Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a6666303a3a2f34382d3438203d3e203237343938.roa
File:                     323630323a663836353a6666303a3a2f34382d3438203d3e203237343938.roa (raw, json)
Hash identifier:          99hMgWxsknNIvccYIn5QdUdxe1HqjtVLBmRVwGtNKB0=
Subject key identifier:   25:00:FE:40:42:B6:7D:29:56:C4:D6:C1:10:01:69:56:63:9B:99:5F
Certificate issuer:       /CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
Certificate serial:       68E61F806B9116AB3356BE9CDEA7890FB002CA57
Authority key identifier: 59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a6666303a3a2f34382d3438203d3e203237343938.roa
Signing time:             Sat 16 Nov 2024 20:58:40 +0000
ROA not before:           Sat 16 Nov 2024 20:53:40 +0000
ROA not after:            Sat 15 Nov 2025 20:58:40 +0000
asID:                     27498
IP address blocks:        2602:f865:ff0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 05:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:e6:1f:80:6b:91:16:ab:33:56:be:9c:de:a7:89:0f:b0:02:ca:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672
        Validity
            Not Before: Nov 16 20:53:40 2024 GMT
            Not After : Nov 15 20:58:40 2025 GMT
        Subject: CN=2500FE4042B67D2956C4D6C110016956639B995F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:26:7d:a5:1e:48:b6:77:17:ed:13:a1:39:
                    ad:32:e5:05:1c:4f:56:47:e4:c6:a1:9d:c0:04:35:
                    ec:3d:12:9a:32:b2:52:d0:40:df:c1:b9:14:dc:04:
                    27:c3:22:60:e0:cb:71:96:ea:72:55:3d:90:14:08:
                    02:a5:39:37:fa:4f:9e:e0:d8:e8:dd:c7:c4:0f:ce:
                    d8:d9:ed:1a:8e:71:90:9d:eb:db:36:50:ed:a6:96:
                    2b:19:1e:77:d0:f7:c0:2f:a5:4c:37:62:9f:88:2d:
                    d7:da:9f:5f:25:be:6b:4a:5f:92:fe:95:f3:30:49:
                    b7:ce:fc:e9:3f:98:8a:58:17:7d:38:fe:3c:29:37:
                    2a:5a:b3:55:ce:5f:2b:ed:f0:33:75:cd:03:f6:6c:
                    20:28:77:bd:2f:df:5b:7f:a8:e8:a9:46:7f:61:39:
                    67:40:2a:d5:07:f7:1d:d8:7b:57:57:da:7c:a3:4b:
                    d7:e0:b5:0f:86:59:84:15:81:47:0c:6a:43:69:53:
                    bb:3c:e1:41:70:9c:c8:39:34:57:c9:4a:03:89:b8:
                    cf:1c:d8:7a:4b:d0:76:f7:0e:c3:44:dd:40:92:39:
                    6f:fe:31:c2:ff:f8:87:c3:e7:6f:3a:12:dd:3a:89:
                    db:fd:41:ae:6b:07:d6:5e:a0:a4:ff:53:35:28:d2:
                    36:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:00:FE:40:42:B6:7D:29:56:C4:D6:C1:10:01:69:56:63:9B:99:5F
            X509v3 Authority Key Identifier:
                keyid:59:64:34:7C:AF:C9:84:C6:21:12:3C:2F:5E:4F:42:37:3C:60:80:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/5964347CAFC984C621123C2F5E4F42373C6080FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f0cf986a-2ec9-4aa2-9e61-43a0efc4f2ea/e8238ea0d5ed59b84507040b80fb3ba7f9ebbda5fe05af1672.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b4019288462c3804e6/0/323630323a663836353a6666303a3a2f34382d3438203d3e203237343938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f865:ff0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:bc:7e:0f:a7:12:eb:cc:a9:ec:45:ac:8b:e7:97:3b:f3:3e:
         ca:54:ce:ad:38:c1:a6:f3:24:06:d9:36:51:10:d0:d7:ef:f7:
         87:65:cc:b3:a2:1c:18:44:c4:99:86:dc:06:15:94:c3:1b:08:
         09:20:01:5c:76:e1:a3:9f:97:08:40:8f:64:6f:8b:1f:3e:ba:
         6e:db:41:e2:36:7e:c9:a5:e0:e2:ba:e6:4c:77:d7:9c:72:bd:
         1e:7a:63:7a:75:52:6e:86:1c:32:c5:b4:73:0e:6a:a7:f6:77:
         8e:19:ec:1c:94:3b:e8:99:45:4c:49:21:3e:1c:19:86:7c:f5:
         29:19:16:c1:96:44:85:21:6c:d0:81:22:50:bd:23:5c:f0:60:
         a6:92:b4:87:1b:99:3f:e5:25:b3:35:de:a6:44:08:83:54:a9:
         43:06:63:06:cb:e8:d3:99:d1:01:d1:d5:1e:b1:e6:ef:2c:b7:
         d7:b5:bc:78:66:76:2f:e9:d6:d0:38:ca:25:d8:d1:d6:90:44:
         dd:33:46:7b:3a:23:54:e3:e9:10:00:fc:f8:ff:22:9a:2f:0c:
         cc:6f:a9:8c:9d:14:bb:74:52:c6:72:cb:3b:45:5b:21:e7:cc:
         21:00:e8:33:b2:ad:9d:b1:e2:39:30:06:ce:eb:d2:3c:9b:7d:
         e3:1c:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:29:22 2025 by rpki-client