Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a33383a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a33383a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          hMmSfbtkphFLgFBhao5v2m0l4bQldakP+Ghn9agc3wU=
Subject key identifier:   F4:72:3A:B8:81:1A:B1:5D:D9:BF:D6:69:3E:86:B8:E9:91:14:A6:C2
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       759C4E4C1CD68AB2B63EDF45F5BD8B925F55BD8C
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a33383a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:31 +0000
ROA not before:           Thu 24 Oct 2024 20:58:31 +0000
ROA not after:            Thu 23 Oct 2025 21:03:31 +0000
asID:                     54148
IP address blocks:        2602:fa43:38::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9c:4e:4c:1c:d6:8a:b2:b6:3e:df:45:f5:bd:8b:92:5f:55:bd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:31 2024 GMT
            Not After : Oct 23 21:03:31 2025 GMT
        Subject: CN=F4723AB8811AB15DD9BFD6693E86B8E99114A6C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:0f:39:d1:7c:62:11:90:98:40:dc:b9:ad:
                    44:79:36:fa:09:fd:92:52:35:81:5c:00:1f:64:34:
                    af:aa:93:f7:2f:f9:43:57:14:03:9f:ef:79:d3:06:
                    b7:6e:89:c3:df:ff:44:82:7e:d9:96:33:03:bd:e5:
                    d1:68:96:0b:53:7c:34:1d:76:d5:30:c5:9d:91:6d:
                    80:d5:bb:60:d8:da:48:f7:64:4d:6f:a1:d5:30:91:
                    d9:32:ce:22:76:4c:e3:ac:08:36:98:de:24:14:15:
                    c4:3d:9c:6f:97:2b:7a:09:33:2c:e9:2d:30:e4:62:
                    73:84:39:07:97:37:3b:13:63:72:5d:a5:79:1e:04:
                    c1:30:57:c6:35:95:e7:63:fb:05:91:8f:26:0a:1a:
                    c6:72:cd:92:f4:60:a7:24:28:63:3e:a7:13:64:59:
                    62:e7:a4:0c:cb:b3:5c:da:51:ec:0c:dd:55:08:6d:
                    df:0f:d7:b8:9b:09:0c:ee:df:96:e3:6e:f1:d1:35:
                    2f:1f:f8:61:77:20:da:ab:04:74:a6:a3:d7:be:d5:
                    0d:c5:06:03:b9:9e:fe:fa:30:79:8a:58:7e:45:b3:
                    81:87:a3:9e:61:f9:da:9d:16:36:77:47:cd:a4:5f:
                    e2:59:1b:58:ca:2a:74:5c:ab:f0:93:9b:b1:38:df:
                    74:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:72:3A:B8:81:1A:B1:5D:D9:BF:D6:69:3E:86:B8:E9:91:14:A6:C2
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a33383a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:38::/46

    Signature Algorithm: sha256WithRSAEncryption
         2c:60:7d:b4:09:62:12:ee:db:ce:3d:a0:c6:a5:3f:a0:da:22:
         63:7b:35:a2:95:11:91:5c:50:d6:d6:7c:27:8b:28:cb:dd:45:
         6d:6a:54:80:1e:6f:b7:83:17:36:14:be:de:b2:43:32:18:81:
         80:17:2c:c8:d1:43:88:3e:33:84:7a:15:87:76:08:c5:2b:b3:
         97:f9:01:b1:f1:c6:03:ac:ac:6b:76:df:8f:99:0b:c8:d0:f3:
         bc:57:c5:9d:25:74:c1:18:17:a1:40:f2:22:03:b6:79:f3:f9:
         62:7f:d2:4f:3b:01:ad:ab:85:5a:bd:08:3b:ee:33:3f:cc:b1:
         74:ec:a0:9d:6b:6f:3f:d6:f1:b3:07:0f:2c:5d:4c:d0:fb:c5:
         5f:d0:1a:1d:11:69:11:92:31:93:43:9e:c6:c1:c9:9b:25:0e:
         77:a3:37:aa:25:27:79:94:19:89:6d:54:12:03:68:1f:2d:3e:
         ca:a5:12:bf:44:a9:7a:b0:07:38:04:8c:2a:ef:cb:aa:f1:f8:
         e3:2c:33:70:9b:54:95:80:16:52:1a:5b:db:f9:76:46:ef:4c:
         6b:a1:f4:2d:96:91:f2:72:47:1b:f6:78:29:a2:d0:c5:b9:0b:
         71:22:00:39:fb:42:61:eb:76:a5:12:0a:3a:b0:e7:5a:24:4d:
         58:4a:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:12:54 2024 by rpki-client on console-ams.rpki-client.org