Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          TW1tbF/kAM9Ux1fEmj3Sy7WnDIjFCR6Q9zBZmbSnJ+c=
Subject key identifier:   40:61:B4:9D:63:F6:7A:F5:85:14:ED:45:0C:E1:74:02:6A:38:8B:A2
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       308E8B6F59CC25CF3A1384C621920C3701EA5A0A
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:27 +0000
ROA not before:           Thu 24 Oct 2024 20:58:27 +0000
ROA not after:            Thu 23 Oct 2025 21:03:27 +0000
asID:                     54148
IP address blocks:        2602:fa43:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8e:8b:6f:59:cc:25:cf:3a:13:84:c6:21:92:0c:37:01:ea:5a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:27 2024 GMT
            Not After : Oct 23 21:03:27 2025 GMT
        Subject: CN=4061B49D63F67AF58514ED450CE174026A388BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:74:df:3a:02:34:72:78:01:a7:55:4f:e5:61:
                    ff:aa:b3:86:bd:35:31:56:e9:1a:16:d4:9c:88:96:
                    eb:c4:01:b6:c0:74:e8:5d:12:f4:cc:0a:d9:20:d3:
                    8b:f0:e2:93:8d:73:cc:5b:00:59:56:b0:66:4f:bb:
                    f0:de:47:e8:73:82:a7:8e:f7:ae:a0:83:bb:57:e8:
                    59:17:7d:f2:68:9d:db:35:d2:b4:0b:f7:14:db:3c:
                    84:43:f6:13:b1:45:b6:05:46:9a:87:2a:bf:8f:d0:
                    e8:b0:d2:8e:8f:3e:52:8b:a8:f7:b0:c7:9e:b0:6a:
                    79:33:ff:db:dd:91:74:d7:03:b8:84:6b:35:17:81:
                    44:e7:9c:8c:5e:66:8f:05:08:7a:a4:30:20:09:9d:
                    25:90:c7:6e:16:88:72:c4:a2:24:3a:74:90:fd:93:
                    b2:8f:06:cd:29:c7:1a:b2:a8:d3:c8:6f:da:04:e7:
                    76:f6:98:32:ff:99:ed:a4:8c:cc:6b:b6:28:56:b4:
                    39:77:aa:ae:a0:6a:4e:bc:e7:84:8f:92:c6:40:af:
                    95:c0:fc:2f:b3:c9:11:26:7f:34:8a:20:26:35:89:
                    34:ae:ec:39:d6:0c:1c:ff:02:fd:69:6c:85:39:64:
                    15:d6:08:5c:30:88:57:c2:3f:0c:81:e9:a3:f1:e9:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:61:B4:9D:63:F6:7A:F5:85:14:ED:45:0C:E1:74:02:6A:38:8B:A2
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a313a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:5a:e9:38:39:71:22:87:a6:9b:d1:ae:1c:24:26:da:42:e8:
         d5:d9:d1:b8:dd:9c:ba:3d:0e:5a:20:ed:57:5c:f4:64:82:78:
         32:55:1b:dc:96:4e:93:15:80:40:1b:46:33:19:c6:fe:01:7b:
         04:9b:ba:1e:f9:14:0e:91:94:a3:ce:98:54:cc:d8:38:80:a1:
         4e:05:d7:2f:ff:9f:60:5f:af:e7:a1:20:96:63:0e:39:3f:0f:
