Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a353a3a2f34382d3438203d3e20323030373735.roa
File:                     323630323a666163323a353a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          64glSrxhrtEHF6YXQEtm7q0MpJGK1JkQdMIWhicbonU=
Subject key identifier:   3D:5C:13:07:7A:F3:15:E9:42:E6:9D:D5:61:5E:9E:7B:4F:13:79:6D
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       0E790D03ABE2CDDC9CE08693A653A91B98291625
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a353a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Mon 04 Nov 2024 14:00:10 +0000
ROA not before:           Mon 04 Nov 2024 13:55:10 +0000
ROA not after:            Mon 03 Nov 2025 14:00:10 +0000
asID:                     200775
IP address blocks:        2602:fac2:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:79:0d:03:ab:e2:cd:dc:9c:e0:86:93:a6:53:a9:1b:98:29:16:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Nov  4 13:55:10 2024 GMT
            Not After : Nov  3 14:00:10 2025 GMT
        Subject: CN=3D5C13077AF315E942E69DD5615E9E7B4F13796D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7e:9d:7b:fc:0a:47:f7:3d:6a:5b:cd:02:08:
                    95:7f:fd:14:aa:25:56:18:c8:d6:04:2e:15:6f:87:
                    91:d3:ef:46:3e:c3:36:de:69:eb:d0:e6:54:88:3f:
                    a0:16:80:cc:60:f9:52:03:56:62:34:8c:d3:31:9e:
                    5c:ae:18:0f:a0:bd:5d:12:82:a9:46:91:55:d2:f4:
                    b3:7e:32:30:c0:6e:54:78:ff:0d:e7:f5:4a:74:18:
                    17:06:be:d1:dd:a9:77:85:b6:cf:1e:ed:75:47:d8:
                    8f:18:1b:c3:8a:1d:37:6c:65:b7:93:83:57:2e:84:
                    91:09:73:f0:b6:53:3f:cd:f2:04:6d:ea:07:09:db:
                    57:c4:19:88:08:08:6b:a1:ee:ee:ad:7e:74:b4:0b:
                    60:8e:bd:79:79:a3:ce:a5:5d:59:55:ad:4b:54:cb:
                    46:5e:27:26:c1:1b:be:72:cb:1e:d6:ec:ed:46:3a:
                    ec:81:50:83:e9:ee:37:45:ce:1f:92:98:70:f5:3d:
                    71:99:c6:3c:bb:fe:df:14:e7:87:00:b1:ff:76:69:
                    9c:43:4f:e9:3c:79:ef:9f:44:f7:26:85:26:2d:b4:
                    3b:8e:ac:0a:28:fe:04:9e:61:99:73:e3:60:05:39:
                    81:0f:0d:6a:7c:e1:13:e6:3f:70:ed:4a:84:80:c4:
                    b0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5C:13:07:7A:F3:15:E9:42:E6:9D:D5:61:5E:9E:7B:4F:13:79:6D
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a353a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:6a:b0:fe:3c:e5:33:f9:4c:0b:73:30:2d:b5:8b:44:a5:a0:
         16:42:40:d8:78:c4:57:07:0b:a4:bf:69:34:df:f9:08:b0:c5:
         e3:91:2f:73:23:ac:9a:32:b7:fd:9a:93:9b:29:57:23:06:ab:
         da:a4:bc:27:24:50:7b:34:91:8e:c2:77:ae:55:6c:05:04:72:
         df:41:fc:44:bc:62:bf:1e:a2:89:ac:3b:70:79:97:c3:23:4c:
         bd:53:01:60:3f:6c:4c:a2:04:8d:16:9a:74:33:91:2d:c2:89:
         80:b5:a7:c1:4d:39:aa:d5:be:c3:02:bc:10:34:e5:cd:18:23:
         7e:f4:00:fd:a2:50:7e:41:3d:95:30:b1:c4:62:94:d9:69:37:
         fa:92:5c:cc:0c:31:7c:30:41:d2:ad:bf:ec:5f:2a:2d:16:3a:
         16:60:d4:c7:0c:00:65:11:d7:d5:16:be:c7:bb:1c:c1:9a:f4:
         4c:f4:7f:29:6e:28:21:71:89:f6:f2:98:da:da:f6:6b:0f:23:
         26:6d:9c:66:24:36:1f:16:0c:0d:7e:66:4e:c1:31:a0:77:f8:
         dc:d3:cf:76:88:72:85:a9:00:ae:74:9a:c5:fc:5f:ae:fa:67:
         3b:dc:c2:b0:57:6b:ad:46:17:bd:a4:68:88:02:6b:af:41:ee:
         7c:6b:89:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:49:11 2024 by rpki-client on console-ams.rpki-client.org