Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38333a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a38333a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          KG+oFRj8+9cOgaHTnmpaZc36XVd87f2GTdEfkE/2uVM=
Subject key identifier:   8B:15:CB:C5:39:CE:C9:B5:CC:B0:E5:6A:DF:01:D9:1D:84:A1:A5:64
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       456602D2C40F105C69A7210CA2C3036197EC7C93
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38333a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:30 +0000
ROA not before:           Thu 24 Oct 2024 20:58:30 +0000
ROA not after:            Thu 23 Oct 2025 21:03:30 +0000
asID:                     54148
IP address blocks:        2602:fa43:83::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Dec 2024 16:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:66:02:d2:c4:0f:10:5c:69:a7:21:0c:a2:c3:03:61:97:ec:7c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:30 2024 GMT
            Not After : Oct 23 21:03:30 2025 GMT
        Subject: CN=8B15CBC539CEC9B5CCB0E56ADF01D91D84A1A564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:59:53:2a:25:5a:b9:a6:b1:49:31:c8:73:f1:
                    08:6e:7a:eb:d8:2e:60:2a:f2:78:4d:4d:00:1b:fe:
                    3c:80:0d:62:a6:d6:61:82:97:4c:ad:3f:e5:14:b6:
                    9d:f2:de:64:eb:80:12:2f:5d:44:96:d3:06:0c:90:
                    6f:9f:d2:2d:da:94:64:9a:f6:c6:b3:c3:93:ed:26:
                    7c:4e:b5:85:8f:eb:c2:76:a9:76:43:90:ad:c1:a8:
                    46:37:c3:79:c5:e2:da:72:42:cb:3f:6e:a7:b0:e6:
                    ba:aa:65:4a:bf:29:27:ba:0c:df:89:48:2a:85:fe:
                    48:3d:f9:40:0b:1e:99:71:06:94:3d:7a:71:85:a4:
                    b4:c4:c4:41:9e:77:51:97:da:fb:f6:5a:dc:8f:f7:
                    5c:6c:9e:50:cd:68:22:58:1f:9e:34:be:68:f7:42:
                    f4:69:7e:71:f3:69:ae:51:6e:43:47:42:c2:69:f0:
                    7b:bf:bb:e5:c5:1b:f2:01:12:c7:f8:41:02:81:01:
                    a0:03:a8:aa:df:1b:6f:7d:47:71:0b:62:83:ce:1a:
                    cf:3b:e0:91:80:9b:4a:a0:08:4c:67:6c:5b:e6:59:
                    cc:ef:3f:2e:e7:68:7b:7c:03:a6:b7:fe:16:4d:e4:
                    01:f0:89:a2:71:7b:f2:92:8a:3a:1e:66:8e:69:ad:
                    86:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:15:CB:C5:39:CE:C9:B5:CC:B0:E5:6A:DF:01:D9:1D:84:A1:A5:64
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a38333a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:83::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:4c:0f:5a:38:2e:9d:2e:ba:64:59:93:84:6c:dd:c7:1d:c6:
         2b:e9:c9:ce:b4:fa:d0:ac:60:f2:4e:e6:96:0a:47:24:12:c8:
         84:d1:12:c3:e2:f0:cd:f6:9e:90:41:82:f0:45:3f:d3:7b:5a:
         08:2a:ee:b8:ba:9f:aa:85:99:37:99:ee:0a:27:39:8a:65:e7:
         01:40:9c:42:e8:80:17:f3:d6:28:47:a0:38:c1:0d:11:08:fb:
         09:8f:39:63:c3:26:48:f7:56:e0:00:bf:09:1e:a6:75:b9:b9:
         be:99:59:43:05:1b:56:82:9b:38:34:bb:24:69:aa:ed:87:ff:
         f8:40:4e:79:76:27:d5:ba:c9:68:56:94:e9:3c:a3:20:18:6f:
         ef:0e:5a:9c:5a:41:18:fa:b0:d4:44:17:35:fe:2b:6b:84:2a:
         27:22:55:40:62:ea:9f:d2:36:1c:54:8d:83:09:64:08:79:88:
         15:37:04:33:d2:93:54:e8:b8:6e:94:3d:2b:f3:0b:8a:49:8c:
         c0:9a:9f:c4:eb:e4:44:3d:0f:c4:9f:e7:00:9b:87:69:ba:dd:
         4d:21:d2:25:ea:97:25:cb:d6:78:c3:f4:e0:1e:f4:51:ac:f7:
         76:2a:04:4a:2d:8a:52:fe:da:d5:1f:9d:04:74:ed:bd:fa:ff:
         94:4d:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 15:06:15 2024 by rpki-client on console-fra.rpki-client.org