         e4:1f:ed:f1:d1:3a:15:65:1a:1b:3f:37:6b:e2:36:63:0e:7b:
         9c:65:3a:63:ab:6a:ed:3a:2d:08:d9:42:74:76:7c:8b:97:27:
         cd:82:78:65:8e:a6:9b:48:33:df:c6:f1:77:e5:67:da:9b:17:
         2b:c0:e3:fc:ca:40:76:fd:70:80:c7:58:d5:d7:1c:ce:db:bc:
         6b:fb:dd:d5:b6:3c:88:b0:c7:16:bc:90:4e:3e:85:0d:49:dc:
         0f:27:03:da:59:a6:8c:84:d9:e1:18:5d:a4:1f:b4:89:41:fa:
         63:88:3c:0c:00:e1:fc:c6:60:ec:bb:3e:d9:75:fa:40:fb:3a:
         cf:9e:f9:b6:79:19:15:83:2f:45:74:1f:83:96:93:4c:be:6e:
         3f:35:f9:7c:3a:a7:4e:78:94:aa:5c:9a:7c:27:21:3c:15:53:
         91:5f:b5:a8
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUMI6Lb1nMJc86E4TGIZIMNwHqWgowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTUyZGE3NGViMWI5MzcxNGI2N2NjNjFi
YzRmN2IxNTk1YTIxMzI3ODgwHhcNMjQxMDI0MjA1ODI3WhcNMjUxMDIzMjEwMzI3
WjAzMTEwLwYDVQQDEyg0MDYxQjQ5RDYzRjY3QUY1ODUxNEVENDUwQ0UxNzQwMjZB
Mzg4QkEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3TfOgI0cngB
p1VP5WH/qrOGvTUxVukaFtSciJbrxAG2wHToXRL0zArZINOL8OKTjXPMWwBZVrBm
T7vw3kfoc4KnjveuoIO7V+hZF33yaJ3bNdK0C/cU2zyEQ/YTsUW2BUaahyq/j9Do
sNKOjz5Si6j3sMeesGp5M//b3ZF01wO4hGs1F4FE55yMXmaPBQh6pDAgCZ0lkMdu
FohyxKIkOnSQ/ZOyjwbNKccasqjTyG/aBOd29pgy/5ntpIzMa7YoVrQ5d6quoGpO
vOeEj5LGQK+VwPwvs8kRJn80iiAmNYk0ruw51gwc/wL9aWyFOWQV1ghcMIhXwj8M
gemj8enfXQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFEBhtJ1j9nr1hRTtRQzhdAJq
OIuiMB8GA1UdIwQYMBaAFARA7JGuBOgEkb9mFzYJfzVpx9sbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyYmFjYjdhYmI3YTI4LzMv
MDQ0MEVDOTFBRTA0RTgwNDkxQkY2NjE3MzYwOTdGMzU2OUM3REIxQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2VlMWJkZmY4LWRiYjUtNGYwZi05OGU2LWM4ZTEzMjZiYTc5Yi83ZWNh
ZTMyMDQ5NTJkYTc0ZWIxYjkzNzE0YjY3Y2M2MWJjNGY3YjE1OTVhMjEzMjc4OC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5MmJh
Y2I3YWJiN2EyOC8zLzMyMzYzMDMyM2E2NjYxMzQzMzNhMzEzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzNTM0MzEzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6QwABMA0GCSqGSIb3
DQEBCwUAA4IBAQCJWuk4OXEih6ab0a4cJCbaQujV2dG43Zy6PQ5aIO1XXPRkgngy
VRvclk6TFYBAG0YzGcb+AXsEm7oe+RQOkZSjzphUzNg4gKFOBdcv/59gX6/noSCW
Yw45Pw/kH+3x0ToVZRobPzdr4jZjDnucZTpjq2rtOi0I2UJ0dnyLlyfNgnhljqab
SDPfxvF35WfamxcrwOP8ykB2/XCAx1jV1xzO27xr+93VtjyIsMcWvJBOPoUNSdwP
JwPaWaaMhNnhGF2kH7SJQfpjiDwMAOH8xmDsuz7ZdfpA+zrPnvm2eRkVgy9FdB+D
lpNMvm4/Nfl8OqdOeJSqXJp8JyE8FVORX7Wo
-----END CERTIFICATE-----
Generated at Thu Dec 12 14:40:46 2024 by rpki-client on console-ams.rpki-client.org