Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32303a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a32303a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          SiEN1Z3ryCIwptLlTAeG46lo3S91Ehr15Ay7J610ZbU=
Subject key identifier:   7D:AF:50:5A:11:57:4D:0E:A8:2A:96:20:DC:EE:6E:B1:89:B9:C8:DE
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       71FE1FA4D67841F0C37BF770824428F24C69956E
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32303a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:31 +0000
ROA not before:           Thu 24 Oct 2024 20:58:31 +0000
ROA not after:            Thu 23 Oct 2025 21:03:31 +0000
asID:                     54148
IP address blocks:        2602:fa43:20::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Dec 2024 16:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:fe:1f:a4:d6:78:41:f0:c3:7b:f7:70:82:44:28:f2:4c:69:95:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:31 2024 GMT
            Not After : Oct 23 21:03:31 2025 GMT
        Subject: CN=7DAF505A11574D0EA82A9620DCEE6EB189B9C8DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:87:5a:57:ce:1b:c6:4f:bc:86:f1:6d:94:fe:
                    5c:8d:ca:6f:3e:fe:a1:4c:1b:a4:f5:a8:05:c1:cf:
                    6b:ed:f2:ae:0a:5c:26:c2:74:3e:60:70:65:63:b7:
                    68:58:34:8c:c8:96:b3:22:e0:9f:07:72:79:22:96:
                    f8:c3:98:a0:be:d9:a0:ff:62:c2:f7:cc:45:61:79:
                    a0:01:28:d7:1b:35:a1:ad:03:a1:7d:15:51:5a:59:
                    88:1f:d2:8e:58:57:21:03:c0:a6:50:12:5f:4a:97:
                    2b:6a:da:b0:52:d1:e4:ab:14:70:89:8f:38:b9:33:
                    a7:3d:7f:82:30:6b:1b:08:29:40:20:92:21:ef:3d:
                    81:61:09:6b:25:e5:93:0f:eb:25:52:5e:e0:dc:6a:
                    4a:bd:b0:c2:1c:1d:83:03:ce:20:02:40:3e:08:58:
                    48:d2:38:34:7b:4e:09:72:f2:7c:49:e7:36:09:17:
                    ce:a6:db:e0:c3:a0:7f:4d:e3:2f:a1:a1:5c:70:06:
                    5c:bf:6b:c5:9d:55:08:f4:ac:93:9e:61:c2:74:ec:
                    34:b2:75:23:95:6e:90:0f:72:4c:42:d6:a4:5c:3b:
                    bb:09:db:c4:6c:b1:e3:54:b7:e7:75:86:06:a0:db:
                    aa:ee:61:99:df:a9:ed:a1:b7:e6:d6:21:04:03:82:
                    db:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AF:50:5A:11:57:4D:0E:A8:2A:96:20:DC:EE:6E:B1:89:B9:C8:DE
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32303a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:20::/46

    Signature Algorithm: sha256WithRSAEncryption
         91:d3:8e:29:6e:83:b1:da:cd:21:1b:4c:d5:3c:c4:37:03:c0:
         2e:83:d9:e8:a2:53:c6:c9:c7:1d:b2:71:fd:a1:25:50:f4:15:
         d6:5e:47:96:58:51:7b:9e:fa:10:8f:44:c5:ed:ad:fe:db:a8:
         08:1f:37:15:7a:c1:38:6d:c4:a3:cf:f5:36:51:0d:fe:f5:d0:
         35:7b:2e:7c:2b:03:e9:57:1c:f5:93:a9:b9:d2:ed:40:92:ff:
         90:17:40:2f:37:94:81:01:9e:d4:27:a6:ba:46:95:2b:d7:d6:
         41:1e:7c:49:42:42:73:d5:ca:fd:1e:5f:80:9f:17:03:25:c8:
         f0:0b:b3:3c:b1:31:3d:10:82:c2:0f:cf:ce:72:5b:6a:7a:54:
         2e:e5:c7:6e:cb:d4:cb:c3:db:d2:0d:27:92:52:1c:04:37:de:
         88:ba:1b:91:74:6a:4d:85:92:59:b5:9e:ac:b9:8f:16:84:10:
         b6:6d:e7:ab:8f:52:9d:7a:36:6f:55:5d:31:4d:d8:33:d1:7c:
         ba:df:d6:22:9b:b7:2c:94:93:bd:80:f8:79:1c:d2:5a:eb:51:
         0e:26:78:81:56:7d:ec:8f:0c:eb:88:e8:8b:3b:bd:98:d2:01:
         90:1f:08:b1:83:b5:00:5b:72:39:52:c9:b3:a0:43:1b:93:ae:
         7a:18:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 15:06:15 2024 by rpki-client on console-fra.rpki-client.org