Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a62303a3a2f34362d3436203d3e203534313438.roa
File:                     323630323a666134333a62303a3a2f34362d3436203d3e203534313438.roa (raw, json)
Hash identifier:          dekolAf61bi+1LuO3IuRQSQBPL1zkfWefS8FjsWaB8M=
Subject key identifier:   A3:7E:71:1E:F8:68:46:E4:41:F0:37:AF:98:83:EC:B4:31:6D:CA:E9
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       465076599DEE675AD39F63DD1BABFBD08788655B
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a62303a3a2f34362d3436203d3e203534313438.roa
Signing time:             Mon 02 Dec 2024 00:43:26 +0000
ROA not before:           Mon 02 Dec 2024 00:38:26 +0000
ROA not after:            Mon 01 Dec 2025 00:43:26 +0000
asID:                     54148
IP address blocks:        2602:fa43:b0::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Dec 2024 10:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:50:76:59:9d:ee:67:5a:d3:9f:63:dd:1b:ab:fb:d0:87:88:65:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Dec  2 00:38:26 2024 GMT
            Not After : Dec  1 00:43:26 2025 GMT
        Subject: CN=A37E711EF86846E441F037AF9883ECB4316DCAE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:97:21:00:b2:31:98:c3:ac:16:e0:e4:e9:ef:
                    29:c4:6f:5c:eb:7e:f9:92:95:9c:15:54:82:fb:7e:
                    0e:ed:9e:db:5b:01:25:4e:43:da:56:a8:27:11:e4:
                    e8:49:ba:84:9b:18:73:ff:87:87:ff:00:ed:7d:d1:
                    bb:bc:b3:75:13:4b:c5:ef:5d:44:f1:c5:de:ac:4e:
                    f8:a9:cb:10:ab:dd:18:0d:8c:e9:b2:4d:c3:bc:8b:
                    ad:b5:45:fc:c7:5e:e8:15:9d:40:03:ad:ff:86:74:
                    c5:35:69:05:8f:d1:66:2e:e8:b4:a0:1b:fd:52:cb:
                    8f:85:45:80:54:9a:7f:89:34:01:00:28:1e:a1:28:
                    bc:ba:02:d8:3a:eb:bf:74:8c:07:d7:8e:c4:1e:99:
                    74:2d:56:88:4f:3d:f2:c7:36:b3:4f:ef:6b:c4:8a:
                    c5:b8:35:a3:58:6c:f6:71:ed:5d:34:4f:04:95:3c:
                    81:73:a8:71:7d:39:0c:c8:1f:ca:f5:cc:09:5c:67:
                    c7:af:6d:64:23:6f:3c:f8:0a:a5:c8:04:b5:70:a0:
                    4f:f3:46:45:f4:06:97:75:a9:29:16:84:95:09:7c:
                    a1:97:31:b8:c6:e7:59:1e:e4:c2:c1:0e:15:26:85:
                    42:3c:c4:e3:c8:cf:61:ff:dc:bb:0a:a9:f8:16:2a:
                    ca:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7E:71:1E:F8:68:46:E4:41:F0:37:AF:98:83:EC:B4:31:6D:CA:E9
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/323630323a666134333a62303a3a2f34362d3436203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa43:b0::/46

    Signature Algorithm: sha256WithRSAEncryption
         4d:7f:4a:78:04:ef:a8:67:dd:42:da:84:fc:cd:1f:8c:ec:78:
         29:f1:eb:bf:5b:2f:76:dc:ca:a6:cc:41:8e:1d:f2:1e:b3:43:
         1c:81:60:2c:80:31:e4:82:9e:53:7f:f6:79:93:83:f9:4a:0a:
         5a:17:b2:f6:39:7a:63:39:ed:c6:da:96:b0:d9:af:72:92:72:
         28:9e:4b:57:3b:d6:7e:86:88:34:42:2d:2c:ff:e7:80:4e:2e:
         c9:60:fb:fe:43:dc:7a:6f:03:b6:86:d8:0c:30:01:cb:93:a5:
         91:0f:42:51:14:6e:98:74:94:07:c4:4c:f9:f8:fa:ce:be:d0:
         c4:07:97:66:f9:8b:a5:13:ae:29:61:82:d5:b6:50:73:ff:9d:
         09:cc:0e:07:a8:eb:ac:7d:b2:3c:0d:6b:46:a9:40:9a:36:52:
         f0:c3:ea:a3:a8:7f:70:61:af:b1:9c:44:d7:f8:9a:54:d1:cd:
         fe:7f:d8:fd:b0:7e:0c:da:e1:e1:b6:d1:e4:aa:03:7e:7a:59:
         ed:1d:9c:73:f6:25:90:10:a8:05:79:69:af:b0:c9:7f:dd:ec:
         5d:8d:2e:f7:c3:9d:88:7e:3c:a5:7f:1d:ba:18:5d:31:75:92:
         88:a0:d7:47:cc:bc:cb:f5:cb:76:57:e8:3f:41:98:af:6c:43:
         5c:ed:7c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 10:19:21 2024 by rpki-client on console-fra.rpki-client.org