Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38313a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a38313a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          PuE+l9M8ABwbRhN/hyP0AmeD0Ke9hoSAM07Hn9+dmDo=
Subject key identifier:   B0:0A:97:30:FC:B4:1A:3D:3B:D6:59:3E:CC:7A:C1:EF:D3:2F:4B:A7
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       1B1AD804ECA25192AA36A55EACC72055A8FC7DC7
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38313a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:31 +0000
ROA not before:           Thu 24 Oct 2024 20:58:31 +0000
ROA not after:            Thu 23 Oct 2025 21:03:31 +0000
asID:                     54148
IP address blocks:        2602:fa43:81::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1a:d8:04:ec:a2:51:92:aa:36:a5:5e:ac:c7:20:55:a8:fc:7d:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:31 2024 GMT
            Not After : Oct 23 21:03:31 2025 GMT
        Subject: CN=B00A9730FCB41A3D3BD6593ECC7AC1EFD32F4BA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:57:27:12:3d:41:84:f8:ff:58:43:e3:b9:84:
                    13:c2:16:ff:10:b5:9b:54:99:c4:64:a5:ff:aa:5c:
                    57:08:4a:64:5e:d4:e0:1c:08:ce:b8:50:64:00:a8:
                    0b:b2:32:41:8b:c7:e6:a7:b2:a2:1e:74:6d:31:67:
                    d1:51:88:00:72:cf:ad:81:a7:e1:cb:32:54:be:bf:
                    15:40:4d:28:b0:3a:e5:8b:aa:6c:19:00:87:68:32:
                    67:77:0e:f8:88:9f:35:4d:41:d4:82:09:69:00:37:
                    c3:d7:9a:16:44:c2:c4:1b:2e:74:3d:51:a3:e0:cb:
                    17:af:78:04:a9:83:0d:90:c1:fe:ed:ef:d7:35:0e:
                    a1:04:cf:27:72:79:9a:0e:63:11:99:be:47:52:19:
                    e6:ce:ad:f3:e9:9a:6d:66:d3:b6:47:66:3a:7d:89:
                    5d:3f:a7:bc:d5:3e:63:52:d5:15:62:fa:8c:85:fc:
                    7f:81:3b:c7:92:77:98:55:a0:2a:d1:e3:b0:02:fe:
                    a5:ae:86:99:24:87:11:9c:d2:d9:f3:43:fe:c3:5a:
                    2f:7a:2c:62:f0:da:bf:bb:bc:e6:6e:d3:5a:a7:11:
                    f1:aa:e3:aa:3d:94:f1:96:52:14:43:8d:32:0f:d0:
                    bf:d3:e8:47:7b:66:5c:35:2b:db:1f:cc:36:5d:d7:
                    f8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0A:97:30:FC:B4:1A:3D:3B:D6:59:3E:CC:7A:C1:EF:D3:2F:4B:A7
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38313a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:81::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:6d:97:57:f0:74:84:35:28:a3:e9:82:67:de:2a:bb:a3:84:
         e9:82:43:b2:36:95:2c:3b:dc:ca:bd:bf:ed:fa:14:24:b9:a8:
