Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a323a3a2f34382d3438203d3e20323030373735.roa
File:                     323630323a666163323a323a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          Vf6xXwBCOpOhpXgOphH45jfnOrEjt+lCs7XwE36zv5Y=
Subject key identifier:   EC:7B:DB:6E:A8:4D:40:5C:29:40:F5:29:9C:7A:BE:45:6C:C3:64:C2
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       40B607DBFC46E59CBF246D4B8FF916B37BBE81EC
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a323a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Fri 18 Oct 2024 07:53:48 +0000
ROA not before:           Fri 18 Oct 2024 07:48:48 +0000
ROA not after:            Fri 17 Oct 2025 07:53:48 +0000
asID:                     200775
IP address blocks:        2602:fac2:2::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b6:07:db:fc:46:e5:9c:bf:24:6d:4b:8f:f9:16:b3:7b:be:81:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Oct 18 07:48:48 2024 GMT
            Not After : Oct 17 07:53:48 2025 GMT
        Subject: CN=EC7BDB6EA84D405C2940F5299C7ABE456CC364C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:ca:65:d8:5c:70:bc:75:f2:ff:66:af:50:
                    7f:00:2b:49:20:6d:b2:8a:ae:d1:ec:80:93:e5:15:
                    28:53:d3:cf:a6:62:3c:1e:0f:50:9b:4a:ef:a6:e8:
                    df:24:1f:f2:3f:2f:12:0f:10:0a:3a:a4:0e:e8:84:
                    99:62:f3:bb:9f:ff:2c:73:46:1c:4b:7b:93:68:4f:
                    d1:5c:e6:e3:38:fb:bb:60:aa:7c:70:a6:82:de:d2:
                    30:91:0d:0a:31:c0:f8:02:fb:85:20:ce:6e:18:68:
                    59:58:61:1d:b1:ff:d0:d5:0f:df:a5:0e:d4:ab:45:
                    e6:62:cd:dc:d3:a0:f8:d7:05:f7:75:4e:63:f8:85:
                    7a:00:86:09:99:7a:00:f7:55:fa:5f:fc:25:b3:1b:
                    32:ed:fe:55:83:7c:fb:44:a5:51:e6:ec:48:7e:3c:
                    5c:05:e6:21:ed:88:ab:6c:63:ab:37:29:be:41:1e:
                    36:22:08:1d:3a:ff:80:5a:dd:89:1f:b5:48:ad:0e:
                    47:a6:ed:db:2a:96:6e:fc:6d:69:13:80:f8:b9:61:
                    8e:e7:61:df:21:23:b4:7b:0c:52:d8:f9:d5:bc:dc:
                    ae:e4:22:c9:27:de:b1:67:c0:3e:a0:a8:06:6f:9c:
                    35:ed:cf:6f:ef:ea:72:63:14:69:be:5f:91:52:62:
                    33:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:7B:DB:6E:A8:4D:40:5C:29:40:F5:29:9C:7A:BE:45:6C:C3:64:C2
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a323a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:a3:72:5d:c8:2d:69:71:2d:4d:f1:79:52:ef:1a:f5:26:
         4f:a5:06:67:32:a1:95:f5:b0:78:05:62:08:c3:65:d8:28:26:
         52:c4:1f:a9:9d:73:3b:2b:37:42:56:f0:eb:f2:1d:ff:19:47:
         46:ec:e3:15:f0:85:96:21:5a:94:f8:0e:d9:48:91:d3:e2:ea:
         0f:65:07:ec:eb:8c:a4:dd:42:6c:75:00:15:44:9b:14:7a:f9:
         2c:20:54:16:94:0d:f6:9f:78:f6:d5:ba:b2:8a:ac:da:1c:4a:
         30:6b:5c:d9:2c:43:17:ab:c5:5f:8c:c8:96:3f:ae:40:92:1d:
         f2:f1:39:69:43:e0:eb:86:b8:5b:77:de:57:b1:ed:fe:cb:5d:
         4a:c7:dc:07:2d:f1:6a:05:1a:c7:02:0d:60:a6:4f:72:6a:3b:
         28:ce:0a:8c:44:77:5e:aa:c0:3c:63:be:e6:3f:52:c5:11:97:
         62:a9:b3:62:03:42:bf:a4:81:6e:6e:89:42:35:52:b5:e5:d6:
         54:06:70:99:02:e3:d4:22:55:13:02:5a:4a:4e:1e:42:7b:8f:
         b2:70:c2:e7:cd:e2:dc:7a:19:ed:59:7b:80:d3:44:69:b2:c2:
         45:c4:95:91:b6:03:ec:e0:4e:ad:d8:3c:1a:88:b1:3a:67:23:
         ad:90:7c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:49:11 2024 by rpki-client on console-ams.rpki-client.org