Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          wJA7oi+12YTFP5OwLmThVKtXasRwzxtEBro8Dl0f1Fg=
Subject key identifier:   5B:F8:F7:8C:12:7E:A1:D8:B9:60:CA:3B:90:A6:95:7E:7D:D5:D0:62
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       61A75A9437CF18FC2D5DE8AFAA45E018E2FF71C6
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:31 +0000
ROA not before:           Thu 24 Oct 2024 20:58:31 +0000
ROA not after:            Thu 23 Oct 2025 21:03:31 +0000
asID:                     54148
IP address blocks:        2602:fa43:a4::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Dec 2024 16:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a7:5a:94:37:cf:18:fc:2d:5d:e8:af:aa:45:e0:18:e2:ff:71:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:31 2024 GMT
            Not After : Oct 23 21:03:31 2025 GMT
        Subject: CN=5BF8F78C127EA1D8B960CA3B90A6957E7DD5D062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:7f:d2:74:25:0c:59:8d:2a:43:4b:99:57:
                    02:c2:61:9e:88:f9:85:cc:80:c0:89:51:c4:84:9d:
                    e0:6e:47:ac:2e:c9:5f:48:d2:34:bc:91:05:29:a6:
                    d6:80:bc:e1:4a:03:be:0c:3f:42:de:92:3d:9f:80:
                    7f:b3:0a:9c:b0:eb:3e:91:1c:49:20:ed:7b:2d:e4:
                    5a:4b:9b:28:1d:e0:f9:c9:15:55:48:77:2f:c9:1d:
                    8b:52:ce:89:a3:5d:78:ea:f8:f7:2c:26:cd:4a:95:
                    d4:10:35:3a:02:1c:8e:c2:4f:a4:72:37:d3:36:32:
                    bc:af:ac:c7:ea:c0:fa:40:a1:dc:59:36:ff:9f:7b:
                    59:07:cc:c3:c3:13:a7:98:e2:8e:e0:9b:72:cb:60:
                    32:fc:0b:6e:ea:5f:30:87:67:0e:26:e4:86:e8:c3:
                    5a:b5:25:02:6f:c5:b5:4b:26:2f:6e:83:3d:b4:7e:
                    6e:f8:a2:40:e5:5c:b2:f9:50:d8:9b:ce:df:fb:e9:
                    8d:af:bb:d7:08:b0:45:8d:ec:e1:0e:d6:aa:f8:d9:
                    bb:d5:eb:6f:57:55:b3:a2:58:e1:c9:c5:b1:b8:f2:
                    55:95:f5:9c:92:39:88:96:dc:7a:74:47:81:85:52:
                    87:f9:be:6d:78:19:1a:e8:8c:cd:fb:92:15:90:d2:
                    99:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F8:F7:8C:12:7E:A1:D8:B9:60:CA:3B:90:A6:95:7E:7D:D5:D0:62
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61343a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:a4::/46

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:6d:04:18:84:62:f1:e2:f2:ea:57:e5:93:f4:24:e3:88:
         fd:26:18:37:a4:5e:87:ab:50:94:8d:b9:b7:07:c2:17:44:75:
         08:0b:c9:60:c3:b3:f9:3c:63:66:f2:be:80:08:3e:93:01:4d:
         b7:a6:96:c2:c1:a5:ff:8d:71:dd:b6:be:a6:3c:a3:4b:46:b7:
         52:22:b3:15:08:b6:7d:83:f3:10:e0:70:56:50:25:c4:24:fa:
         49:71:82:1a:73:1c:89:b3:a1:5f:2c:a5:04:a9:f7:73:d8:af:
         c2:39:67:a8:83:07:98:86:ee:26:81:2c:ee:ef:5e:1e:d3:13:
         0e:01:7f:cf:32:69:51:a1:19:f5:a3:f3:9f:2e:69:70:8c:26:
         e9:8a:df:5d:c4:ae:f9:fc:f9:9b:d1:bf:a1:d4:0e:7f:5f:39:
         d9:bc:b7:2f:89:66:89:fa:74:27:74:37:dd:5c:f5:b3:18:ea:
         6c:55:e9:f1:03:70:c5:13:27:2b:de:bb:a4:8a:74:f6:7c:13:
         96:2b:2e:e0:88:d0:c9:e4:7f:64:2e:30:ad:83:b3:d5:cf:b2:
         18:05:7b:67:c5:10:14:b6:13:1f:b7:8c:eb:33:79:dd:16:70:
         4b:63:94:b6:d9:30:30:29:83:04:71:ab:ec:ca:2a:d5:34:19:
         8e:ca:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 15:06:15 2024 by rpki-client on console-fra.rpki-client.org