Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          ymd7OoSnOuo0j0FHh1rXwB2pwk2+IoNmidsfhW5hI8I=
Subject key identifier:   83:CE:81:EA:0B:F6:6B:D1:82:AB:88:B8:A4:63:37:82:CE:1A:13:7E
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       74FDFA09D33DDAF8716D28ABB283FF77EC1AC3D1
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa
Signing time:             Thu 24 Oct 2024 21:03:30 +0000
ROA not before:           Thu 24 Oct 2024 20:58:30 +0000
ROA not after:            Thu 23 Oct 2025 21:03:30 +0000
asID:                     54148
IP address blocks:        2602:fa43:ac::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Dec 2024 15:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fd:fa:09:d3:3d:da:f8:71:6d:28:ab:b2:83:ff:77:ec:1a:c3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Oct 24 20:58:30 2024 GMT
            Not After : Oct 23 21:03:30 2025 GMT
        Subject: CN=83CE81EA0BF66BD182AB88B8A4633782CE1A137E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:e2:ae:27:ef:19:6d:7f:c9:52:24:5f:00:
                    e2:45:96:30:13:e3:ef:6e:07:5f:e3:66:7c:38:b7:
                    ba:e0:fd:4f:dc:e5:31:40:32:eb:e3:5a:1a:86:f5:
                    cc:1c:5f:97:a1:b1:0e:ef:78:0c:a5:08:47:63:6e:
                    12:b8:7f:0b:b5:46:7f:61:ed:89:af:15:0a:d3:e9:
                    e6:94:ba:2f:92:d0:d1:35:2c:13:e0:cd:27:6b:f5:
                    26:a5:5c:8f:98:f1:e1:e1:2c:7f:65:0d:3a:9a:10:
                    56:82:f3:32:35:48:85:0d:b4:52:02:96:10:56:4b:
                    7c:8e:2a:ce:33:68:0a:43:ed:4a:cf:d6:48:07:54:
                    85:d2:b8:d2:0a:6b:84:4f:aa:22:8d:f4:cf:d6:c9:
                    38:b9:45:9a:d2:fd:1f:ca:e7:0c:10:8c:16:02:98:
                    b7:95:de:f3:64:3e:48:82:63:30:b4:fd:19:2d:03:
                    96:be:58:73:c9:c5:80:24:d5:40:a8:ab:2c:91:35:
                    14:44:15:bf:71:48:9b:e8:77:3c:8f:e1:f9:92:13:
                    4e:46:75:2a:e5:9e:fa:40:9b:d3:53:25:0c:69:5c:
                    b6:a3:de:c6:0d:3b:a5:50:f1:5f:21:49:e0:eb:c7:
                    ce:d6:33:25:12:87:2c:50:37:a1:23:db:77:91:1a:
                    96:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:CE:81:EA:0B:F6:6B:D1:82:AB:88:B8:A4:63:37:82:CE:1A:13:7E
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a61633a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:ac::/46

    Signature Algorithm: sha256WithRSAEncryption
         36:10:f0:b6:77:2a:15:67:30:7d:26:48:e3:f7:f5:c3:25:26:
         3c:d4:59:60:0e:b9:e3:06:d0:8e:f4:a3:f8:9a:5b:38:ee:c3:
         0d:86:d7:18:ad:46:2f:d6:8c:63:d0:86:e3:1c:a9:d0:39:ed:
         12:71:98:49:56:5e:e5:33:95:af:99:54:9e:50:f3:fa:18:df:
         8b:9e:45:61:f4:19:14:58:87:90:d6:14:ab:9c:6d:be:dd:4f:
         97:a7:eb:e2:c8:fa:f0:c0:b1:98:b1:b8:79:7c:f9:c2:39:3b:
         93:f3:97:7b:62:c6:e0:e5:c2:e0:3c:db:9e:7c:96:f2:3b:e0:
         50:2a:5c:2b:ba:73:40:dc:7b:86:ee:b5:fc:14:4c:71:e1:82:
         ce:31:7c:69:ad:9d:8b:2a:55:10:ea:d0:78:f1:ed:8e:74:90:
         d0:cb:40:51:3c:46:d1:75:d2:83:64:55:3a:91:d5:19:d6:a4:
         b5:38:94:ed:b3:f6:fb:0f:d8:4c:b0:4a:1d:96:2d:29:fe:5a:
         7a:95:58:26:50:b5:b8:16:75:14:10:9a:b4:d2:d7:e2:fa:37:
         67:83:65:4e:de:10:55:03:73:19:c2:85:eb:9e:80:54:02:43:
         7a:ba:23:fb:ed:40:77:3b:75:e5:01:f7:cb:68:13:27:fb:d7:
         16:d1:aa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 14:25:42 2024 by rpki-client on console-fra.rpki-client.org