Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39633a3a2f34362d3436203d3e20323030333531.roa
File:                     323630323a666134333a39633a3a2f34362d3436203d3e20323030333531.roa (raw, json)
Hash identifier:          nimd+pA+RYSH2CotCzAeVRwGPqVPDsahAQHmgwCaOPM=
Subject key identifier:   04:A3:06:4B:84:07:0B:C1:18:25:67:79:13:52:2B:00:9E:88:5E:E4
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       2AA5251DC750FB7D03F09B54B71876E680B743C9
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39633a3a2f34362d3436203d3e20323030333531.roa
Signing time:             Thu 24 Oct 2024 21:03:29 +0000
ROA not before:           Thu 24 Oct 2024 20:58:29 +0000
ROA not after:            Thu 23 Oct 2025 21:03:29 +0000
asID:                     200351
IP address blocks:        2602:fa43:9c::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Dec 2024 15:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a5:25:1d:c7:50:fb:7d:03:f0:9b:54:b7:18:76:e6:80:b7:43:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:29 2024 GMT
            Not After : Oct 23 21:03:29 2025 GMT
        Subject: CN=04A3064B84070BC11825677913522B009E885EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:f3:49:73:39:41:d5:cd:0a:10:7a:f0:51:
                    ac:75:bb:96:d7:28:50:52:7e:1c:21:29:a7:4b:e6:
                    70:46:17:3a:d1:06:ac:95:b4:17:aa:5d:a4:da:4a:
                    12:2a:32:d6:a5:73:0d:38:cb:03:f8:72:c3:05:f0:
                    73:08:42:ab:6c:f3:59:a7:c1:ea:dd:98:68:e1:72:
                    bf:82:21:eb:74:1e:5e:ec:b6:19:fa:cb:60:f5:83:
                    4b:31:0c:59:6d:2e:9e:8e:5a:e4:a7:8e:d1:7e:ae:
                    98:70:27:40:67:e5:05:b7:59:70:50:25:df:ab:fa:
                    2a:60:b4:ee:1b:9d:4b:91:7c:f9:ed:b6:df:74:d0:
                    99:89:f9:33:fc:c6:b9:da:21:34:64:ee:72:8e:5b:
                    e1:b7:c5:82:0e:52:18:47:9e:91:58:43:d0:9f:c9:
                    63:84:b7:5a:2b:ea:50:da:42:d7:c5:aa:83:78:df:
                    fb:03:0d:3c:cc:02:b9:3e:e0:8d:d0:73:3c:f5:48:
                    27:f9:5c:6b:93:df:82:2d:ab:bc:09:c1:94:c3:d3:
                    97:c1:c2:84:80:42:b9:4e:88:a2:0d:a6:a8:b1:07:
                    fe:ab:49:7c:fa:b0:0c:b6:e7:d8:aa:e4:8c:4a:96:
                    48:55:cc:99:12:96:46:4a:01:b0:5c:63:a4:a8:d3:
                    a8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A3:06:4B:84:07:0B:C1:18:25:67:79:13:52:2B:00:9E:88:5E:E4
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a39633a3a2f34362d3436203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:9c::/46

    Signature Algorithm: sha256WithRSAEncryption
         34:8a:20:58:7d:e0:9a:09:6f:8e:ce:20:6c:e6:1d:02:45:31:
         58:df:ca:4f:b7:76:10:6f:c9:fe:cd:a8:ce:23:2a:ea:45:bc:
         85:53:c1:d3:9e:36:87:f0:ff:0f:da:af:08:73:c5:80:71:e6:
         f7:1d:48:3b:60:65:06:4f:33:35:21:44:b5:ac:ef:5c:35:96:
         ca:2e:7c:1b:ee:81:18:b5:33:4d:e9:c6:04:04:58:c1:9a:6f:
         12:46:7a:9c:4c:0f:f8:e2:73:72:f3:a0:1e:6d:8e:08:b9:3b:
         01:e4:05:b5:4d:c9:db:0a:7a:27:e8:a5:e1:8a:14:be:18:bd:
         b1:7c:f1:0b:2a:a5:f8:df:8a:c0:3b:bc:63:c4:7c:60:bd:bb:
         c3:99:96:2f:d8:98:df:ba:bd:fd:1e:b1:c0:8f:fd:13:b3:73:
         2b:d5:3f:f8:9c:f7:a7:48:06:0c:fc:44:8c:b8:d1:61:a0:32:
         ca:f6:b8:7b:85:db:d3:6e:d7:a2:34:a8:78:7e:62:67:69:56:
         84:e7:55:ca:b1:6d:5c:c7:ff:e2:43:96:57:6e:0f:a5:52:35:
         32:09:6a:f9:be:eb:c0:f6:98:c2:3a:4f:5e:58:b3:e3:47:c2:
         99:b1:28:1e:55:85:fb:af:6c:a6:82:e1:e9:6a:9c:90:44:a0:
         ea:79:4c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 14:25:42 2024 by rpki-client on console-fra.rpki-client.org