Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          KD1qrr+TGCUSOV3FeN1cXtDCTOQ2D6OhMpDd4bci8/M=
Subject key identifier:   9C:21:F6:76:2B:BD:FA:68:EB:64:5C:97:81:FB:3E:82:97:3B:80:B5
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       59D2A5CDB737B29FF68DD6DB4C917562E05B67EB
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:27 +0000
ROA not before:           Thu 24 Oct 2024 20:58:27 +0000
ROA not after:            Thu 23 Oct 2025 21:03:27 +0000
asID:                     54148
IP address blocks:        2602:fa43:a8::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d2:a5:cd:b7:37:b2:9f:f6:8d:d6:db:4c:91:75:62:e0:5b:67:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:27 2024 GMT
            Not After : Oct 23 21:03:27 2025 GMT
        Subject: CN=9C21F6762BBDFA68EB645C9781FB3E82973B80B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:90:5f:78:ac:6c:32:ad:15:4a:9d:1d:b1:
                    44:64:80:80:39:83:cf:b7:22:1c:30:8a:a7:57:15:
                    e2:c8:57:7f:d3:39:e4:ff:13:4e:17:29:44:b8:99:
                    f8:44:33:22:76:d7:6c:e8:72:11:4f:66:a3:6e:56:
                    de:2d:59:a8:84:db:d4:a9:2f:5f:b8:26:05:ba:6c:
                    c7:f8:9a:da:43:0b:55:85:23:58:f2:3f:b8:ed:eb:
                    1b:52:d4:a5:52:c6:be:d7:1c:22:cc:66:ba:f8:f7:
                    b1:5b:03:49:60:9a:b3:95:49:22:67:a4:af:68:d0:
                    94:75:51:fa:4e:30:89:c0:89:74:eb:9a:de:02:63:
                    f6:c3:b5:97:c5:fa:f1:a2:6d:9c:66:f4:1d:6e:bf:
                    bf:79:05:88:e7:e7:30:38:98:d3:26:67:47:20:ce:
                    30:d2:fa:2d:9b:85:fa:d0:3e:01:a6:9f:1b:87:58:
                    14:47:ad:ed:b1:ea:45:63:16:b6:8b:c0:ce:8a:25:
                    7c:3f:9c:b9:c5:a1:7d:81:38:84:89:ea:0d:7c:4f:
                    df:a6:3a:f0:16:27:83:42:36:ed:df:5e:40:af:7d:
                    54:56:eb:8b:20:c2:c5:28:4b:c8:35:a5:df:3e:16:
                    aa:aa:c0:95:1b:09:50:ce:7e:7c:4d:b0:ab:b4:12:
                    2f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:21:F6:76:2B:BD:FA:68:EB:64:5C:97:81:FB:3E:82:97:3B:80:B5
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61383a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:a8::/46

    Signature Algorithm: sha256WithRSAEncryption
         3d:3e:7b:cc:cb:60:66:aa:25:f5:93:78:b4:db:0e:75:f5:3c:
         63:5c:0d:59:fb:5d:c0:3b:68:88:fb:22:19:b8:10:eb:1d:61:
         46:cf:28:b9:52:76:8d:51:c1:12:89:38:a6:a0:78:96:fc:50:
         c5:94:fd:d5:45:78:29:56:be:2f:f7:8a:87:63:99:4a:79:42:
         96:32:14:8e:26:eb:bd:50:3a:51:e0:f1:31:2e:a3:33:51:56:
         f5:4e:52:0a:b5:8d:f5:9e:02:4f:24:d9:0d:78:de:49:56:1a:
         c4:ac:c8:db:a3:b2:8a:74:5b:d4:df:b4:9e:88:3e:c6:a3:02:
         4d:30:15:5c:6a:1e:bc:7b:f5:5c:c8:20:a8:b6:be:bf:4f:ac:
         f1:04:8e:80:69:26:85:05:6a:e0:de:c1:94:33:f6:6d:a9:87:
         1c:84:50:b0:fd:93:54:90:f5:56:70:31:fd:1b:33:77:16:b1:
         72:50:3e:0e:56:9d:41:77:c7:28:d6:de:ad:48:7f:19:ae:4f:
         1f:69:2a:39:92:d6:2b:5b:91:0b:b5:23:f6:fb:c8:1e:2c:88:
         43:f5:8d:4c:41:93:b9:b5:1e:87:61:2a:28:7f:32:0f:9d:bf:
         21:c9:47:a8:54:a3:f7:16:c1:1d:65:e5:50:42:98:95:86:4c:
         3f:1e:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:44 2024 by rpki-client on console-fra.rpki-client.org