         bd:42:9b:b3:e1:2f:f5:c9:4d:54:a0:22:79:72:58:6a:7c:87:
         0a:db:5b:0e:7d:1c:f5:b0:2d:f2:c8:30:39:e4:38:bf:c3:4e:
         0a:1b:26:90:c3:cb:54:f5:9d:00:0a:57:2c:fe:68:6d:34:20:
         ea:82:32:42:36:bb:3e:06:18:25:32:da:f9:97:02:c5:94:3a:
         37:45:d7:be:40:57:16:da:2b:6f:ad:7d:b4:17:14:d4:2c:d9:
         5f:f5:a5:c9:7c:b7:70:a4:cb:75:3f:a6:fd:c0:99:f3:10:e5:
         9b:40:23:bc:86:bb:d6:58:4d:90:bd:e0:c6:9d:10:b2:e1:9a:
         f7:10:b1:ea:4d:4f:9c:da:c0:06:f2:b0:73:9c:26:79:69:64:
         31:ed:bc:c6:3b:9c:fa:0a:25:62:10:f6:10:f7:8c:43:70:f1:
         1c:d7:a7:48:f3:a5:43:2c:48:db:fe:93:2e:b4:a1:54:2b:88:
         f3:6e:5a:4a:e3:c8:1f:0d:ee:d4:ef:45:9a:fb:23:1d:6d:66:
         fb:45:79:61:17:a3:81:2b:d4:7b:70:76:55:cb:bc:ed:e8:78:
         eb:b9:14:e1
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUGxrYBOyiUZKqNqVerMcgVaj8fccwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTUyZGE3NGViMWI5MzcxNGI2N2NjNjFi
YzRmN2IxNTk1YTIxMzI3ODgwHhcNMjQxMDI0MjA1ODMxWhcNMjUxMDIzMjEwMzMx
WjAzMTEwLwYDVQQDEyhCMDBBOTczMEZDQjQxQTNEM0JENjU5M0VDQzdBQzFFRkQz
MkY0QkE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1cnEj1BhPj/
WEPjuYQTwhb/ELWbVJnEZKX/qlxXCEpkXtTgHAjOuFBkAKgLsjJBi8fmp7KiHnRt
MWfRUYgAcs+tgafhyzJUvr8VQE0osDrli6psGQCHaDJndw74iJ81TUHUgglpADfD
15oWRMLEGy50PVGj4MsXr3gEqYMNkMH+7e/XNQ6hBM8ncnmaDmMRmb5HUhnmzq3z
6ZptZtO2R2Y6fYldP6e81T5jUtUVYvqMhfx/gTvHkneYVaAq0eOwAv6lroaZJIcR
nNLZ80P+w1oveixi8Nq/u7zmbtNapxHxquOqPZTxllIUQ40yD9C/0+hHe2ZcNSvb
H8w2Xdf4aQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFLAKlzD8tBo9O9ZZPsx6we/T
L0unMB8GA1UdIwQYMBaAFARA7JGuBOgEkb9mFzYJfzVpx9sbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyYmFjYjdhYmI3YTI4LzMv
MDQ0MEVDOTFBRTA0RTgwNDkxQkY2NjE3MzYwOTdGMzU2OUM3REIxQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2VlMWJkZmY4LWRiYjUtNGYwZi05OGU2LWM4ZTEzMjZiYTc5Yi83ZWNh
ZTMyMDQ5NTJkYTc0ZWIxYjkzNzE0YjY3Y2M2MWJjNGY3YjE1OTVhMjEzMjc4OC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5MmJh
Y2I3YWJiN2EyOC8zLzMyMzYzMDMyM2E2NjYxMzQzMzNhMzgzMTNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDM1MzQzMTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvpDAIEwDQYJKoZI
hvcNAQELBQADggEBAExtl1fwdIQ1KKPpgmfeKrujhOmCQ7I2lSw73Mq9v+36FCS5
qL1Cm7PhL/XJTVSgInlyWGp8hwrbWw59HPWwLfLIMDnkOL/DTgobJpDDy1T1nQAK
Vyz+aG00IOqCMkI2uz4GGCUy2vmXAsWUOjdF175AVxbaK2+tfbQXFNQs2V/1pcl8
t3Cky3U/pv3AmfMQ5ZtAI7yGu9ZYTZC94MadELLhmvcQsepNT5zawAbysHOcJnlp
ZDHtvMY7nPoKJWIQ9hD3jENw8RzXp0jzpUMsSNv+ky60oVQriPNuWkrjyB8N7tTv
RZr7Ix1tZvtFeWEXo4Er1HtwdlXLvO3oeOu5FOE=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:44 2024 by rpki-client on console-fra.rpki-client.org