Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a3130303a3a2f34302d3438203d3e203237343938.roa
File:                     323630323a663836353a3130303a3a2f34302d3438203d3e203237343938.roa (raw, json)
Hash identifier:          TpPncnEElcNDY2YowllZwM3sa5M681+xpfuibRywGuo=
Subject key identifier:   77:24:64:18:DC:A8:52:A5:F2:E0:F8:1A:72:B9:94:CD:BD:6A:AA:0F
Certificate issuer:       /CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
Certificate serial:       799D5AA1FE14A1627F688FBCC5F017CAAD0BEA24
Authority key identifier: 59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a3130303a3a2f34302d3438203d3e203237343938.roa
Signing time:             Sat 16 Nov 2024 21:02:19 +0000
ROA not before:           Sat 16 Nov 2024 20:57:19 +0000
ROA not after:            Sat 15 Nov 2025 21:02:19 +0000
asID:                     27498
IP address blocks:        2602:f865:100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 13:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9d:5a:a1:fe:14:a1:62:7f:68:8f:bc:c5:f0:17:ca:ad:0b:ea:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
        Validity
            Not Before: Nov 16 20:57:19 2024 GMT
            Not After : Nov 15 21:02:19 2025 GMT
        Subject: CN=77246418DCA852A5F2E0F81A72B994CDBD6AAA0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:8c:92:40:b3:46:bc:18:7e:19:f1:61:b3:
                    c1:ee:18:8e:52:e2:2a:8a:9b:87:0a:ad:ed:6c:25:
                    76:e7:10:92:63:b7:3b:33:65:4f:6c:c3:a3:50:26:
                    63:a2:e1:9d:91:c9:32:2c:bb:30:89:ba:17:b9:aa:
                    13:1a:b9:eb:93:4a:c9:61:b7:78:14:be:15:80:d3:
                    8f:16:26:55:79:da:f6:53:eb:4b:33:de:7b:ee:f4:
                    d2:d9:b2:08:73:d2:5a:96:34:ef:1c:8d:de:ec:cb:
                    bb:29:01:30:4e:a2:6f:bd:13:7e:b1:27:96:9d:16:
                    af:fb:a1:8e:ec:f6:59:f4:a6:7a:9e:ca:60:72:87:
                    0a:bb:48:6d:37:a0:48:e3:10:ae:cf:ff:67:8b:cc:
                    20:6d:ba:c2:03:05:15:3f:14:d0:0d:31:b7:25:33:
                    a9:fe:f9:5f:64:99:a5:95:05:40:c6:ba:a0:d6:12:
                    81:a6:31:6b:0f:ae:3c:2c:e7:c8:40:9b:af:db:32:
                    28:e4:19:14:7f:85:53:69:59:fd:91:62:94:c2:63:
                    bc:eb:fa:39:8d:99:54:9f:f2:46:7d:0a:8a:0b:4a:
                    ec:f0:41:8c:e2:cf:37:94:4e:db:71:49:e2:e2:cd:
                    bc:5b:f5:ae:b6:32:51:74:e3:51:65:34:52:c5:96:
                    22:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:24:64:18:DC:A8:52:A5:F2:E0:F8:1A:72:B9:94:CD:BD:6A:AA:0F
            X509v3 Authority Key Identifier:
                keyid:59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a3130303a3a2f34302d3438203d3e203237343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f865:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:b8:2d:40:23:bd:65:ba:2a:17:d2:f3:08:57:db:cd:73:
         df:13:2c:cc:cc:59:7c:a4:b2:fd:cc:3a:22:8b:c2:fa:ad:f7:
         ed:38:98:ac:45:53:99:14:73:1c:c6:64:01:56:b3:be:32:9d:
         bb:7b:db:0e:8f:1b:c9:40:86:36:2f:d7:03:03:79:0a:3f:e5:
         9e:5d:bc:69:a7:72:7c:b3:e5:ff:ec:8a:ce:64:b8:86:eb:ab:
         8b:88:87:70:86:54:ab:21:fd:43:c2:99:fc:6d:55:80:bb:70:
         47:58:b0:c9:56:db:a1:ef:71:01:a4:76:cf:08:ae:90:0e:a9:
         58:c5:95:a9:a7:d1:f7:b7:ce:ca:4e:b2:01:fd:a9:9a:10:c3:
         ac:da:d5:75:50:ca:2a:cb:1c:05:ac:b1:92:f1:10:61:2b:2a:
         9f:24:07:7b:56:04:06:85:a5:a3:fc:5e:6f:55:b2:98:8d:86:
         57:06:88:bc:af:e8:50:5c:fa:0a:5e:15:6f:0e:a6:35:eb:cd:
         4d:cd:6f:fe:cd:bb:b0:18:b9:cd:98:7b:27:5f:37:55:5f:3e:
         21:6e:7a:4e:29:02:b6:6c:2a:4e:4b:1a:bd:62:25:18:12:7a:
         31:d7:14:89:7d:78:bc:17:3f:d4:61:7b:1d:e6:18:df:f8:a4:
         12:28:b9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:28:38 2024 by rpki-client on console-fra.rpki-client.org