Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a323a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a323a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          R5b3weq/ttdJHRA7HUeAAaq9dAKDQbxBR9XX2c1kGBg=
Subject key identifier:   C5:EB:89:6C:69:E7:2B:43:E0:F1:3A:D9:D7:7E:8D:6A:7D:35:CE:57
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       1432961B2A074151A558DE7739EBAB510D5789AF
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a323a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:29 +0000
ROA not before:           Thu 24 Oct 2024 20:58:29 +0000
ROA not after:            Thu 23 Oct 2025 21:03:29 +0000
asID:                     54148
IP address blocks:        2602:fa43:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Dec 2024 16:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:32:96:1b:2a:07:41:51:a5:58:de:77:39:eb:ab:51:0d:57:89:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:29 2024 GMT
            Not After : Oct 23 21:03:29 2025 GMT
        Subject: CN=C5EB896C69E72B43E0F13AD9D77E8D6A7D35CE57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e0:2a:82:c2:0e:c5:41:5f:ca:1e:69:12:96:
                    61:5d:9b:3a:67:b2:ae:9f:f0:0d:90:ae:48:80:03:
                    f2:d0:89:6d:98:a6:4b:49:f1:06:d5:ea:1a:d5:fc:
                    d4:49:cb:dc:a2:d1:f4:eb:b2:e6:02:c2:e3:43:8d:
                    f6:f1:cf:38:ad:97:b7:11:7f:8b:ec:bf:4f:a7:e1:
                    39:0a:cd:31:df:84:a1:6a:5b:4c:7f:82:0e:da:94:
                    d7:53:1e:ce:c8:10:20:5a:76:cf:05:ef:b6:cd:ab:
                    e1:51:bf:91:21:b1:fa:34:3e:ab:bb:15:26:08:b9:
                    f3:e6:2a:14:b6:48:9a:22:85:60:d4:bd:30:38:15:
                    92:96:be:fc:b8:90:4b:47:41:ff:4b:e4:9e:cf:24:
                    4a:f0:6b:d5:a6:59:94:19:76:5f:92:e5:d9:b4:5a:
                    55:eb:09:80:fa:0f:b1:08:48:d1:eb:77:9b:b3:56:
                    71:88:9e:91:63:ac:86:a0:9f:97:fc:09:3c:5a:d8:
                    bc:b9:56:16:d8:0d:82:7d:ed:99:77:32:9f:35:ba:
                    50:b5:61:bf:fa:c0:57:41:46:ac:d9:92:68:ef:76:
                    38:ac:d7:dd:0e:fb:16:5f:e4:16:58:d1:6b:06:a9:
                    88:b7:ec:be:b4:d4:78:9d:e3:86:ba:d8:af:92:27:
                    30:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EB:89:6C:69:E7:2B:43:E0:F1:3A:D9:D7:7E:8D:6A:7D:35:CE:57
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a323a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:01:db:1e:99:f5:d4:86:80:a3:75:db:ca:1e:5e:b7:fe:39:
         7a:05:40:dd:6e:50:d2:be:0b:1b:f2:ef:99:52:09:6b:fa:2f:
         b0:97:c0:74:9d:b2:aa:e9:dc:37:95:9f:f4:f7:58:a0:5c:9b:
         a8:6a:63:b6:4f:57:64:b9:17:d6:21:47:82:9f:f9:4d:a9:4f:
         26:f6:02:a2:22:0a:36:a8:a1:a8:d4:64:e4:b5:fc:b6:c5:83:
         0f:97:61:7c:1d:43:a3:66:34:ae:6a:d9:41:63:ca:55:ee:06:
         f5:ee:a1:3d:8f:b6:c4:eb:ac:4d:9d:d3:69:84:69:69:ec:44:
         38:6e:60:e4:7c:6f:1c:75:77:c5:c5:d1:23:0f:45:d7:e2:8a:
         fb:84:39:7f:2d:d5:df:93:50:fe:bf:59:52:4c:36:31:59:36:
         55:01:1d:ec:0b:06:50:f2:fb:0c:1b:83:24:bc:fb:95:12:46:
         ab:c3:37:92:08:6f:1c:24:6a:cd:a0:41:ac:1a:65:4e:2d:32:
         69:60:c8:09:30:d1:5e:a7:cc:3f:fe:9a:cd:33:f0:f7:54:dc:
         80:90:3e:95:5b:a9:64:6e:70:2d:72:b3:59:e1:f1:c9:30:6c:
         f9:d9:70:d7:9e:f3:8b:3a:ba:3d:04:e8:f8:be:a3:73:3e:19:
         b1:4d:80:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 15:06:15 2024 by rpki-client on console-fra.rpki-client.org