Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa
File:                     323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa (raw, json)
Hash identifier:          RUUCD3HSA9Uzxskxxfyxn2dEEI/DSTQyzXP7/k1V6Sk=
Subject key identifier:   F6:65:0A:E4:BD:88:AB:76:FB:70:D8:CE:EC:1F:9F:46:00:4B:CC:4B
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       024336870CF3198015FBA5896DB2D91837CEF69A
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:26 +0000
ROA not before:           Thu 24 Oct 2024 20:58:26 +0000
ROA not after:            Thu 23 Oct 2025 21:03:26 +0000
asID:                     54148
IP address blocks:        2602:fa43:80::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Dec 2024 16:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:43:36:87:0c:f3:19:80:15:fb:a5:89:6d:b2:d9:18:37:ce:f6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:26 2024 GMT
            Not After : Oct 23 21:03:26 2025 GMT
        Subject: CN=F6650AE4BD88AB76FB70D8CEEC1F9F46004BCC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:59:f1:42:7d:a7:7f:26:54:7c:21:b3:8f:
                    72:16:1f:7c:cc:91:95:b3:3b:67:8b:75:45:af:aa:
                    28:95:62:ec:97:4f:24:45:8b:59:ce:12:3b:18:44:
                    e0:b1:f5:36:be:68:e1:ae:95:5e:69:67:de:a4:91:
                    11:46:3f:18:b6:f1:f9:90:f1:d6:1e:0c:11:63:d0:
                    71:ff:4d:43:6d:b9:a6:91:2a:87:fa:cc:f2:ab:9b:
                    a5:1d:ab:e2:25:0f:6f:ed:7d:82:28:44:14:7b:b8:
                    60:da:88:b7:57:a7:64:e2:7e:ce:bf:8f:50:ad:f6:
                    cc:e8:bb:3e:21:a2:e3:c5:7e:6f:e8:52:67:f5:6c:
                    98:c6:57:91:26:40:b9:38:59:03:63:15:ba:2f:de:
                    b9:b7:d2:2a:89:3e:5c:b4:1e:d4:45:dc:02:00:52:
                    c1:06:37:fd:1b:2a:f2:d1:fb:9e:c3:49:e0:68:8d:
                    83:ed:85:58:cf:fd:0f:6c:70:82:63:e3:bf:7f:14:
                    74:f9:ce:d4:f3:fb:64:9e:35:f6:0a:bd:89:ae:bd:
                    98:6e:92:f6:a7:51:88:45:79:fa:98:e4:7f:58:0c:
                    b7:86:e3:83:50:6e:3a:67:66:3d:06:dd:e0:a4:d5:
                    60:cf:69:1c:5e:7b:e1:db:2c:b6:9c:91:2c:12:c0:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:65:0A:E4:BD:88:AB:76:FB:70:D8:CE:EC:1F:9F:46:00:4B:CC:4B
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38303a3a2f34342d3434203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:80::/44

    Signature Algorithm: sha256WithRSAEncryption
         96:dc:11:f8:d5:e9:82:ac:9f:5d:dc:bb:9e:9c:02:ea:c1:14:
         c8:43:a6:e4:8c:cd:03:dc:b8:dd:de:c9:25:6e:86:78:4f:1e:
         3e:03:08:92:80:55:8a:a8:58:0b:3f:68:58:00:b8:e2:20:d5:
         ea:aa:ec:52:20:7f:77:62:be:0c:59:31:a1:3e:8f:3c:85:25:
         c0:c8:41:c9:ab:c5:15:79:9e:27:f0:5a:e5:e8:f8:b6:ca:20:
         ce:90:be:2e:04:a0:c7:10:67:50:a1:6c:6f:5a:ad:00:ac:19:
         e1:74:d6:f6:f9:c6:dd:e6:08:b2:23:07:9a:f0:d1:50:ab:22:
         74:34:77:0f:ba:5c:c5:6c:3c:fd:e7:38:38:ab:f9:ec:c6:06:
         f1:9c:c2:01:2f:47:51:b4:f0:40:1c:33:ac:ab:56:ea:87:d3:
         58:65:8c:3a:5a:ca:7a:83:27:f9:af:98:6f:6e:c1:7b:c6:56:
         fb:eb:46:24:ed:2a:16:45:df:b3:80:de:03:6c:b1:c6:60:03:
         a5:e3:ce:70:c9:ae:48:7d:d2:98:33:d4:ab:0f:d6:9d:29:19:
         48:e0:1c:b3:d5:85:10:4a:e4:05:99:06:be:61:30:04:8c:31:
         0b:64:41:f0:c3:7b:96:52:0c:af:7f:23:da:de:30:c7:4d:90:
         eb:a6:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 15:06:15 2024 by rpki-client on console-fra.rpki-client.org