Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a323a3a2f34382d3438203d3e20343031333836.roa
File:                     323630323a663764633a323a3a2f34382d3438203d3e20343031333836.roa (raw, json)
Hash identifier:          9M6+ctr3/mJCzbHzYd4AMSLnCfzP1Tl4hG4urHuUJ70=
Subject key identifier:   FF:DC:EF:8F:72:D3:EE:57:CB:3C:42:16:30:69:07:8B:F2:3F:22:BB
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       5C5E09CA9195D92277BADABD79990755A89A9D10
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a323a3a2f34382d3438203d3e20343031333836.roa
Signing time:             Tue 15 Oct 2024 14:33:58 +0000
ROA not before:           Tue 15 Oct 2024 14:28:58 +0000
ROA not after:            Tue 14 Oct 2025 14:33:58 +0000
asID:                     401386
IP address blocks:        2602:f7dc:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:5e:09:ca:91:95:d9:22:77:ba:da:bd:79:99:07:55:a8:9a:9d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Oct 15 14:28:58 2024 GMT
            Not After : Oct 14 14:33:58 2025 GMT
        Subject: CN=FFDCEF8F72D3EE57CB3C42163069078BF23F22BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a8:02:59:59:d8:d5:4d:88:0a:67:ce:f0:44:
                    a9:59:ee:63:c6:04:66:1e:d8:24:05:3f:d4:7a:95:
                    e3:f3:ca:51:9c:32:b4:8a:5e:6e:77:08:8f:4d:7f:
                    88:04:b0:d9:02:79:c4:04:38:cb:19:e4:c4:82:59:
                    39:5a:55:f0:5c:29:a9:02:26:14:b3:f3:43:1f:6e:
                    9d:2f:18:9a:53:89:30:79:cd:8b:b3:0c:58:d8:e0:
                    4a:0b:49:2a:a2:ce:ca:39:e7:a2:8c:57:fe:fd:52:
                    08:d8:de:85:09:18:5b:51:6f:06:41:2a:03:22:b4:
                    d6:a5:23:52:3f:fe:34:de:7a:c6:e9:38:f9:c1:f9:
                    99:32:6d:50:22:8d:b1:ef:35:68:3c:fa:ba:f5:50:
                    89:b7:1d:a5:a9:3a:be:15:27:c1:ee:11:26:12:b9:
                    c8:1a:81:e2:5c:85:f9:02:e4:e8:76:cd:03:2c:7c:
                    3c:7c:28:6e:c0:fb:7f:65:a2:78:84:f0:b8:fe:a6:
                    f8:ff:16:63:5a:2c:b6:09:58:18:9c:88:90:22:fe:
                    c3:7a:7b:c1:48:dc:94:b4:90:42:81:fc:f8:14:9a:
                    be:6c:48:03:b0:80:08:25:62:f5:28:e3:da:4f:52:
                    02:01:04:72:56:76:48:51:fa:68:74:3c:b1:b0:ed:
                    79:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DC:EF:8F:72:D3:EE:57:CB:3C:42:16:30:69:07:8B:F2:3F:22:BB
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a323a3a2f34382d3438203d3e20343031333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:70:ac:72:4f:4a:a7:ba:fb:c5:ec:72:82:35:cf:02:49:15:
         d2:1e:42:00:08:1b:d3:57:36:30:6f:94:f8:f6:22:be:98:08:
         3a:4d:e7:d8:ec:2d:ef:2e:36:13:fe:a6:0c:1c:7a:f5:1a:99:
         7c:d6:86:1c:05:00:28:f8:86:68:7e:72:ff:e3:12:86:30:95:
         fa:bc:73:03:5c:d4:3d:33:34:34:2d:a1:fe:25:2e:d8:8c:04:
         ed:3e:32:20:64:2c:5f:9a:94:64:9d:74:65:c8:26:58:fa:83:
         a9:14:11:e0:1f:7d:05:9a:65:14:7c:8c:71:33:33:0a:73:76:
         18:c5:7c:30:d2:65:ea:09:a1:d5:83:aa:23:50:bc:6d:89:3f:
         81:d9:44:82:13:e4:34:0f:93:87:1c:0b:be:11:33:6c:df:70:
         91:25:9a:c3:e0:0c:38:bf:cf:fb:bb:8a:4c:8c:82:ad:fb:81:
         35:c9:4d:75:be:48:d4:e2:b6:92:bf:bd:58:0b:9f:63:43:5c:
         96:0a:fe:9c:46:29:2e:67:e4:19:35:86:5d:d7:08:24:6d:97:
         1b:d2:02:69:4c:bf:81:0f:2b:23:5e:36:7a:0b:70:90:2a:7b:
         fb:e5:c6:0e:cc:fa:14:c3:3a:b8:fc:61:22:59:7b:33:54:e6:
         84:44:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:14 2024 by rpki-client on console-ams.rpki-client.org