Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38323a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a38323a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          RqIjyXoS0SLI6FdIzqKIdX4yCGp0t7PJr7yiTzUotrM=
Subject key identifier:   B1:9C:3E:75:BB:35:D0:06:97:78:78:92:D1:96:B7:B0:85:53:EB:FD
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       42AE1902152D6E78269C6F328CF03D89C9EF3AF2
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38323a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:32 +0000
ROA not before:           Thu 24 Oct 2024 20:58:32 +0000
ROA not after:            Thu 23 Oct 2025 21:03:32 +0000
asID:                     54148
IP address blocks:        2602:fa43:82::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Dec 2024 16:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ae:19:02:15:2d:6e:78:26:9c:6f:32:8c:f0:3d:89:c9:ef:3a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:32 2024 GMT
            Not After : Oct 23 21:03:32 2025 GMT
        Subject: CN=B19C3E75BB35D00697787892D196B7B08553EBFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:98:ba:a8:d5:54:be:bd:37:87:ac:b1:c1:
                    22:3a:b5:ba:79:b7:48:c8:f4:5b:dc:e3:db:c4:8a:
                    19:f2:cd:92:22:c3:cf:e6:41:e9:65:b5:70:58:00:
                    c5:33:b9:22:33:b5:68:02:f1:cc:63:d8:67:aa:41:
                    c0:1e:6b:ef:15:f1:9f:bb:5b:db:0e:7b:53:41:1f:
                    ff:32:80:37:b9:0a:0a:08:7d:0e:f6:9b:5c:f4:08:
                    e2:ec:50:52:9e:f9:ad:01:05:13:bd:ac:9f:71:7e:
                    47:66:30:7d:fa:a0:b5:4c:2e:cd:8f:17:58:7a:fe:
                    13:54:83:83:b3:56:8e:02:04:05:51:71:80:60:94:
                    85:5e:cb:41:b5:a4:d6:eb:26:9f:88:54:93:02:88:
                    96:01:05:ec:e5:2e:c2:d3:50:b9:c0:35:63:70:ef:
                    db:39:60:5b:c1:b9:9c:5c:fa:c6:88:f6:87:6a:52:
                    67:56:e5:c2:a9:53:19:ef:fc:1b:91:3c:f3:94:6e:
                    71:04:bc:a5:1e:37:12:cb:99:e5:58:9e:2f:19:93:
                    55:2e:90:33:9c:92:aa:34:16:2a:ad:e4:c5:1a:3a:
                    9d:6b:b3:82:bd:7b:ef:82:10:73:ff:5d:95:32:ec:
                    37:65:a0:01:e6:8b:33:e2:4a:12:4d:16:1b:1b:7c:
                    a3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9C:3E:75:BB:35:D0:06:97:78:78:92:D1:96:B7:B0:85:53:EB:FD
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38323a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:82::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:b2:50:be:41:69:08:95:6f:46:7b:7c:50:b9:d9:7a:c1:0a:
         45:22:ba:3d:19:32:50:d7:94:1f:62:a1:32:9c:e3:92:91:5d:
         d4:d2:41:98:5e:91:cf:92:5b:e5:99:99:f5:46:f2:fb:5a:44:
         3d:8c:e7:db:d9:f9:7d:15:da:2b:a2:e2:9c:b6:2e:4a:cf:e1:
         4a:2a:b5:53:eb:67:b8:a5:7f:d4:8d:39:66:ba:d1:fc:1a:5a:
         18:e1:57:f6:02:d3:50:c9:fe:85:3b:6e:79:a8:d4:55:b7:b0:
         d6:0d:03:38:26:14:8d:8d:e3:24:ee:a4:82:0b:21:ed:fe:bf:
         02:4d:47:72:f9:7d:a4:af:37:fb:02:78:3e:34:ba:89:14:72:
         9c:19:48:14:5c:3e:d2:8f:4b:fb:85:b6:c3:70:34:a3:e4:c3:
         38:31:0e:38:88:d0:0b:3d:35:a6:be:bf:4b:cb:e5:f7:6f:99:
         ce:ba:80:12:9b:bc:64:22:a3:91:ec:ff:9a:09:9d:20:c5:04:
         96:7c:d1:c4:0b:28:26:c9:45:73:69:0a:ae:15:f5:15:de:5d:
         7a:26:81:50:f1:29:fe:a8:f3:3d:1d:41:26:56:e8:c3:20:6d:
         e2:ee:f5:f8:e9:43:78:eb:0d:e2:bb:ce:b7:db:b8:90:ce:6b:
         50:6b:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 15:06:15 2024 by rpki-client on console-fra.rpki-client.org