Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a333a3a2f34382d3438203d3e20343031333836.roa
File:                     323630323a663764633a333a3a2f34382d3438203d3e20343031333836.roa (raw, json)
Hash identifier:          go+yZl6czKsroMkjrf+dmkcZO1bOjICPg8UUO4S7jYk=
Subject key identifier:   78:66:0B:EF:71:57:23:84:EE:3D:28:C3:AA:CE:46:51:AB:A0:42:65
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       3D05FF3753B21E60E410F79FB8F153050E922039
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a333a3a2f34382d3438203d3e20343031333836.roa
Signing time:             Fri 18 Oct 2024 00:38:19 +0000
ROA not before:           Fri 18 Oct 2024 00:33:19 +0000
ROA not after:            Fri 17 Oct 2025 00:38:19 +0000
asID:                     401386
IP address blocks:        2602:f7dc:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:05:ff:37:53:b2:1e:60:e4:10:f7:9f:b8:f1:53:05:0e:92:20:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Oct 18 00:33:19 2024 GMT
            Not After : Oct 17 00:38:19 2025 GMT
        Subject: CN=78660BEF71572384EE3D28C3AACE4651ABA04265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:f0:b5:b6:53:67:e5:cc:46:89:54:fb:4c:
                    4a:16:41:08:bc:7a:d9:64:51:3f:86:ab:da:79:bc:
                    3a:17:c4:ea:52:f2:44:8a:73:17:33:10:49:94:22:
                    8e:0c:f1:17:57:34:9c:c6:03:c8:9b:38:7f:a2:58:
                    c1:39:f4:74:ca:67:a0:17:db:84:94:4d:94:ab:ca:
                    d4:43:8d:cd:d4:42:e1:92:ac:96:82:bc:01:28:06:
                    86:7d:14:e9:29:f7:24:14:8b:58:f8:88:d9:29:ff:
                    b0:ea:5a:53:0d:6e:a8:ea:8a:ca:d3:27:39:ff:eb:
                    f1:77:59:1d:a5:c1:c0:4b:8b:10:4d:38:e6:e6:2c:
                    de:d5:4d:40:2a:ed:ad:49:32:e7:f0:d2:76:3e:0f:
                    ac:d2:3f:95:cd:77:db:5d:35:80:42:66:0c:fe:a7:
                    fe:a4:ff:c5:b9:f6:67:6f:83:05:4e:1a:b2:f5:ab:
                    f2:1d:47:82:79:c1:24:de:de:61:60:bf:7a:31:71:
                    57:64:59:e3:f7:a0:52:cc:73:df:59:d0:4a:27:86:
                    2c:21:ba:0f:bd:e8:71:f5:75:99:8f:d5:19:c7:79:
                    d3:34:40:b2:55:5c:f4:c9:a7:de:d1:87:f6:38:91:
                    fd:af:f9:1f:9c:8c:f1:25:e2:9d:dd:68:0a:70:66:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:66:0B:EF:71:57:23:84:EE:3D:28:C3:AA:CE:46:51:AB:A0:42:65
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a333a3a2f34382d3438203d3e20343031333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:a9:63:a8:41:2f:ad:2a:0a:3f:e3:16:65:c0:66:b9:f6:ba:
         c4:cf:c2:f3:df:c3:3d:b2:c8:1a:b0:99:7d:a0:0e:08:14:da:
