Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38323a3a2f34382d3438203d3e20323030333531.roa
File:                     323630323a666134333a38323a3a2f34382d3438203d3e20323030333531.roa (raw, json)
Hash identifier:          TR1NXGk/qRd+rKpV8li6DxefLs7GBHCk7LjJFKJ8et8=
Subject key identifier:   99:27:6C:17:53:3D:72:1E:EC:03:39:FC:04:0F:F0:97:C4:0E:A4:B8
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       1AB29C80546EB10B6A8E14195F297ABC69A68B5B
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38323a3a2f34382d3438203d3e20323030333531.roa
Signing time:             Thu 24 Oct 2024 21:03:28 +0000
ROA not before:           Thu 24 Oct 2024 20:58:28 +0000
ROA not after:            Thu 23 Oct 2025 21:03:28 +0000
asID:                     200351
IP address blocks:        2602:fa43:82::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b2:9c:80:54:6e:b1:0b:6a:8e:14:19:5f:29:7a:bc:69:a6:8b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:28 2024 GMT
            Not After : Oct 23 21:03:28 2025 GMT
        Subject: CN=99276C17533D721EEC0339FC040FF097C40EA4B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2c:4e:61:54:12:d8:91:45:66:e8:ac:df:19:
                    79:b4:9c:09:6f:bf:e0:e2:e4:35:3b:c6:4d:71:2d:
                    a5:56:c1:bb:65:49:90:53:11:0a:92:aa:1a:28:0f:
                    b3:ac:00:0a:10:cc:f3:cc:52:d1:24:8f:ca:f7:2a:
                    63:a4:d6:2c:d5:81:fc:0f:4d:1f:08:bc:6f:ba:a8:
                    f1:ba:e3:c9:34:62:d3:ee:cc:da:ea:59:50:cd:a2:
                    2e:cf:a2:6c:8a:97:7f:7a:da:25:96:58:26:91:70:
                    d5:95:e7:58:fb:c3:49:74:a3:66:5c:55:88:ba:ca:
                    6d:3f:ca:c8:0e:d0:5d:97:34:a9:cf:1b:9c:a7:6e:
                    48:5a:fe:7a:d3:d9:f4:51:99:da:8f:00:54:1e:91:
                    16:c6:29:b6:03:4f:aa:77:f8:af:5a:e6:23:7b:f7:
                    46:95:d3:a0:2d:3c:02:30:d6:1f:38:b2:f9:a3:e9:
                    cb:3d:ba:58:3f:75:66:fd:4f:79:bd:c9:06:da:3d:
                    c3:49:c5:33:9a:21:d1:dc:3c:96:43:de:0f:c9:df:
                    0d:77:96:f8:9e:37:c2:af:29:04:c3:c2:3f:75:ee:
                    3b:62:cb:d5:e7:a7:d6:90:a5:8a:a9:d0:76:b5:95:
                    28:83:52:ec:1d:56:3c:eb:95:dd:df:0f:d0:6f:ea:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:27:6C:17:53:3D:72:1E:EC:03:39:FC:04:0F:F0:97:C4:0E:A4:B8
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38323a3a2f34382d3438203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:82::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:b0:27:56:33:b5:f7:2a:56:33:8b:5f:bf:3a:19:99:08:ea:
         f7:00:c2:8e:ea:e5:7c:8e:7d:a8:be:f6:da:e5:c8:0c:ad:d6:
         e2:54:05:f7:c2:74:f3:5a:4b:25:54:18:21:ab:de:64:04:64:
         a7:a6:9a:09:77:b4:e8:be:da:fc:48:c6:44:18:d4:18:e2:b3:
         5a:96:34:55:5a:b8:b2:11:c1:05:6e:93:69:c7:3c:1b:e8:4e:
         67:87:4e:f2:90:bb:4f:8b:0b:24:ac:85:89:35:4a:fa:57:6a:
         56:e9:39:c7:12:aa:5c:35:04:c4:95:b7:dd:64:73:49:a7:1b:
         e8:5c:ac:78:ba:2e:ff:93:39:f1:43:4a:ab:9f:56:de:8e:e4:
         9d:91:97:63:65:67:90:ca:5f:e6:2a:da:38:70:77:46:74:bd:
         f2:4b:f4:a7:31:b4:b3:ad:7a:a3:a8:84:45:56:e6:19:21:21:
         fb:f7:50:c8:ae:65:e1:86:21:7d:e6:62:17:58:dc:15:a0:98:
         81:c6:5b:bb:73:64:d6:20:fd:52:a4:d4:22:c8:28:59:a6:f3:
         55:04:a8:47:a8:62:bc:03:04:b7:03:22:5b:e0:60:c0:81:d6:
         18:15:19:bb:0c:06:12:0d:12:6c:49:03:8e:1a:2a:6c:c3:fb:
         f1:ec:71:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:18 2024 by rpki-client on console-fra.rpki-client.org