Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a343a3a2f34382d3438203d3e203134333135.roa
File:                     323630323a666163323a343a3a2f34382d3438203d3e203134333135.roa (raw, json)
Hash identifier:          7yaDRZwRWmAwnvh96F0fbH1zeiFI3Xfww568zLxqLLE=
Subject key identifier:   9E:81:DE:77:90:B2:66:27:48:D2:34:E3:7E:5A:90:C1:7D:15:97:89
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       4D648B76FEB6D6751254924CFAA983D5B2ED43B5
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a343a3a2f34382d3438203d3e203134333135.roa
Signing time:             Wed 23 Oct 2024 16:53:48 +0000
ROA not before:           Wed 23 Oct 2024 16:48:48 +0000
ROA not after:            Wed 22 Oct 2025 16:53:48 +0000
asID:                     14315
IP address blocks:        2602:fac2:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:64:8b:76:fe:b6:d6:75:12:54:92:4c:fa:a9:83:d5:b2:ed:43:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Oct 23 16:48:48 2024 GMT
            Not After : Oct 22 16:53:48 2025 GMT
        Subject: CN=9E81DE7790B2662748D234E37E5A90C17D159789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:86:8c:70:bd:86:4f:94:a9:f2:f0:99:26:1d:
                    30:44:79:3b:ab:bd:20:1e:bd:1a:56:58:d4:c5:fb:
                    d6:b9:50:45:60:d2:98:67:71:5e:91:a9:33:e2:94:
                    73:25:b3:14:87:c2:3b:16:a7:64:2c:84:44:90:a9:
                    d0:26:f0:4a:d4:c0:f1:ac:3a:f4:29:f7:13:d7:2b:
                    49:8a:87:36:9c:41:ed:b3:c1:92:ff:57:58:cd:fb:
                    89:f0:f2:b8:ec:38:77:fc:36:60:06:3b:de:52:b9:
                    01:c9:e2:47:01:bb:29:49:3f:8e:d6:47:ef:7c:0e:
                    a2:d0:4e:86:e9:74:59:7d:a2:87:6a:57:42:66:42:
                    20:81:fd:67:a5:a1:d3:d2:13:fa:ad:ae:0b:44:13:
                    22:96:5c:e1:ac:76:76:3c:7d:c9:76:55:1b:51:bc:
                    10:7f:6c:78:ad:fa:2d:ea:d0:9c:e0:df:67:1a:45:
                    4e:8e:e5:f3:20:6a:82:39:9b:be:2a:91:07:41:ac:
                    f1:74:16:21:16:92:93:6e:b6:6e:7f:26:24:fd:89:
                    43:c5:3e:f4:ce:e4:da:28:62:9c:a8:84:76:a3:ef:
                    27:b3:9b:08:5d:6b:6b:53:2e:7e:15:8e:f3:2c:6d:
                    fe:22:60:8e:b5:d5:37:3c:4a:32:b0:19:6a:66:b7:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:81:DE:77:90:B2:66:27:48:D2:34:E3:7E:5A:90:C1:7D:15:97:89
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a343a3a2f34382d3438203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:0a:ed:1d:84:f3:cd:f1:7d:25:e4:0d:13:af:0c:c1:74:07:
         7b:3a:9b:8f:4e:29:7d:8a:0b:2f:a3:41:50:6a:2d:73:b7:2a:
