Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31303a3a2f34342d3434203d3e203534313438.roa
File:                     323630323a666134333a31303a3a2f34342d3434203d3e203534313438.roa (raw, json)
Hash identifier:          gvFzhmfe+nIkgfSCmo3fk8GhKI25i2r1FcHhMXEQDbg=
Subject key identifier:   3D:44:B2:EE:43:A3:4C:2F:26:E8:50:92:04:F7:D4:CB:AA:57:E3:9C
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       0378ADC3A5F521CCA66FEA7D6BA97AE5788DFAFA
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31303a3a2f34342d3434203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:27 +0000
ROA not before:           Thu 24 Oct 2024 20:58:27 +0000
ROA not after:            Thu 23 Oct 2025 21:03:27 +0000
asID:                     54148
IP address blocks:        2602:fa43:10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Dec 2024 16:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:78:ad:c3:a5:f5:21:cc:a6:6f:ea:7d:6b:a9:7a:e5:78:8d:fa:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:27 2024 GMT
            Not After : Oct 23 21:03:27 2025 GMT
        Subject: CN=3D44B2EE43A34C2F26E8509204F7D4CBAA57E39C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:36:bc:00:d7:45:3f:e9:87:0b:f4:33:7d:
                    fb:83:90:1d:49:2a:9e:0e:9f:0c:8b:11:3c:f2:b0:
                    4e:0b:08:80:19:3c:92:46:bc:aa:36:8d:ee:9c:7e:
                    0f:92:e6:3e:8f:3a:e0:5d:03:81:b2:cd:63:58:be:
                    77:83:50:a9:26:0b:a8:7a:7f:f0:04:d4:11:a3:3f:
                    c6:75:fe:5a:0e:14:1e:2f:9b:67:d2:89:51:b0:25:
                    cc:6c:c0:19:f3:80:d6:b0:3b:f7:8b:bc:a0:8f:ec:
                    15:30:e5:72:5c:de:13:74:f0:3f:ac:68:35:00:05:
                    63:6e:02:75:0e:da:cb:68:9a:33:c9:7e:b0:be:ec:
                    72:1d:22:f7:63:00:0f:d6:7f:05:b1:84:a5:5d:9e:
                    2c:cc:22:d1:90:14:d2:fc:34:a5:72:05:d0:cb:f1:
                    99:1f:f7:72:00:7a:bf:10:41:03:4a:d4:50:59:11:
                    3f:cc:8c:d6:ea:c2:e2:ed:6c:cc:11:04:e3:4d:a8:
                    ca:40:42:7d:ae:79:24:36:5a:f8:6c:96:8f:e2:86:
                    c4:8c:7c:41:c4:f2:b2:e5:62:6c:6d:d1:7c:c8:a7:
                    dd:fc:36:27:88:8c:69:92:cf:13:d3:ad:4b:3a:12:
                    ad:ee:55:ae:3d:d5:f1:1f:73:ea:93:09:c3:db:bb:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:44:B2:EE:43:A3:4C:2F:26:E8:50:92:04:F7:D4:CB:AA:57:E3:9C
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a31303a3a2f34342d3434203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         44:00:61:10:ad:18:5b:63:f9:51:63:64:52:18:4e:a1:56:84:
         a2:4e:f1:06:e6:c0:44:cc:35:6e:16:b0:0f:b7:64:3e:37:0e:
         37:53:85:a3:6e:36:5b:1f:5b:07:83:72:47:5c:f2:35:52:3b:
         f0:65:e7:40:13:ca:24:70:c8:d2:6a:cc:b5:ea:3e:52:e1:8c:
         b8:b8:07:c3:e1:d5:8b:25:4b:c3:b5:a8:5a:c5:63:47:ce:26:
         fe:dd:34:69:0c:df:6b:96:a1:bd:24:59:d7:4a:a0:07:0f:e9:
         a4:23:9e:3d:8e:98:45:aa:2d:75:97:0b:c8:30:c7:5f:69:67:
         68:e7:b3:56:f4:e5:40:b0:be:91:ff:7d:94:79:89:ac:a6:bb:
         bc:7f:5b:52:f7:98:8c:43:13:5e:23:89:55:b8:47:bd:67:52:
         7c:14:22:5a:3a:df:21:53:5e:08:db:f0:3a:c1:9b:da:1d:ee:
         48:bd:f1:2b:3f:84:73:60:c4:f8:4f:14:cd:10:82:c2:9e:e8:
         88:20:0d:05:dc:c0:9d:6b:94:56:bc:07:16:7d:ab:d6:ec:d2:
         5e:0f:68:98:19:74:d0:7a:47:6e:70:12:89:b0:aa:13:1b:5a:
         07:12:1e:cd:ca:c3:c4:62:62:c7:60:dd:87:b5:36:55:f9:0a:
         c9:56:f1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 15:06:15 2024 by rpki-client on console-fra.rpki-client.org