88:6e:5d:8d:69:61:2a:
                    36:16:a5:35:56:d9:95:62:a9:4a:be:77:3c:e6:15:
                    61:38:4e:b0:d0:a0:79:d0:ba:ff:38:60:c2:11:58:
                    6e:f4:b2:5e:fe:fd:bf:34:58:a3:50:78:9b:f0:4a:
                    dd:98:a1:da:8e:37:4d:d8:9a:2d:4f:28:eb:37:22:
                    bc:6a:a8:1b:f8:7c:48:83:52:de:4b:20:d0:dc:da:
                    bb:df:13:e0:a4:7f:8a:ac:98:d0:a8:70:0e:d2:0a:
                    a8:d1:d6:7b:4a:68:1d:2a:d7:05:fb:4b:47:c4:c9:
                    c0:77:20:f5:d2:f4:39:10:25:03:73:9c:76:1e:09:
                    35:ad:4f:81:8a:dc:b9:6e:d1:a2:dc:82:15:d4:72:
                    e2:42:8a:4c:6c:d3:49:48:6c:39:ee:b2:86:75:d5:
                    08:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AA:03:E3:83:5A:10:C2:0B:1A:A2:59:03:E9:5E:A6:2A:C8:13:F1
            X509v3 Authority Key Identifier:
                keyid:46:B9:FD:BC:20:19:62:8A:80:55:D0:3A:B8:27:C9:E7:E4:00:73:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/46B9FDBC2019628A8055D03AB827C9E7E40073BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8b7b8f22-587d-41e9-a798-93c4775f7fa1/e7ddebf1ad37d7cbca3033a60e7f0302d626b96a0fcf97ff3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/0/323630323a3831373a313030373a3a2f34382d3438203d3e20323135393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:817:1007::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:fe:6a:1a:57:05:fd:04:74:91:36:b1:ce:56:81:02:84:bc:
         f5:82:d0:2a:a5:e8:a3:b9:86:42:1a:35:08:e0:6c:d8:43:6f:
         52:5f:c9:9f:7e:a1:1f:aa:85:ee:7a:92:5e:b9:f8:d8:ab:40:
         45:45:bd:f1:d3:5b:14:61:79:5a:3f:17:f8:43:45:90:d3:0e:
         aa:eb:15:74:f5:b1:2f:eb:35:c0:83:c2:e6:f9:a2:c8:2b:f3:
         94:5e:1d:8d:77:7d:01:98:f2:a1:d8:15:f6:b9:50:0f:63:18:
         83:16:e5:7c:5d:2e:b0:47:76:7f:ec:75:86:5e:25:bd:44:38:
         ca:7f:7f:e7:71:08:e3:68:61:3c:17:5d:6a:f5:bc:18:37:c1:
         39:32:af:72:01:86:72:08:c1:c3:df:4c:e8:95:65:49:30:b1:
         1e:e8:76:1d:85:b2:73:69:af:bc:ca:71:e7:2e:07:c5:15:00:
         ee:b1:2d:28:0a:7a:b5:da:bc:de:79:5b:62:08:81:2e:0b:da:
         8d:0f:66:4a:30:8e:04:d5:6d:12:2e:b0:04:ff:e8:12:de:d0:
         f6:d1:16:ce:85:1b:c7:5f:4a:61:14:64:4f:00:8a:ab:22:f8:
         0f:85:35:33:35:ab:11:87:5e:7d:3b:47:0c:a7:62:87:e3:a8:
         8e:b7:ac:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:37 2024 by rpki-client on console-ams.rpki-client.org