Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39383a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a39383a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          hKfmVE+Sm19mrod5xh9AEdxpk+hdTpb9NUs+EzFwjYI=
Subject key identifier:   EA:3E:E5:49:4A:6B:FC:15:12:0F:BC:6A:77:63:74:CA:3C:31:59:C9
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       45B2AF719E1B1BD08CF16CB32030143E12E1592C
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39383a3a2f34362d3436203d3e203534313438.roa
Signing time:             Sat 30 Nov 2024 02:34:39 +0000
ROA not before:           Sat 30 Nov 2024 02:29:39 +0000
ROA not after:            Sat 29 Nov 2025 02:34:39 +0000
asID:                     54148
IP address blocks:        2602:fa43:98::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Dec 2024 10:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b2:af:71:9e:1b:1b:d0:8c:f1:6c:b3:20:30:14:3e:12:e1:59:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Nov 30 02:29:39 2024 GMT
            Not After : Nov 29 02:34:39 2025 GMT
        Subject: CN=EA3EE5494A6BFC15120FBC6A776374CA3C3159C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6a:3a:21:ee:85:9c:0f:6f:b5:d9:46:c8:a3:
                    14:31:25:1b:24:3d:c0:17:e9:4c:b1:80:4c:4e:09:
                    1b:d6:14:07:93:f6:bf:85:4d:e8:9d:90:30:c2:e0:
                    d0:1c:95:8d:ec:e4:58:bd:12:a6:a6:e5:71:26:96:
                    60:d1:ec:db:82:a8:df:9a:bc:b9:49:28:97:6a:bb:
                    90:3e:cc:02:bf:57:f9:84:21:9c:de:6d:8f:ab:ce:
                    60:ef:8b:6b:82:f6:a5:06:cd:fd:9e:2e:44:55:97:
                    d1:5c:d6:21:35:ac:78:45:65:2d:82:49:c1:2d:1e:
                    74:58:b0:89:d7:1c:0f:ec:a0:d4:d0:14:07:86:62:
                    a2:36:f3:45:73:03:1e:d1:79:91:ac:f1:ae:dc:84:
                    3b:f4:c1:b0:4c:af:6e:c6:4a:b1:cd:78:25:da:b3:
                    dd:fa:2b:c3:79:e6:3c:d5:d8:3d:49:1b:b7:d6:1c:
                    dd:6f:60:5a:c6:98:90:06:64:03:8c:bd:95:5a:6f:
                    12:4c:29:2c:ef:54:27:9c:24:ca:39:77:43:2d:a2:
                    5e:43:a5:f1:3f:a6:7d:7e:cb:d2:c0:39:d3:c4:31:
                    58:5f:39:d5:23:cc:de:d0:43:30:82:a9:df:ae:eb:
                    9e:be:4b:99:93:17:78:0d:87:d1:37:6e:87:5a:13:
                    f9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3E:E5:49:4A:6B:FC:15:12:0F:BC:6A:77:63:74:CA:3C:31:59:C9
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39383a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:98::/46

    Signature Algorithm: sha256WithRSAEncryption
         67:81:4d:0d:8f:8a:a3:cd:f4:59:53:a8:7a:17:dd:c2:aa:f8:
         cb:46:d5:53:44:0e:88:8e:5e:2f:99:41:9f:99:c6:b6:9b:a0:
         55:b6:05:f1:06:96:95:a2:e3:68:c8:9d:c6:40:41:d8:8b:bf:
         08:80:4d:36:b0:b5:49:9e:7c:34:0d:9b:4c:28:94:f0:eb:3e:
         b7:7a:8f:0d:21:a6:f8:89:41:37:40:63:0c:3c:df:63:ff:e3:
         be:c2:3d:eb:f8:e4:35:bd:92:e7:f9:ff:f4:a2:4d:35:d2:e8:
         3f:ba:d8:0e:d0:50:2d:c4:6b:ed:03:fc:f1:df:29:75:2e:d6:
         ab:a8:f6:ec:0a:a3:c1:ed:4b:92:b1:3d:74:29:39:45:8c:fa:
         de:69:dc:09:d6:71:2b:3b:0f:99:14:81:3b:5e:f9:dc:7c:9b:
         ba:56:8b:65:0b:4e:50:28:e6:7b:91:e2:86:7b:94:5b:89:e4:
         59:f3:87:2f:b8:7c:e8:16:47:60:23:60:2b:09:a2:33:55:32:
         51:33:25:f1:f9:1e:f8:0a:f0:12:5b:c7:3a:84:33:30:02:58:
         8c:23:eb:ac:80:1b:7d:1e:08:8f:55:f6:7f:f6:fb:ff:d5:9b:
         c3:a4:8e:89:95:c3:0c:d6:29:26:38:b9:c3:f3:c9:a5:d7:8e:
         2f:94:4b:f5
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIURbKvcZ4bG9CM8WyzIDAUPhLhWSwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTUyZGE3NGViMWI5MzcxNGI2N2NjNjFi
YzRmN2IxNTk1YTIxMzI3ODgwHhcNMjQxMTMwMDIyOTM5WhcNMjUxMTI5MDIzNDM5
WjAzMTEwLwYDVQQDEyhFQTNFRTU0OTRBNkJGQzE1MTIwRkJDNkE3NzYzNzRDQTND
MzE1OUM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGo6Ie6FnA9v
tdlGyKMUMSUbJD3AF+lMsYBMTgkb1hQHk/a/hU3onZAwwuDQHJWN7ORYvRKmpuVx
JpZg0ezbgqjfmry5SSiXaruQPswCv1f5hCGc3m2Pq85g74trgvalBs39ni5EVZfR
XNYhNax4RWUtgknBLR50WLCJ1xwP7KDU0BQHhmKiNvNFcwMe0XmRrPGu3IQ79MGw
TK9uxkqxzXgl2rPd+ivDeeY81dg9SRu31hzdb2BaxpiQBmQDjL2VWm8STCks71Qn
nCTKOXdDLaJeQ6XxP6Z9fsvSwDnTxDFYXznVI8ze0EMwgqnfruuevkuZkxd4DYfR
N26HWhP5UwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFOo+5UlKa/wVEg+8andjdMo8
MVnJMB8GA1UdIwQYMBaAFARA7JGuBOgEkb9mFzYJfzVpx9sbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyYmFjYjdhYmI3YTI4LzMv
MDQ0MEVDOTFBRTA0RTgwNDkxQkY2NjE3MzYwOTdGMzU2OUM3REIxQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2VlMWJkZmY4LWRiYjUtNGYwZi05OGU2LWM4ZTEzMjZiYTc5Yi83ZWNh
ZTMyMDQ5NTJkYTc0ZWIxYjkzNzE0YjY3Y2M2MWJjNGY3YjE1OTVhMjEzMjc4OC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5MmJh
Y2I3YWJiN2EyOC8zLzMyMzYzMDMyM2E2NjYxMzQzMzNhMzkzODNhM2EyZjM0MzYy
ZDM0MzYyMDNkM2UyMDM1MzQzMTM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwImAvpDAJgwDQYJKoZI
hvcNAQELBQADggEBAGeBTQ2PiqPN9FlTqHoX3cKq+MtG1VNEDoiOXi+ZQZ+Zxrab
oFW2BfEGlpWi42jIncZAQdiLvwiATTawtUmefDQNm0wolPDrPrd6jw0hpviJQTdA
Yww832P/477CPev45DW9kuf5//SiTTXS6D+62A7QUC3Ea+0D/PHfKXUu1quo9uwK
o8HtS5KxPXQpOUWM+t5p3AnWcSs7D5kUgTte+dx8m7pWi2ULTlAo5nuR4oZ7lFuJ
5Fnzhy+4fOgWR2AjYCsJojNVMlEzJfH5HvgK8BJbxzqEMzACWIwj66yAG30eCI9V
9n/2+//Vm8OkjomVwwzWKSY4ucPzyaXXji+US/U=
-----END CERTIFICATE-----
Generated at Thu Dec 26 10:19:21 2024 by rpki-client on console-fra.rpki-client.org