Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39343a3a2f34362d3436203d3e20323030333531.roa
File:                     323630323a666134333a39343a3a2f34362d3436203d3e20323030333531.roa (raw, json)
Hash identifier:          Avb9XbXAFIe5fwQNcyBFV5IryPP9BAIJ/U3I1PMNI6o=
Subject key identifier:   F5:8E:FA:60:1D:2C:5C:EF:F3:CF:5E:FF:E1:F0:13:8C:71:67:1D:E2
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       0F3B18220787C52AF094F6FCAB3DA2DF5FBFF5D5
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39343a3a2f34362d3436203d3e20323030333531.roa
Signing time:             Thu 24 Oct 2024 21:03:29 +0000
ROA not before:           Thu 24 Oct 2024 20:58:29 +0000
ROA not after:            Thu 23 Oct 2025 21:03:29 +0000
asID:                     200351
IP address blocks:        2602:fa43:94::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:3b:18:22:07:87:c5:2a:f0:94:f6:fc:ab:3d:a2:df:5f:bf:f5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:29 2024 GMT
            Not After : Oct 23 21:03:29 2025 GMT
        Subject: CN=F58EFA601D2C5CEFF3CF5EFFE1F0138C71671DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:98:c3:b9:b5:10:c8:06:c8:d2:9d:0b:a1:4c:
                    e5:b7:4f:38:d5:1a:f6:16:8c:52:f2:b8:54:35:4d:
                    e7:a4:d5:25:6e:50:ef:18:0b:66:78:88:46:76:53:
                    35:f7:20:30:2f:5f:36:29:ee:88:af:c1:8d:6e:4f:
                    e4:8a:7c:94:8f:1c:f3:de:20:f7:39:d8:eb:f4:f6:
                    5d:7e:06:28:cb:d7:ff:00:cd:77:9c:eb:f6:48:bb:
                    2a:94:91:ee:72:f0:42:5e:85:0a:e0:7a:cd:f2:5a:
                    36:fa:1c:4e:42:8d:59:ba:b6:9d:d7:5f:31:d2:bc:
                    9e:a9:45:46:70:cd:83:7e:1d:90:ab:db:96:be:90:
                    22:c4:f4:a9:6d:48:14:94:b5:9b:4c:71:c7:5c:90:
                    39:64:cb:3e:b9:5e:e3:7c:36:f0:22:8b:ed:33:40:
                    49:6b:7f:0b:c8:84:18:12:af:60:f7:9d:e5:41:37:
                    7c:86:13:da:17:40:e5:7b:78:3c:4d:d6:06:41:01:
                    3a:91:84:dd:c6:bd:8d:7d:49:da:1d:66:4c:db:11:
                    22:e7:d2:cf:e4:3d:45:29:ea:16:a6:34:cc:55:ee:
                    c3:11:9c:aa:6e:d2:d3:5e:b0:06:7b:90:81:a5:6e:
                    df:6e:e8:47:ca:39:b5:d1:9f:74:fb:6c:52:35:c7:
                    32:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8E:FA:60:1D:2C:5C:EF:F3:CF:5E:FF:E1:F0:13:8C:71:67:1D:E2
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39343a3a2f34362d3436203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:94::/46

    Signature Algorithm: sha256WithRSAEncryption
         2f:2f:8b:ea:99:04:53:2d:49:51:1e:1d:7f:a0:27:cb:91:a9:
         a9:58:c7:bd:35:13:8d:ad:0d:58:1b:7b:e2:68:c1:dd:14:6c:
         58:b5:69:a4:08:c3:44:95:b1:30:d4:8a:8d:92:05:53:70:3b:
         40:32:3d:1e:29:34:e1:74:30:51:f2:bf:2a:41:51:ee:be:2a:
         79:14:73:2c:24:7a:8b:d0:83:d4:8b:5f:a7:68:54:5d:02:73:
         7a:46:45:5b:b0:b5:54:67:29:08:12:bb:19:7f:5c:2f:ff:a4:
         87:c6:9a:a3:ac:e9:87:10:d9:9f:f0:d4:6e:65:6a:60:d6:64:
         66:a6:88:b4:f3:8f:62:49:eb:b3:6b:5e:11:95:47:fd:5f:35:
         c5:fe:c3:59:30:0c:98:98:b0:32:98:50:c8:bb:87:f5:a0:85:
         94:57:42:87:07:9c:b4:4e:0c:f2:e7:2e:97:42:e0:63:51:0f:
         b4:14:a1:40:ba:08:65:12:ee:cb:d0:2f:65:f4:bf:f1:54:1c:
         c1:9e:20:63:ef:94:03:59:bb:20:46:4b:2c:73:84:76:18:13:
         b0:e3:72:4d:cd:69:d2:55:f9:56:72:aa:1d:03:da:28:65:94:
         7e:f5:be:ee:b3:38:ff:9e:5b:48:cd:a6:19:97:d2:51:61:d3:
         9b:f4:ba:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:44 2024 by rpki-client on console-fra.rpki-client.org