Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a3a2f34382d3438203d3e203534313438.roa
File:                     323630323a666134333a3a2f34382d3438203d3e203534313438.roa (raw, json)
Hash identifier:          VVLZk0yuQ5Z9WxgB0GijFwt7Q4L/eRRoPF8Dl6hzVDo=
Subject key identifier:   BF:15:0C:83:E5:55:50:E2:AB:48:60:33:8B:15:CE:DA:9B:52:A0:33
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       7201F24244CFA034E9869F3B0134F883298D4370
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a3a2f34382d3438203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:28 +0000
ROA not before:           Thu 24 Oct 2024 20:58:28 +0000
ROA not after:            Thu 23 Oct 2025 21:03:28 +0000
asID:                     54148
IP address blocks:        2602:fa43::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:01:f2:42:44:cf:a0:34:e9:86:9f:3b:01:34:f8:83:29:8d:43:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:28 2024 GMT
            Not After : Oct 23 21:03:28 2025 GMT
        Subject: CN=BF150C83E55550E2AB4860338B15CEDA9B52A033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:19:98:a0:1d:fb:d9:5b:9a:fc:98:c9:79:
                    be:fe:a7:31:b7:3c:52:92:ec:4a:4d:54:b0:0f:96:
                    e5:bd:8d:f6:84:ce:75:0f:af:79:8b:49:e9:45:fd:
                    17:36:90:39:c2:21:b5:ef:1b:6e:38:b8:bd:8c:a6:
                    4c:eb:9c:d9:69:58:3b:ea:16:07:dc:15:3b:c8:44:
                    55:7e:e4:01:d8:80:d2:37:16:1a:5d:97:a0:60:c9:
                    1e:c7:65:a2:ee:81:da:48:63:43:0b:c8:b2:4b:9c:
                    eb:cc:e6:5d:92:67:5a:bf:68:4f:83:ee:f0:7b:42:
                    e9:89:64:bf:f6:6c:d5:3d:87:5b:c9:5f:9e:47:cf:
                    a7:40:9a:81:41:f5:5d:ea:b9:9e:30:52:3a:7c:ec:
                    5d:eb:b4:c1:f2:ff:df:3a:c0:b1:1c:0a:e5:60:a1:
                    c5:a2:02:9c:db:3f:3d:0c:e6:b8:7d:ea:d0:4d:85:
                    0b:79:51:da:f4:51:01:e8:8d:09:9b:d9:aa:75:6d:
                    f5:32:27:83:df:2c:8f:cd:da:77:0d:84:c1:e8:5c:
                    f4:7f:10:4e:c2:f5:70:aa:50:74:32:4f:05:18:81:
                    54:58:12:aa:b2:91:cb:37:7e:f9:f0:df:1a:04:10:
                    77:df:6b:a3:b0:0e:77:1e:d9:d9:6e:b2:a7:8b:4a:
                    d4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:15:0C:83:E5:55:50:E2:AB:48:60:33:8B:15:CE:DA:9B:52:A0:33
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a3a2f34382d3438203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:1e:b3:42:78:75:8f:c0:54:07:c7:11:c0:25:10:5e:71:42:
         47:cf:c9:12:3a:1f:eb:d8:58:f4:b4:19:96:2a:84:35:a9:f7:
         34:87:e5:c7:4d:79:93:a8:07:e7:af:e6:de:ac:e0:2e:06:eb:
         7a:17:97:68:b7:7a:68:fd:75:c2:72:59:16:7b:19:84:ae:4c:
         60:4d:45:1f:3d:c3:39:a7:c4:1f:ce:03:00:fb:0d:1b:82:a9:
         e1:94:ee:7f:5d:a7:10:8a:9e:9e:9f:6d:a2:c0:d5:84:7d:1e:
         20:d9:a6:fa:c1:f9:93:de:7a:1a:c1:73:cb:1f:46:fe:2b:07:
         ab:2c:5b:32:64:10:3d:3c:b7:aa:d8:89:72:b4:d6:c3:1d:e1:
         97:e5:c2:f4:bb:2b:b1:4a:7f:9d:e9:bc:71:60:44:b5:3e:28:
         09:4c:95:09:1e:9f:85:b4:b7:77:d6:11:4b:1f:80:ce:51:09:
         fd:b4:50:f8:19:a6:de:6f:14:40:17:23:f7:0b:35:a2:f2:95:
         0a:10:68:84:1e:97:af:de:69:30:98:ca:de:4c:13:1b:2d:c1:
         85:a3:8b:31:fe:25:bb:05:57:6b:0c:f7:c5:ca:2e:24:4d:20:
         37:ad:e1:d9:6e:b4:59:8a:2f:57:7d:2a:da:9d:01:4c:db:f1:
         5c:b6:40:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:44 2024 by rpki-client on console-fra.rpki-client.org