Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa
File:                     323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          nfj7D8UwDpVmLKbONmrdUfwNiQoOCq3w2WL0Ip9H54o=
Subject key identifier:   1B:AE:27:82:81:09:F1:4C:4B:3B:40:53:6E:DB:54:79:1E:AC:35:C3
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       734B6C81E0CFA4FA1A0F5DD8C26680DC9981A62C
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa
Signing time:             Tue 26 Dec 2023 09:15:04 +0000
ROA not before:           Tue 26 Dec 2023 09:10:04 +0000
ROA not after:            Tue 24 Dec 2024 09:15:04 +0000
asID:                     50224
IP address blocks:        2602:fac2:6::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4b:6c:81:e0:cf:a4:fa:1a:0f:5d:d8:c2:66:80:dc:99:81:a6:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Dec 26 09:10:04 2023 GMT
            Not After : Dec 24 09:15:04 2024 GMT
        Subject: CN=1BAE27828109F14C4B3B40536EDB54791EAC35C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ea:06:e8:6f:19:83:33:97:34:38:87:a0:f5:
                    ce:3a:19:ae:5a:30:81:75:83:e7:c6:20:e1:13:b2:
                    9f:1e:57:ed:61:53:a5:c9:79:08:bd:22:1b:83:c7:
                    fa:6f:7c:16:5f:5b:c5:56:55:3d:7e:04:fb:9c:f1:
                    59:48:57:9a:63:70:67:c5:20:ba:ae:bd:38:00:48:
                    e5:28:f4:e2:22:d1:1e:a7:b4:bc:91:23:d1:ed:b9:
                    ba:f4:99:dd:dd:4b:dd:d1:e1:e3:85:75:11:bd:91:
                    0f:0a:57:63:a3:74:4f:9f:54:cf:a7:03:59:6c:d4:
                    60:5f:20:a6:fb:14:16:ed:9c:ea:b4:7b:54:5c:8d:
                    24:64:8e:52:eb:b1:c9:08:9b:7a:a4:91:0e:67:2c:
                    f2:6f:bc:c9:9b:e7:ae:f4:2b:8e:10:ac:ec:08:52:
                    1d:06:9f:f0:aa:e2:46:77:ff:7d:87:26:83:d6:be:
                    b0:4f:06:5e:a2:e0:84:05:7b:35:a0:2a:61:a1:f5:
                    f8:ef:6d:5e:26:04:7c:5d:6e:71:df:d0:e9:0f:db:
                    83:08:ac:f3:80:e9:96:8d:cf:e5:fd:bb:71:f0:64:
                    e9:a0:44:7f:19:e0:25:7a:74:80:15:0c:64:72:7d:
                    b6:fd:08:97:ca:a2:e9:74:14:eb:dd:1a:46:2f:30:
                    10:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AE:27:82:81:09:F1:4C:4B:3B:40:53:6E:DB:54:79:1E:AC:35:C3
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a363a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:c1:07:5b:7a:98:f9:eb:55:8f:be:dc:f6:65:c4:f5:2d:ee:
         cd:91:b3:5e:1f:64:7b:a8:9b:5b:b0:69:e0:c2:f7:c2:b3:dd:
         a7:30:5b:8b:b5:be:7e:05:17:9c:9b:61:f6:95:e5:70:f5:25:
         34:b4:1e:11:ce:05:28:7a:0a:fd:5e:4d:e9:93:80:a9:f2:b4:
         e8:f1:6b:21:0a:9f:3c:83:40:51:fd:ce:14:9b:e4:aa:8f:ea:
         5d:f4:96:bc:0c:90:e6:5a:ae:eb:85:e2:9b:53:20:23:e1:da:
         d6:2b:e6:fa:0b:a6:81:16:29:77:d0:d4:c6:a7:a7:af:a6:0b:
         a5:0e:74:24:e1:ba:db:05:03:f9:dd:04:fc:08:e0:df:fe:b6:
         26:04:a4:6d:c0:e9:de:ed:fb:16:cc:e2:c8:25:2f:4a:ac:80:
         1f:cb:1c:26:9b:be:5d:da:b5:04:ab:25:cf:11:85:a5:86:92:
         bb:9d:67:65:ba:3c:e2:7c:b5:4b:93:fe:f7:d2:dc:cb:50:27:
         1e:bf:13:76:33:02:79:a9:c4:a9:77:22:0c:b3:2f:3d:a1:92:
         1b:80:15:5a:6d:1a:24:76:16:d1:70:62:8f:df:8d:71:65:04:
         9b:36:01:6b:1b:7f:a1:29:05:dd:9c:07:22:b9:54:81:f9:c4:
         76:51:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:44 2024 by rpki-client on console-fra.rpki-client.org