Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          QwDYKn3PAh+FLe2c87LEvmACx4Y70q+pi7OR4zF5GTs=
Subject key identifier:   DB:4C:E8:2F:93:F9:8C:B3:AA:A2:EB:2F:F8:92:B1:1C:F8:C4:11:11
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       371366AAB7A1B9EA08082DAD6B0EB0462B798F4D
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:26 +0000
ROA not before:           Thu 24 Oct 2024 20:58:26 +0000
ROA not after:            Thu 23 Oct 2025 21:03:26 +0000
asID:                     54148
IP address blocks:        2602:fa43:28::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Dec 2024 16:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:13:66:aa:b7:a1:b9:ea:08:08:2d:ad:6b:0e:b0:46:2b:79:8f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:26 2024 GMT
            Not After : Oct 23 21:03:26 2025 GMT
        Subject: CN=DB4CE82F93F98CB3AAA2EB2FF892B11CF8C41111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:45:bf:be:18:97:13:a5:2a:cb:47:08:24:73:
                    d1:63:2e:0a:6f:9b:60:84:f5:e2:b2:46:f8:db:6e:
                    b9:32:8c:6b:88:6a:b5:1f:91:f5:a3:44:7d:5a:de:
                    4b:35:be:24:3a:ac:1d:21:0d:c5:ac:a6:3b:3f:47:
                    62:cd:68:3b:80:c4:3a:4c:58:6c:d2:79:fc:89:a2:
                    85:04:85:7d:20:b7:9d:ef:d6:04:46:1d:ba:9c:6f:
                    9a:38:7d:9c:13:33:4b:0f:8d:df:64:9e:31:dd:f6:
                    12:bc:be:ec:14:98:25:99:cd:4d:92:60:79:7c:6b:
                    89:f9:78:f9:83:a6:77:de:0b:b2:d0:56:39:7a:6f:
                    1f:74:62:0a:98:70:80:2c:d4:73:c3:ab:b7:fa:0a:
                    04:61:9c:3c:60:3e:ad:73:7b:88:f7:f2:25:64:5c:
                    04:9b:9c:bf:fb:c7:10:63:d9:5c:7c:44:08:cc:cf:
                    c1:e8:17:8f:a0:34:55:bf:42:73:3d:ee:c3:82:3e:
                    22:dd:b8:84:1e:f9:bb:ab:15:30:20:6c:a5:f6:85:
                    b9:89:25:6e:99:5f:76:c9:c1:04:ab:3a:41:b9:a5:
                    7c:03:1d:cd:a4:79:7a:ba:aa:fb:89:40:65:0e:9f:
                    4f:d8:56:13:f7:33:7e:93:08:5e:6e:ef:9f:d7:c9:
                    09:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4C:E8:2F:93:F9:8C:B3:AA:A2:EB:2F:F8:92:B1:1C:F8:C4:11:11
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a32383a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:28::/46

    Signature Algorithm: sha256WithRSAEncryption
         a2:fe:6e:ba:1e:63:24:cd:90:da:36:b5:67:c7:5b:13:88:7e:
         6e:0b:83:80:cc:fa:10:75:ef:f6:ea:f9:01:01:a2:6b:0a:6f:
         83:0c:4a:c1:7b:03:42:d4:df:a9:c4:c0:6b:78:ae:e0:b6:61:
         10:1c:d9:cc:60:63:9b:f5:1a:30:80:0d:47:dc:b8:b3:6e:f1:
         73:26:d1:51:e2:69:d9:dd:7a:ff:9f:41:cb:ed:9a:c3:09:68:
         03:02:00:ce:f1:04:98:37:5d:09:19:e5:55:9b:8b:d9:0f:52:
         e2:02:74:fd:a0:bd:d0:91:39:6b:4c:ea:4f:90:34:83:8c:09:
         8d:7f:34:ae:68:bc:f7:77:64:42:ab:ac:fe:4a:4f:28:2a:af:
         3e:73:6d:c2:94:28:f3:55:ca:c1:65:00:e7:ec:83:2b:a4:5d:
         37:fa:70:b6:be:b8:24:13:f6:02:cd:63:21:15:d5:c5:13:ba:
         f3:0e:de:41:42:57:ea:22:a0:d1:85:b2:71:dd:33:e7:90:9c:
         d5:62:d7:d4:60:71:8d:73:24:64:8a:6d:75:7d:75:27:4b:cd:
         3e:d9:1b:5b:f4:56:3a:67:13:28:be:e5:d4:a8:17:bc:7a:23:
         5a:a1:67:8d:fd:64:30:fb:f1:fc:c5:42:37:76:41:02:c0:cc:
         f7:da:06:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 15:06:15 2024 by rpki-client on console-fra.rpki-client.org