Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a3a2f34382d3438203d3e20323030333531.roa
File:                     323630323a666134333a3a2f34382d3438203d3e20323030333531.roa (raw, json)
Hash identifier:          fPamsTdFs7eZoEuphkPbQdP2zOAmPGW9X2HUprV+X7w=
Subject key identifier:   1D:AF:E6:AC:07:0A:04:04:C7:09:17:0C:B9:5D:45:37:6E:99:F6:D1
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       5EE2C4435A3CBC8713024E3E0E278B7C40E61D5C
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a3a2f34382d3438203d3e20323030333531.roa
Signing time:             Thu 24 Oct 2024 21:03:28 +0000
ROA not before:           Thu 24 Oct 2024 20:58:28 +0000
ROA not after:            Thu 23 Oct 2025 21:03:28 +0000
asID:                     200351
IP address blocks:        2602:fa43::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:09:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:e2:c4:43:5a:3c:bc:87:13:02:4e:3e:0e:27:8b:7c:40:e6:1d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:28 2024 GMT
            Not After : Oct 23 21:03:28 2025 GMT
        Subject: CN=1DAFE6AC070A0404C709170CB95D45376E99F6D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d6:06:0b:a1:50:79:ec:77:11:fd:e8:5b:b4:
                    65:73:40:af:74:37:18:a0:5c:5f:08:fe:e6:d1:6b:
                    9f:ba:ce:49:7e:de:22:03:ab:33:7b:a9:68:69:9f:
                    91:20:d1:60:d4:85:c2:0a:61:e6:0e:99:61:f1:e7:
                    57:da:23:2b:00:4c:d0:88:13:5e:d4:2c:24:bb:89:
                    4b:0b:7b:4b:86:bd:da:e3:19:a1:a2:7d:72:82:cd:
                    79:3c:df:6d:2d:79:5c:48:0d:23:df:bc:91:17:9c:
                    35:a5:4f:90:35:54:83:e5:0a:ee:16:07:17:8f:ba:
                    d3:10:12:45:d5:23:06:98:c8:88:34:e7:22:c6:ab:
                    76:d4:24:a4:32:f8:cc:c2:03:4e:ab:07:7c:e3:73:
                    00:55:a3:3b:ed:04:4e:d3:77:df:fd:65:2e:75:40:
                    6a:5b:04:f8:52:2c:57:07:f5:bc:dd:5f:dc:ca:60:
                    77:b2:8d:8b:9b:7b:ae:bc:7e:bd:9e:3b:cc:e7:f8:
                    fb:d7:2e:f7:34:51:bd:01:8b:0c:e0:e1:ab:47:ce:
                    4b:6d:f4:b8:4b:b9:2e:4d:16:67:15:d4:04:25:c1:
                    ee:f6:2f:71:1f:8e:bd:fc:92:86:00:e4:db:4a:76:
                    3a:f5:d0:a8:08:fe:79:85:9d:8e:37:ee:86:0e:6a:
                    29:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AF:E6:AC:07:0A:04:04:C7:09:17:0C:B9:5D:45:37:6E:99:F6:D1
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a3a2f34382d3438203d3e20323030333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:a6:a3:ac:0f:36:e9:9c:e9:bf:d5:60:8b:a4:bb:9f:27:7b:
         e0:aa:ce:3e:cf:4d:6f:ca:46:42:79:bc:bc:92:b8:94:8a:f3:
         82:64:d2:28:08:26:d7:46:27:58:3d:99:83:46:91:f7:aa:2a:
         a5:01:a7:d4:05:5b:99:8e:e7:03:ea:f9:4b:e9:8d:f2:ad:27:
         48:7b:5d:5f:f9:d1:ac:a2:e0:e0:20:a5:44:02:e7:3d:e0:2c:
         61:55:e4:b5:cf:6f:77:f8:89:bb:2f:13:3c:49:75:bd:82:84:
         0f:3c:7b:a5:d1:5f:a0:53:ff:b3:7f:9b:b8:4d:3e:55:ff:ad:
         b0:77:e0:61:16:25:1f:70:9e:89:5c:ce:bf:5a:0c:65:c0:5a:
         f9:e6:b5:13:29:77:a3:29:9f:f5:84:f3:99:b9:d8:c0:e0:65:
         27:de:89:b7:45:5b:1e:48:a5:93:a4:3c:ea:ef:9d:a6:5e:83:
         12:e7:23:53:34:e3:34:91:49:dc:2f:28:c4:fa:05:be:e8:c0:
         8d:7e:a2:9c:f0:be:ab:82:cb:bc:6c:86:cb:5d:de:c0:d0:7d:
         06:34:99:d4:0d:7c:6b:16:58:e9:35:3b:80:ee:76:8b:2d:49:
         4f:fe:4f:12:04:b9:4d:15:fc:a1:55:08:0f:e1:66:8b:4c:bf:
         05:eb:0d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:12:54 2024 by rpki-client on console-ams.rpki-client.org