         a3:62:e9:e6:f0:1f:fe:29:d1:07:b9:55:d4:08:1d:10:1b:25:
         7a:65:90:8d:e3:6b:4e:1d:da:d3:32:dc:21:b5:01:fe:26:98:
         f8:c4:73:24:a8:af:8f:9b:de:00:31:87:fd:76:33:49:0b:ee:
         25:33:99:e7:90:b8:0f:c9:0f:33:98:3c:94:89:0d:35:cb:9a:
         47:86:37:ce:3d:10:a9:f4:e1:b5:25:c2:53:82:7a:87:0d:37:
         e7:e9:95:df:cd:98:0f:24:b5:d2:a5:56:79:e6:19:1e:cb:69:
         12:26:aa:a3:ea:d9:73:b7:e4:35:d0:01:94:16:7a:72:71:77:
         23:40:7f:24:07:fa:98:13:15:ab:13:20:2c:e8:e0:a7:95:b8:
         f2:c4:40:18:7d:3a:ce:b0:92:34:9c:70:86:ba:59:34:f1:3d:
         fa:61:0a:d8:5a:97:91:c2:28:58:4f:19:a3:12:43:99:c1:23:
         05:56:ea:19:66:88:4c:02:8a:00:e6:bf:58:99:f4:38:81:f9:
         f3:6c:66:65:4e:ab:f9:12:65:c0:12:d5:a0:7b:7e:12:61:b9:
         4d:ca:e6:77
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUTWSLdv621nUSVJJM+qmD1bLtQ7UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWQxOTllMWRhYWRiY2Q1MDY0OTA5MWJmM2MxNTQwOTlh
MzI2MjMzODYyY2UyNWM2NzEwHhcNMjQxMDIzMTY0ODQ4WhcNMjUxMDIyMTY1MzQ4
WjAzMTEwLwYDVQQDEyg5RTgxREU3NzkwQjI2NjI3NDhEMjM0RTM3RTVBOTBDMTdE
MTU5Nzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YaMcL2GT5Sp
8vCZJh0wRHk7q70gHr0aVljUxfvWuVBFYNKYZ3Fekakz4pRzJbMUh8I7FqdkLIRE
kKnQJvBK1MDxrDr0KfcT1ytJioc2nEHts8GS/1dYzfuJ8PK47Dh3/DZgBjveUrkB
yeJHAbspST+O1kfvfA6i0E6G6XRZfaKHaldCZkIggf1npaHT0hP6ra4LRBMillzh
rHZ2PH3JdlUbUbwQf2x4rfot6tCc4N9nGkVOjuXzIGqCOZu+KpEHQazxdBYhFpKT
brZufyYk/YlDxT70zuTaKGKcqIR2o+8ns5sIXWtrUy5+FY7zLG3+ImCOtdU3PEoy
sBlqZrfmowIDAQABo4ICtzCCArMwHQYDVR0OBBYEFJ6B3neQsmYnSNI0435akMF9
FZeJMB8GA1UdIwQYMBaAFLMtAUZxoIrwpVsxPqslqC7dQCqYMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODJkNWU1MjEwMTg1MGI2NWIxMGIzNThiLzAv
QjMyRDAxNDY3MUEwOEFGMEE1NUIzMTNFQUIyNUE4MkVERDQwMkE5OC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzVjNmJhYmUwLWM5ODEtNGM1MS05NzFjLWI1NmJkMDcyMmViMS9lZDE5
OWUxZGFhZGJjZDUwNjQ5MDkxYmYzYzE1NDA5OWEzMjYyMzM4NjJjZTI1YzY3MS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgyZDVlNTIxMDE4NTBi
NjViMTBiMzU4Yi8wLzMyMzYzMDMyM2E2NjYxNjMzMjNhMzQzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzMTM0MzMzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6wgAEMA0GCSqGSIb3
DQEBCwUAA4IBAQAlCu0dhPPN8X0l5A0TrwzBdAd7OpuPTil9igsvo0FQai1ztyqj
Yunm8B/+KdEHuVXUCB0QGyV6ZZCN42tOHdrTMtwhtQH+Jpj4xHMkqK+Pm94AMYf9
djNJC+4lM5nnkLgPyQ8zmDyUiQ01y5pHhjfOPRCp9OG1JcJTgnqHDTfn6ZXfzZgP
JLXSpVZ55hkey2kSJqqj6tlzt+Q10AGUFnpycXcjQH8kB/qYExWrEyAs6OCnlbjy
xEAYfTrOsJI0nHCGulk08T36YQrYWpeRwihYTxmjEkOZwSMFVuoZZohMAooA5r9Y
mfQ4gfnzbGZlTqv5EmXAEtWge34SYblNyuZ3
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:27:33 2024 by rpki-client on console-fra.rpki-client.org