Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a32303a3a2f34342d3434203d3e203531363932.roa
File:                     323630323a663836353a32303a3a2f34342d3434203d3e203531363932.roa (raw, json)
Hash identifier:          juboSx0S7nmrInGoww/qqutmBfG42OkiD3ndNx/eKdI=
Subject key identifier:   4B:04:5D:E6:BA:F1:18:D9:A4:CD:C2:27:24:55:2C:F2:B2:74:B9:EC
Certificate issuer:       /CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
Certificate serial:       75C406AEB38D3BE3BDAAD98354EFF1A5CD3CA267
Authority key identifier: 59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a32303a3a2f34342d3434203d3e203531363932.roa
Signing time:             Sat 16 Nov 2024 20:58:24 +0000
ROA not before:           Sat 16 Nov 2024 20:53:24 +0000
ROA not after:            Sat 15 Nov 2025 20:58:24 +0000
asID:                     51692
IP address blocks:        2602:f865:20::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c4:06:ae:b3:8d:3b:e3:bd:aa:d9:83:54:ef:f1:a5:cd:3c:a2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
        Validity
            Not Before: Nov 16 20:53:24 2024 GMT
            Not After : Nov 15 20:58:24 2025 GMT
        Subject: CN=4B045DE6BAF118D9A4CDC22724552CF2B274B9EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:13:02:7e:f0:36:fa:e6:97:dc:cf:58:2b:
                    28:3a:8a:09:5c:45:a8:5e:0d:39:2b:2e:67:a2:4c:
                    32:09:c8:71:b5:22:0a:2d:37:62:b9:70:8f:8f:ad:
                    4b:16:e6:56:d4:7e:5a:b9:47:d4:1a:78:64:d1:7e:
                    78:a0:94:a8:4d:2f:d4:51:f8:c8:1e:c5:26:c0:47:
                    07:28:a2:b4:07:4f:4a:0b:e1:e0:53:43:84:37:b6:
                    63:0c:72:24:d7:cc:bf:4e:04:d7:67:41:f5:a3:dc:
                    5c:ba:f2:9c:06:bd:ca:4d:67:13:40:f3:ac:49:81:
                    73:1d:2c:ea:65:54:cd:44:6b:66:1c:8a:eb:77:cb:
                    01:98:d7:ab:a3:bd:c8:3b:71:80:52:25:88:55:3c:
                    96:9f:3a:09:80:86:1e:82:77:c8:5f:16:dc:9a:37:
                    46:4c:5c:19:31:67:8b:91:53:d9:57:4d:f0:b0:09:
                    91:94:c5:28:ed:cc:fe:a0:a8:8f:4d:5b:bd:ce:da:
                    aa:2c:ea:7b:e8:1e:e2:e5:ff:ee:1b:df:b7:51:c9:
                    47:f3:54:a2:26:34:b4:d2:9f:88:d7:93:34:f2:72:
                    6c:d9:28:cf:4b:29:cf:27:5c:c2:4c:d6:1b:9e:90:
                    ea:3d:5b:66:51:a6:3c:5c:53:2c:bd:eb:06:98:37:
                    da:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:04:5D:E6:BA:F1:18:D9:A4:CD:C2:27:24:55:2C:F2:B2:74:B9:EC
            X509v3 Authority Key Identifier:
                keyid:59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a32303a3a2f34342d3434203d3e203531363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f865:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:1c:84:2d:61:9e:51:a7:0e:9b:2e:29:60:08:6d:6f:e5:43:
         2b:4c:63:c9:db:20:1c:82:26:ab:a6:58:6b:f1:54:70:42:10:
         74:e4:cc:b1:47:5c:d2:0b:68:9e:37:a5:6c:0d:8f:8a:ed:ad:
         1e:7b:34:ff:dd:94:9d:4e:1f:8a:0a:37:0b:f6:d9:e8:ce:20:
         89:d8:70:ea:ef:5e:1a:ee:ca:be:90:88:32:fc:e3:5a:dc:a5:
         55:5f:5d:16:80:0c:f1:b2:6c:b4:52:de:ff:fe:17:04:e3:f5:
         f1:45:73:2d:c9:e0:6d:ef:ac:65:20:25:65:5a:b9:58:97:1c:
         42:71:56:1f:1c:75:0e:e5:35:39:b1:fe:fa:d3:de:14:a7:4f:
         ff:9b:70:96:0b:68:ce:a7:6f:86:4b:e1:31:e2:97:bc:96:cb:
         7c:0a:20:a7:d7:dc:53:11:dd:62:ed:cf:ee:98:b9:5b:68:46:
         b5:9e:c0:11:07:10:5a:a3:8e:c6:c4:16:d0:2e:32:ee:d9:43:
         34:88:c9:09:b9:d4:7f:3f:bc:6d:9d:b1:d1:ce:4d:b2:c7:4e:
         ca:8d:18:c9:07:ca:33:bc:15:2f:7a:ef:37:47:96:ca:ae:4c:
         9f:2f:01:45:97:09:da:58:ab:fa:78:d4:ce:bf:48:f0:ca:81:
         f1:0a:3b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:12:34 2024 by rpki-client on console-fra.rpki-client.org