Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa
File:                     323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          huhEFuULopIS1X+Ds5xLjRHA1YMe1CWnc/9pBmobgtg=
Subject key identifier:   A2:AB:37:AF:FD:14:71:95:64:81:FD:1A:71:9D:D2:E1:78:4B:7F:CD
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       20C93A3915A0C1F795CADFF1750C723E0F6CF045
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Mon 05 Feb 2024 13:51:25 +0000
ROA not before:           Mon 05 Feb 2024 13:46:25 +0000
ROA not after:            Mon 03 Feb 2025 13:51:25 +0000
asID:                     152368
IP address blocks:        2602:fac2:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c9:3a:39:15:a0:c1:f7:95:ca:df:f1:75:0c:72:3e:0f:6c:f0:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Feb  5 13:46:25 2024 GMT
            Not After : Feb  3 13:51:25 2025 GMT
        Subject: CN=A2AB37AFFD1471956481FD1A719DD2E1784B7FCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:04:4c:cf:76:34:00:2c:ba:15:e5:c8:90:6f:
                    0c:3f:52:6e:8b:1b:ce:79:c1:fd:1c:a1:93:b8:a3:
                    c5:10:49:fb:e3:6b:76:82:4d:53:f3:3a:d3:78:5b:
                    aa:37:a1:9b:34:98:43:47:1c:1c:01:ed:8e:4b:63:
                    7a:f9:0c:d2:3d:65:b6:2a:7c:6d:ad:fe:e7:4b:ae:
                    d3:70:85:fe:9f:4f:67:96:57:cc:da:de:c6:f0:23:
                    e1:8f:cc:11:ea:19:1f:cf:c3:30:e2:30:4c:b1:17:
                    f0:66:69:2c:4d:e9:af:5c:8f:ab:6f:35:40:87:02:
                    4b:5e:e1:3a:d6:b3:3a:06:13:27:0d:97:67:9f:7d:
                    b4:7c:f3:84:1c:09:0a:d6:c2:e1:24:01:c5:13:80:
                    b3:8f:5d:d3:af:96:f9:0e:1c:8e:d1:d0:ad:b5:9b:
                    3d:52:ea:d5:d5:72:e4:5c:af:2c:38:c0:d0:f4:95:
                    94:62:45:1c:d9:72:e3:cc:98:78:73:29:1d:ab:50:
                    71:99:aa:0d:02:5b:69:bf:86:9c:d3:56:2a:90:5a:
                    17:76:63:84:78:69:d9:3a:31:74:bb:72:ab:70:43:
                    dd:fa:41:89:77:74:5f:5b:4d:ff:7d:72:ee:c4:ba:
                    d0:33:60:99:90:62:34:cb:c9:b9:21:40:59:be:23:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AB:37:AF:FD:14:71:95:64:81:FD:1A:71:9D:D2:E1:78:4B:7F:CD
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:bf:00:d3:d5:88:17:e1:45:9f:7b:6d:f9:09:ed:84:af:00:
         2f:b2:ba:86:d3:1c:71:34:b2:f0:77:31:a3:af:9c:85:93:7e:
         03:86:0b:3a:4f:4c:b5:a5:cb:49:fe:c3:d1:78:2b:00:2d:cf:
         50:4a:b4:c2:6b:91:ca:a0:af:0f:09:b1:c2:36:93:62:57:58:
         11:75:7a:73:15:ca:22:6e:1a:28:f4:af:93:d0:c8:e9:2c:e5:
         21:4d:5d:74:79:31:97:7f:70:98:3e:c3:6d:a5:0d:f4:60:f4:
         1e:67:57:eb:9b:46:26:cd:2c:7a:99:67:5b:14:cb:e0:93:f7:
         63:7c:f2:07:8e:ce:32:be:90:eb:68:e5:3b:3a:64:c5:b1:54:
         b5:c8:d9:80:b8:b1:30:78:37:a0:5d:a3:ce:26:2d:39:ae:96:
         aa:27:c1:40:44:97:56:cd:b2:c6:4e:06:5a:f0:17:d8:03:36:
         2e:42:e0:ea:7c:ca:98:ff:4f:54:27:e1:c6:c6:8c:e8:a8:8d:
         a5:8e:e9:18:f0:86:25:19:01:6d:c6:42:c8:35:69:6b:26:3e:
         73:62:54:1d:4a:fe:ac:e8:d4:94:98:a6:32:81:11:54:58:bc:
         2f:fb:0e:89:d4:af:00:72:0c:01:38:0b:26:64:d7:ad:3a:ef:
         36:37:52:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:49:11 2024 by rpki-client on console-ams.rpki-client.org