         4f:3c:79:01:ac:23:9f:b2:c7:d4:de:d4:8a:f6:61:e7:48:02:
         d7:2f:a8:a5:0b:15:c6:b9:38:11:dd:a8:04:32:28:61:54:9a:
         27:cc:8b:fe:64:a6:29:42:87:5c:37:50:4c:7e:f6:f7:e0:aa:
         99:e2:aa:c0:b0:2e:6f:c2:7b:50:4d:1f:f1:e6:12:52:4f:a1:
         07:2b:01:8e:df:13:0f:d9:18:d2:a2:22:4e:fe:68:0f:b8:f6:
         f3:08:02:4e:51:d8:b7:95:9e:8f:1b:c6:6e:79:98:e1:2a:cd:
         ac:a6:8b:14:24:c6:af:0c:3f:1f:66:71:4e:79:2b:a5:3a:5e:
         5e:fd:58:ae:aa:d1:cf:c5:f7:3a:cb:23:d7:c3:fa:73:72:bb:
         3e:69:52:8e:96:26:a0:54:3c:b5:79:11:25:0e:f9:8c:14:7d:
         5c:35:fd:8b:10:6d:cf:66:50:60:f5:6d:f1:75:ce:07:03:4e:
         81:be:a2:46:a9:a6:36:ce:d3:9d:40:95:f1:39:a7:7e:c4:00:
         f7:3f:71:c9:d9:cd:2d:8a:e2:f8:d4:fa:ea:e8:ef:b3:bb:63:
         3b:88:66:48
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUPQX/N1OyHmDkEPefuPFTBQ6SIDkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVl
MzRlM2JmZjNjYjUxNmU1NTYwHhcNMjQxMDE4MDAzMzE5WhcNMjUxMDE3MDAzODE5
WjAzMTEwLwYDVQQDEyg3ODY2MEJFRjcxNTcyMzg0RUUzRDI4QzNBQUNFNDY1MUFC
QTA0MjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5jwtbZTZ+XM
RolU+0xKFkEIvHrZZFE/hqvaebw6F8TqUvJEinMXMxBJlCKODPEXVzScxgPImzh/
oljBOfR0ymegF9uElE2Uq8rUQ43N1ELhkqyWgrwBKAaGfRTpKfckFItY+IjZKf+w
6lpTDW6o6orK0yc5/+vxd1kdpcHAS4sQTTjm5ize1U1AKu2tSTLn8NJ2Pg+s0j+V
zXfbXTWAQmYM/qf+pP/FufZnb4MFThqy9avyHUeCecEk3t5hYL96MXFXZFnj96BS
zHPfWdBKJ4YsIboPvehx9XWZj9UZx3nTNECyVVz0yafe0Yf2OJH9r/kfnIzxJeKd
3WgKcGZZ6wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFHhmC+9xVyOE7j0ow6rORlGr
oEJlMB8GA1UdIwQYMBaAFKsu+I8kdJ9aEg363mfJGOTHEMU+MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyOTA4YjNlMjg1MTRhLzAv
QUIyRUY4OEYyNDc0OUY1QTEyMERGQURFNjdDOTE4RTRDNzEwQzUzRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdkOTFhMi8wY2M4
NTdkMDVlZmJiMzUwMjMwNTIwZDA4YzhkN2Y0NWUzNGUzYmZmM2NiNTE2ZTU1Ni5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjkw
OGIzZTI4NTE0YS8wLzMyMzYzMDMyM2E2NjM3NjQ2MzNhMzMzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzNDMwMzEzMzM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvfcAAMwDQYJKoZI
hvcNAQELBQADggEBAA2pY6hBL60qCj/jFmXAZrn2usTPwvPfwz2yyBqwmX2gDggU
2k88eQGsI5+yx9Te1Ir2YedIAtcvqKULFca5OBHdqAQyKGFUmifMi/5kpilCh1w3
UEx+9vfgqpniqsCwLm/Ce1BNH/HmElJPoQcrAY7fEw/ZGNKiIk7+aA+49vMIAk5R
2LeVno8bxm55mOEqzaymixQkxq8MPx9mcU55K6U6Xl79WK6q0c/F9zrLI9fD+nNy
uz5pUo6WJqBUPLV5ESUO+YwUfVw1/YsQbc9mUGD1bfF1zgcDToG+okappjbO051A
lfE5p37EAPc/ccnZzS2K4vjU+uro77O7YzuIZkg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:49 2024 by rpki-client on console-fra.rpki-client.org