Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a343a3a2f34382d3438203d3e20323135333634.roa
File:                     323630323a663764633a343a3a2f34382d3438203d3e20323135333634.roa (raw, json)
Hash identifier:          zLvIaBNeJwLwWdChjA1DPS8lTx1qOZJUR9Fp/2uCXW8=
Subject key identifier:   F0:D7:5E:F5:38:BD:6D:B3:5C:93:A7:E7:C8:67:44:C3:B5:2B:80:9E
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       4175530D622BDC428E10999254EC0784CB15DD7B
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a343a3a2f34382d3438203d3e20323135333634.roa
Signing time:             Thu 14 Nov 2024 16:07:00 +0000
ROA not before:           Thu 14 Nov 2024 16:02:00 +0000
ROA not after:            Thu 13 Nov 2025 16:07:00 +0000
asID:                     215364
IP address blocks:        2602:f7dc:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:75:53:0d:62:2b:dc:42:8e:10:99:92:54:ec:07:84:cb:15:dd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Nov 14 16:02:00 2024 GMT
            Not After : Nov 13 16:07:00 2025 GMT
        Subject: CN=F0D75EF538BD6DB35C93A7E7C86744C3B52B809E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:fe:58:c1:0c:18:02:da:6e:71:90:58:e5:
                    e5:e5:8c:fc:e0:6d:b3:3b:49:6a:59:d8:af:e7:f9:
                    a7:31:1c:ba:33:2f:e1:54:7b:63:0f:e5:8b:84:82:
                    fe:f6:c9:4a:c1:4d:87:11:32:75:0b:84:d2:f0:4a:
                    30:86:27:68:63:16:72:b4:e0:55:03:b5:f8:a5:b4:
                    e0:c8:53:a2:e0:7f:be:3b:b2:ef:62:7c:c5:48:70:
                    4c:bc:19:3a:7b:b3:19:47:bd:d7:ba:0c:07:cc:b6:
                    b7:1b:4b:8a:fb:2c:ba:75:04:b4:cf:37:46:ae:fe:
                    46:b0:93:d3:1f:02:74:cf:03:0b:29:98:5f:aa:ed:
                    fa:5d:75:3c:7b:c1:1e:f6:f3:b4:52:3e:70:39:35:
                    8a:93:f6:f2:3c:21:87:51:29:ab:b2:a5:49:7b:0c:
                    35:7b:ff:76:61:32:1c:51:14:a0:a2:9b:01:5e:02:
                    d1:53:ae:06:d1:54:07:d9:01:af:ef:43:dc:ce:26:
                    3a:7a:58:d1:2d:51:d4:07:00:13:de:8a:b4:bd:41:
                    de:ee:2b:42:85:42:8b:d0:d5:47:34:83:60:9a:57:
                    77:8f:bc:1e:74:4d:86:0e:0e:70:7b:67:e5:2f:91:
                    f3:09:45:ca:f1:cd:6b:a8:13:53:82:5d:74:e2:99:
                    60:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D7:5E:F5:38:BD:6D:B3:5C:93:A7:E7:C8:67:44:C3:B5:2B:80:9E
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/323630323a663764633a343a3a2f34382d3438203d3e20323135333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7dc:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:62:ee:69:bb:bc:67:25:47:1f:19:d6:04:c4:b2:22:6f:c8:
         0f:90:ec:77:98:55:d1:42:c5:a7:85:6f:b4:84:84:85:3d:7a:
         95:3b:eb:60:18:49:43:68:d9:dd:95:9d:50:1d:40:18:c5:1b:
         2d:14:69:51:f4:26:c8:a5:9b:10:b2:7b:90:f4:49:15:c5:da:
         2f:bb:21:5b:78:41:28:99:f7:aa:61:55:2e:78:f8:82:c9:73:
         7b:34:94:55:1d:fa:7f:28:fa:9b:bd:54:25:66:3c:21:96:5c:
         8a:27:3d:d3:ed:a7:86:73:7b:48:ad:03:16:a4:ab:df:7d:5d:
         dd:7f:78:14:f8:ae:34:67:31:49:e0:cf:43:4c:87:fa:5b:3a:
         af:ed:74:f1:1d:87:39:60:2b:84:c4:89:92:65:ef:2f:23:5e:
         06:ca:57:ec:0d:53:fa:53:9e:79:ad:12:43:7b:51:b6:9a:90:
         7c:cb:89:85:5e:41:f0:15:12:d1:fa:31:81:95:b3:a9:de:da:
         d8:26:f9:4d:83:2f:ef:0a:eb:40:58:69:21:23:f6:01:75:af:
         17:77:b1:d9:d7:d2:85:71:bd:11:2c:5c:9d:a0:b0:f4:8f:57:
         a2:9d:cc:af:33:a5:e6:0b:8b:91:53:2c:b6:f0:47:f8:2a:91:
         ab:2a:26:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:49 2024 by rpki-client on console-fra.rpki-client.org