Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          Ad86Kz7jpG1U3wFKb44B2MRLyVnLQ/WR1Q9nIA6L2+E=
Subject key identifier:   E5:D4:9E:19:A9:F8:F9:D6:A9:D7:57:92:27:8D:E8:3C:52:E4:35:32
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       331B78F5293670FAD6AB88D406D74FE617004D79
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:26 +0000
ROA not before:           Thu 24 Oct 2024 20:58:26 +0000
ROA not after:            Thu 23 Oct 2025 21:03:26 +0000
asID:                     54148
IP address blocks:        2602:fa43:24::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Dec 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1b:78:f5:29:36:70:fa:d6:ab:88:d4:06:d7:4f:e6:17:00:4d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:26 2024 GMT
            Not After : Oct 23 21:03:26 2025 GMT
        Subject: CN=E5D49E19A9F8F9D6A9D75792278DE83C52E43532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:88:13:4a:f6:18:eb:7d:8d:5b:ba:ea:86:13:
                    ef:f5:3b:87:a5:43:85:52:95:4a:5e:10:91:6b:53:
                    4a:ac:22:3d:bb:7a:e4:58:6d:76:cf:27:9d:97:62:
                    c4:de:16:61:6b:60:e2:c2:3f:28:37:a3:07:c0:0b:
                    8d:ac:78:15:ee:f8:9a:8b:83:72:e1:4e:7d:7f:f4:
                    95:a9:22:ee:ed:fe:fc:bd:35:27:84:10:e4:aa:48:
                    5d:f0:e2:40:ec:46:8c:bb:11:db:68:e9:80:9b:01:
                    17:fa:67:cc:2a:92:31:82:ef:22:bb:6f:cb:83:bb:
                    8b:73:f8:3c:bd:dd:1a:bf:ab:4b:e3:2d:ad:7d:66:
                    b0:52:ba:5c:9c:45:0f:db:d2:91:3e:31:c1:b2:f3:
                    57:87:84:84:af:0a:2d:1d:c7:22:05:71:78:07:1b:
                    a9:9c:17:98:e8:b1:57:54:80:df:52:c4:63:ed:26:
                    87:fa:89:cb:20:3e:ad:1d:d8:90:52:82:f6:5c:15:
                    75:71:50:82:9f:85:e6:85:60:18:6c:11:c3:0e:f3:
                    ca:a3:10:58:02:84:00:5b:71:e6:d9:8e:37:29:33:
                    13:96:45:7f:ff:ac:ff:71:64:50:8f:13:40:32:97:
                    95:b3:21:6f:11:11:19:a0:d4:8e:1d:cf:e4:9f:2e:
                    4a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D4:9E:19:A9:F8:F9:D6:A9:D7:57:92:27:8D:E8:3C:52:E4:35:32
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32343a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:24::/46

    Signature Algorithm: sha256WithRSAEncryption
         84:1c:47:a2:1b:0c:88:52:00:7c:d3:e5:c7:43:7d:2a:5a:ad:
         2f:bd:d8:56:67:65:32:11:91:2f:29:99:cd:13:50:2a:50:8c:
         73:61:bb:a3:b1:e9:34:41:25:a3:33:75:51:49:01:54:90:a4:
         f3:c3:9d:f5:b6:17:a1:c5:c0:09:37:d4:20:2a:4e:40:e6:73:
         b2:77:09:6e:b6:d5:5b:a1:3d:11:fe:32:73:14:47:5b:38:8f:
         6b:1a:be:0a:9e:16:41:aa:00:5a:9a:5b:de:51:b6:3c:a0:07:
         fb:95:02:93:14:2f:d6:4a:b6:26:7a:c9:c3:05:bc:47:f8:61:
         b2:5c:c3:7b:51:a2:5f:95:c0:73:65:ec:40:93:14:df:14:5e:
         46:8f:f3:c4:46:75:98:88:67:96:c2:94:53:54:fa:4d:1d:26:
         e1:7a:b4:a1:5b:66:89:2e:9e:2f:83:1d:b0:e9:5b:01:b4:9f:
         30:3a:07:42:dd:5a:4c:9e:26:d2:6d:e5:70:c1:9a:b2:81:c4:
         22:fc:fc:78:d5:5d:80:9b:90:df:0a:74:b1:75:31:cf:04:1e:
         0b:e9:d0:62:fe:17:3f:c1:2a:34:66:6c:70:f8:a5:ff:f8:22:
         b5:e9:6a:b5:3c:54:c9:a7:af:fb:a8:1a:d9:ba:fc:20:c5:46:
         89:55:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 14:40:46 2024 by rpki-client on console-ams.rpki-client.org