Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a313a3a2f34382d3438203d3e20323030333531.roa
File:                     323630323a666134333a313a3a2f34382d3438203d3e20323030333531.roa (raw, json)
Hash identifier:          VDc6/9+JZTufaOZk3b128PitkBqift1FtPFqOR8LcuQ=
Subject key identifier:   5B:62:86:B1:D2:88:BD:04:C5:25:2C:42:FD:60:F7:5F:78:75:9E:19
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       784405248BBAC0A1CE476B0B3BCC671CACBF35D9
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a313a3a2f34382d3438203d3e20323030333531.roa
Signing time:             Thu 24 Oct 2024 21:03:28 +0000
ROA not before:           Thu 24 Oct 2024 20:58:28 +0000
ROA not after:            Thu 23 Oct 2025 21:03:28 +0000
asID:                     200351
IP address blocks:        2602:fa43:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:44:05:24:8b:ba:c0:a1:ce:47:6b:0b:3b:cc:67:1c:ac:bf:35:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:28 2024 GMT
            Not After : Oct 23 21:03:28 2025 GMT
        Subject: CN=5B6286B1D288BD04C5252C42FD60F75F78759E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:ee:c9:b6:27:44:8e:d4:ef:b4:a4:78:0a:
                    a9:ac:0b:eb:26:e9:22:4f:ea:35:e6:b2:15:43:c0:
                    2b:2a:3a:fc:d4:f5:f3:0c:4f:1e:eb:20:ff:5d:49:
                    94:71:92:9c:ef:e4:e5:1d:c3:68:87:de:9e:a3:b8:
                    a7:b5:7a:af:61:cb:4b:8f:f9:ae:dc:0d:6e:56:dd:
                    50:56:08:c4:52:c0:88:ec:95:4c:6f:9c:80:84:62:
                    41:53:c6:90:54:1f:47:f0:fc:d3:64:07:69:bc:22:
                    70:78:15:90:c6:be:a2:ac:81:8e:04:ab:7c:46:8d:
                    25:d3:8b:29:57:16:9c:4d:87:8a:10:c8:91:20:6d:
                    8e:43:6a:eb:65:67:0c:ac:23:e4:1a:2b:50:67:67:
                    89:ec:99:1e:f2:14:ff:c5:ca:21:4e:42:5e:09:f8:
                    24:2c:b5:de:8d:db:fc:03:3a:9c:35:83:d2:a3:49:
                    ed:d7:45:61:94:6f:e3:18:77:ec:97:e4:ab:95:f2:
                    5e:8f:a1:0f:c3:68:5b:40:bd:64:36:82:4f:a2:99:
                    84:f5:bf:4f:7f:38:86:da:2e:11:1f:a3:31:24:62:
                    96:bb:2e:92:66:e9:55:c6:f6:88:6c:53:58:92:1d:
                    e2:46:4f:63:70:ca:47:e6:df:07:f8:ef:e7:e3:fd:
                    88:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:62:86:B1:D2:88:BD:04:C5:25:2C:42:FD:60:F7:5F:78:75:9E:19
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a313a3a2f34382d3438203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:a1:cf:19:1b:5b:fb:08:8c:45:5d:78:05:71:54:2a:60:37:
         0f:67:38:56:7d:63:f1:80:c8:02:13:c1:7f:4b:26:8b:4d:d2:
         b0:d5:49:9c:96:68:bb:aa:a3:da:86:71:86:78:33:02:78:0f:
         fd:7d:ef:89:7f:68:4f:9a:b1:8b:cd:a5:24:17:b6:58:ff:5c:
         a5:a4:c8:b1:05:8d:f8:01:2d:ca:97:e4:0a:fb:ca:8c:59:10:
         a3:15:db:0f:98:c6:9b:a2:63:15:ec:2a:fd:02:1b:27:34:44:
         03:30:20:82:81:c4:ad:17:87:1e:85:3f:e3:ba:28:23:48:2d:
         85:ad:9c:8c:52:0d:d6:a1:b6:fa:7a:a3:ef:19:f1:e9:63:41:
         be:07:f4:15:7d:6d:a3:65:12:c6:87:06:70:74:ff:30:fe:79:
         18:a2:b0:6b:b2:b6:30:a4:e9:33:0d:42:94:62:b9:58:80:8a:
         4b:5f:d7:d5:91:ca:c2:5c:ad:d5:4c:a1:90:bd:6c:33:9b:ce:
         45:01:dd:96:bf:40:30:9f:93:6c:15:11:9b:80:c9:9d:85:53:
         c5:1d:6c:49:67:65:3c:b0:12:91:1d:a7:b9:41:41:ce:69:5c:
         61:bd:b8:78:7a:98:ab:20:fa:5f:20:de:7a:43:43:51:d3:08:
         5f:7d:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:12:54 2024 by rpki-client on console-ams.rpki-client.org