Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a313a3a2f34382d3438203d3e20343031333836.roa
File:                     323630323a663764633a313a3a2f34382d3438203d3e20343031333836.roa (raw, json)
Hash identifier:          FRItfpZcUolUAc+I0Gu+pP6/rzXqWWy+lqKLLNkWPfk=
Subject key identifier:   76:3F:EF:0E:33:8D:68:4D:C4:75:1E:C4:9E:09:73:BC:A7:75:53:7D
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       78910775BCC37822F352529BE2C24C77CED6D7FA
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a313a3a2f34382d3438203d3e20343031333836.roa
Signing time:             Tue 15 Oct 2024 14:34:41 +0000
ROA not before:           Tue 15 Oct 2024 14:29:41 +0000
ROA not after:            Tue 14 Oct 2025 14:34:41 +0000
asID:                     401386
IP address blocks:        2602:f7dc:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:91:07:75:bc:c3:78:22:f3:52:52:9b:e2:c2:4c:77:ce:d6:d7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Oct 15 14:29:41 2024 GMT
            Not After : Oct 14 14:34:41 2025 GMT
        Subject: CN=763FEF0E338D684DC4751EC49E0973BCA775537D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c9:8a:d8:5f:c1:41:95:4b:5a:03:e2:f1:b7:
                    36:96:19:bb:b6:39:1e:e6:f5:9d:b2:36:f5:d8:40:
                    c5:30:21:07:33:f2:41:a4:c1:dc:d2:b6:3f:56:23:
                    fd:e6:2a:01:1a:78:ec:65:9f:c1:17:10:cf:45:47:
                    91:47:89:ca:a2:5c:2b:7a:25:e8:d9:1b:2b:d9:09:
                    85:04:ec:07:43:c9:68:fc:ad:b2:d1:58:7b:20:fa:
                    d1:a4:8a:5c:c7:eb:bb:20:85:66:46:06:6d:a7:c1:
                    3d:39:22:c6:9e:7e:93:55:2b:9b:6c:d1:0d:de:4a:
                    53:48:68:f2:32:2a:2a:c9:b9:ab:68:2d:a9:9b:83:
                    e9:0d:0b:55:41:94:76:2c:fd:95:43:f8:65:3c:74:
                    8b:8d:04:9a:51:f8:d6:b9:81:d7:3e:c2:6e:31:f6:
                    8a:6c:09:38:c8:6d:6f:4f:39:fb:bc:50:62:06:a1:
                    0f:70:3c:ef:42:6d:fd:99:0b:2c:19:2e:bc:e3:80:
                    a1:62:cc:d1:83:c6:8c:1e:a3:97:3e:07:dd:68:5e:
                    53:4e:9e:09:db:c1:6c:8b:8a:f8:b5:ab:84:04:92:
                    e5:13:ca:01:03:2c:2f:70:b1:10:8c:82:0d:d2:88:
                    97:e0:e0:45:b5:56:19:16:2e:86:d4:64:0d:0d:fe:
                    89:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3F:EF:0E:33:8D:68:4D:C4:75:1E:C4:9E:09:73:BC:A7:75:53:7D
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a313a3a2f34382d3438203d3e20343031333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:2c:3a:40:55:92:f8:c1:40:aa:d9:1a:88:56:a0:56:18:8b:
         8e:dc:af:4e:0d:a6:ca:6f:d9:3a:38:1b:43:ca:40:ab:7f:d7:
         63:e4:4b:40:f1:78:3d:2e:50:63:b5:43:45:cd:84:1c:35:dd:
         ea:e0:9b:34:4e:8b:38:6b:82:5c:07:b9:9c:4b:8a:7b:94:29:
         c4:5e:ed:41:b4:29:1e:45:4a:2d:1c:5c:56:d4:1d:c4:f5:e8:
         6d:de:a3:73:5f:ec:f3:f8:c7:41:46:34:f6:67:79:22:f5:16:
         b9:39:8f:70:81:b4:8e:d9:10:81:7c:63:c3:af:d9:16:31:c8:
         25:3a:3f:dd:91:3e:cf:39:cc:a8:45:36:4c:1c:e0:03:40:b3:
         b1:33:b0:ee:5e:ca:86:18:b4:0c:bb:85:da:a4:33:35:61:01:
         23:31:f3:82:72:a8:f1:ff:02:84:75:2a:56:94:4c:de:15:7e:
         54:f3:08:8b:99:63:3e:39:3c:54:e5:10:4c:a6:a0:a7:cd:ce:
         5e:90:1c:cc:0a:2e:48:0b:f1:3f:df:b2:4b:f4:bc:82:7c:93:
         9b:db:ac:55:86:ca:ca:a5:18:01:f5:23:84:c3:51:db:18:e4:
         f9:f8:49:27:7b:85:01:92:2d:a6:5e:4c:fe:86:15:7e:6b:89:
         56:df:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:21 2024 by rpki-client on console-fra.rpki-client.org