Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a333a3a2f34382d3438203d3e20313431383932.roa
File:                     323630323a666163323a333a3a2f34382d3438203d3e20313431383932.roa (raw, json)
Hash identifier:          nx5/aXnh1IGZsIBmvyOs8rK0sxzbWLtnvxe4UV2ivgQ=
Subject key identifier:   64:A3:C2:4D:52:B6:34:16:8B:5F:1C:33:36:79:A0:64:50:1F:B5:9A
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       269FA465CDD127150F8574276A9018C4E9C6F8A7
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a333a3a2f34382d3438203d3e20313431383932.roa
Signing time:             Fri 17 Nov 2023 11:00:39 +0000
ROA not before:           Fri 17 Nov 2023 10:55:39 +0000
ROA not after:            Fri 15 Nov 2024 11:00:39 +0000
asID:                     141892
IP address blocks:        2602:fac2:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9f:a4:65:cd:d1:27:15:0f:85:74:27:6a:90:18:c4:e9:c6:f8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Nov 17 10:55:39 2023 GMT
            Not After : Nov 15 11:00:39 2024 GMT
        Subject: CN=64A3C24D52B634168B5F1C333679A064501FB59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:53:d9:6d:9f:97:e9:52:01:6f:14:bc:1f:a8:
                    e9:04:31:cd:cb:38:aa:32:c4:a9:1e:29:26:e3:93:
                    47:57:06:ce:c0:d8:b5:22:df:10:2e:6d:58:8f:b2:
                    ae:2b:19:cf:c0:f5:7d:f6:66:86:ea:21:37:6a:f2:
                    34:e5:88:23:32:13:0a:a3:fe:c9:f6:87:82:62:36:
                    fc:0e:62:0c:14:22:ab:55:d0:17:3c:a2:59:d1:98:
                    ef:7a:d5:b1:43:a3:3f:8b:a2:3f:74:ac:0e:c1:df:
                    1d:07:b3:9f:48:6c:d1:24:dc:a3:94:f1:e9:af:a8:
                    6c:78:a6:c7:4c:a3:7c:25:0e:12:72:6c:5b:89:c9:
                    eb:21:36:37:19:27:a9:3b:01:04:52:cf:9c:d6:18:
                    3a:75:1c:8b:ff:79:11:1a:21:02:54:68:26:92:61:
                    6c:d0:9e:4b:53:be:cc:5b:68:ff:bf:39:ce:03:f6:
                    eb:ef:7f:a8:d8:bf:26:9e:eb:0e:27:5f:cf:27:d5:
                    f1:b7:e7:bd:5a:bf:3c:66:60:53:3d:a5:da:30:27:
                    dc:7d:bc:b2:a2:de:68:f2:ef:ed:9c:67:a5:8a:5d:
                    2c:f9:81:46:74:3d:dc:10:bc:9b:1a:df:9f:3e:76:
                    58:e4:ea:6b:52:a1:8d:3c:1a:bc:4e:8d:08:9c:1a:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A3:C2:4D:52:B6:34:16:8B:5F:1C:33:36:79:A0:64:50:1F:B5:9A
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a333a3a2f34382d3438203d3e20313431383932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:98:ac:3f:cd:ec:ea:ac:73:73:64:15:97:34:40:b1:9e:ab:
         ba:23:cd:0e:09:4c:43:b7:75:7a:c1:72:d8:bb:4f:c3:36:ac:
         52:be:40:87:01:13:8f:be:87:0c:54:5e:30:1d:f9:64:20:ab:
         70:d2:42:0f:19:cf:9e:84:d7:cb:85:4c:8a:b1:4d:d0:e6:ec:
         ae:7c:93:f8:6e:f2:94:6e:0d:8a:89:96:b9:f4:93:60:72:8b:
         fc:1c:7b:51:26:c9:9b:8e:e3:32:b8:be:79:e4:21:a0:27:a4:
         b3:f7:f4:7e:5a:15:46:64:b4:e7:82:98:d3:ee:06:42:cd:41:
         17:65:b8:01:9c:20:aa:8c:f7:5b:ad:28:20:9f:bc:20:75:88:
         ff:f8:93:21:be:bf:b3:19:24:c8:ec:68:5b:3d:c0:50:36:a8:
         07:34:93:07:ab:2b:c6:4b:f3:bf:ef:97:a1:31:10:96:30:dc:
         19:14:90:37:a3:e4:25:df:11:55:48:aa:c2:06:f3:d3:ca:a6:
         8b:72:b9:9a:d5:fa:cd:d3:6d:ab:06:1c:0d:57:c2:ef:be:82:
         08:b7:b7:1c:79:40:ba:8c:f4:31:7f:84:87:ab:85:b1:8f:b2:
         af:b7:54:c8:d4:6c:26:ea:a3:95:46:f5:5a:e4:b1:c0:dc:cd:
         77:45:08:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:50:59 2024 by rpki-client on console-ams.rpki-client.org