Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a323a3a2f34382d3438203d3e203139353231.roa
File:                     323630323a666163323a323a3a2f34382d3438203d3e203139353231.roa (raw, json)
Hash identifier:          6zgtYj57BM5ncJlcavK/n8siiKXYYOuaz0JoYcUHsmw=
Subject key identifier:   20:80:A0:65:1C:0D:3F:7F:01:FC:7C:28:64:3A:96:79:C4:05:01:6B
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       58A7FDA1BC6ADA1FCF5C4EAA40F3AEBC3BC70A09
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a323a3a2f34382d3438203d3e203139353231.roa
Signing time:             Fri 05 Jan 2024 12:10:43 +0000
ROA not before:           Fri 05 Jan 2024 12:05:43 +0000
ROA not after:            Fri 03 Jan 2025 12:10:43 +0000
asID:                     19521
IP address blocks:        2602:fac2:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a7:fd:a1:bc:6a:da:1f:cf:5c:4e:aa:40:f3:ae:bc:3b:c7:0a:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Jan  5 12:05:43 2024 GMT
            Not After : Jan  3 12:10:43 2025 GMT
        Subject: CN=2080A0651C0D3F7F01FC7C28643A9679C405016B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:07:ab:b7:88:0a:ea:a1:eb:ea:15:c6:44:
                    eb:0b:16:8e:6e:fb:4a:66:34:d6:7b:fd:c3:eb:98:
                    f0:be:68:92:d6:3b:8a:c8:99:44:9b:40:6b:97:2b:
                    9c:06:b0:4a:e4:13:0f:90:28:9a:68:1f:55:21:b1:
                    8d:6e:cd:f8:60:e0:0d:ec:16:6e:af:2b:cc:72:29:
                    fe:1a:f4:a8:11:c7:86:07:e7:9a:d1:0b:80:73:11:
                    fe:b9:bd:b3:c9:90:e4:32:b1:73:02:fe:4f:84:60:
                    13:19:0b:04:a9:77:ad:4f:85:a9:53:21:e5:66:06:
                    d3:63:55:33:63:0f:12:d1:36:88:06:54:7b:ba:38:
                    45:cf:2a:1e:00:42:ac:b6:87:5f:10:11:48:ec:3a:
                    3d:c3:23:86:b1:4d:94:28:9c:e1:03:a9:9b:23:72:
                    80:45:8a:88:53:09:52:6a:4d:d3:d0:2a:32:b0:a2:
                    ae:d2:b6:ce:b8:36:5e:5b:71:61:86:c5:c8:4b:0e:
                    b2:e9:e9:d8:50:80:38:96:16:91:78:2b:e7:c6:07:
                    f9:ac:0b:37:36:a4:fb:df:e2:fc:06:3f:8c:e1:07:
                    62:19:d4:82:94:cb:e9:75:f3:8a:44:74:86:46:01:
                    23:54:08:3c:31:ed:35:db:22:dd:5e:e3:ca:86:27:
                    3d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:80:A0:65:1C:0D:3F:7F:01:FC:7C:28:64:3A:96:79:C4:05:01:6B
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a323a3a2f34382d3438203d3e203139353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:c4:aa:34:ee:d9:31:5b:f1:6b:59:fd:91:4a:da:17:a0:d9:
         9e:ef:b1:2c:18:2b:98:95:3f:db:b1:3d:82:0b:1f:15:12:56:
         f7:2d:c4:1f:75:bd:c0:14:09:21:70:4d:6e:6f:54:65:fd:dc:
         13:4f:79:40:91:4e:93:88:26:5f:3c:8c:4d:48:a6:88:16:78:
         9e:70:8e:b1:f7:b9:02:b8:9e:ad:0c:f4:90:61:e0:83:77:9a:
         b1:62:2b:a0:8e:73:21:1a:7a:7d:ee:2c:74:4f:bd:a7:ae:a7:
         72:4d:db:27:2c:02:d5:bc:7b:a0:00:db:17:3d:8f:b8:50:b5:
         2a:8c:d2:4f:8b:58:a0:25:41:c6:a6:a1:02:03:4f:29:8e:52:
         2e:90:b8:ba:b7:06:67:27:d9:7f:54:b8:a6:3d:5b:da:cb:c6:
         95:fb:00:08:38:ac:66:79:47:c9:d1:95:0d:c5:ca:c9:56:ec:
         dd:32:48:24:9d:74:40:82:3f:3d:1c:f8:76:28:e3:b8:70:74:
         51:67:03:3a:14:a0:d4:cf:3d:59:0a:1f:0d:c3:33:09:19:ef:
         29:0f:09:6b:03:17:d9:51:7f:bb:58:42:d3:63:ee:06:8d:a0:
         20:9a:66:8a:2d:53:f9:0c:ef:d1:01:ac:3f:e7:67:12:83:6d:
         97:d8:97:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:27:33 2024 by rpki-client on console-fra.rpki-client.org