Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a373a3a2f34382d3438203d3e20323030373735.roa
File:                     323630323a666163323a373a3a2f34382d3438203d3e20323030373735.roa (raw, json)
Hash identifier:          GvqzBrWYbehwftLlGVBAAHwfS4YwqRbby/GrbkdyPKk=
Subject key identifier:   4F:61:AB:12:B5:56:07:F0:E6:F8:F4:08:D6:0A:05:05:6A:E7:8C:8E
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       694F824DD83AC90D9C488B77A7180C3775A3A25E
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a373a3a2f34382d3438203d3e20323030373735.roa
Signing time:             Fri 29 Dec 2023 03:47:57 +0000
ROA not before:           Fri 29 Dec 2023 03:42:57 +0000
ROA not after:            Fri 27 Dec 2024 03:47:57 +0000
asID:                     200775
IP address blocks:        2602:fac2:7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:4f:82:4d:d8:3a:c9:0d:9c:48:8b:77:a7:18:0c:37:75:a3:a2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Dec 29 03:42:57 2023 GMT
            Not After : Dec 27 03:47:57 2024 GMT
        Subject: CN=4F61AB12B55607F0E6F8F408D60A05056AE78C8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:d5:3c:f9:38:96:3d:61:8d:b2:d5:4f:29:
                    f7:51:a2:3f:28:5b:ae:20:81:54:7d:04:e2:3d:63:
                    f1:0d:d4:f3:77:e3:ea:63:bb:20:0b:cf:af:9f:be:
                    fa:7a:1a:dd:ae:57:9b:ba:c2:7f:f6:6a:ad:41:a6:
                    43:5f:75:79:08:16:30:d1:15:37:e1:b8:bb:47:ab:
                    bd:17:a7:18:a6:c6:23:d0:77:30:e7:7b:26:39:c4:
                    48:eb:b6:08:85:14:1e:f7:9b:ca:e7:d3:79:a6:bb:
                    7e:24:41:7f:98:ac:6f:04:d5:be:2b:7e:81:4c:1b:
                    51:a3:b7:62:04:da:ce:8b:2a:96:96:ff:a2:80:1e:
                    a5:7a:8c:a8:44:0b:7b:53:3d:82:b7:3c:39:86:ab:
                    cd:8a:38:96:32:02:f0:95:0c:ab:7e:de:d2:ab:f7:
                    9b:df:ed:26:1d:22:3b:1e:fc:79:29:0b:42:03:bf:
                    d9:0b:f8:8b:2a:76:a0:05:dc:78:57:d3:45:46:f7:
                    72:5e:b2:27:4e:ec:ec:50:81:bc:db:38:b8:31:11:
                    34:5e:b7:cc:33:7d:60:1b:aa:66:6a:45:4d:5d:1a:
                    8a:49:52:80:03:b8:6d:0f:6e:34:67:29:59:5c:58:
                    81:3f:ea:41:ce:e3:69:e1:2e:15:a3:37:54:8a:4f:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:61:AB:12:B5:56:07:F0:E6:F8:F4:08:D6:0A:05:05:6A:E7:8C:8E
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a373a3a2f34382d3438203d3e20323030373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:3c:cc:25:ff:61:a2:16:80:57:93:2f:6a:49:8a:f3:95:ac:
         3d:95:7d:e8:ba:6a:60:36:a9:bb:2d:e4:15:b5:c4:91:62:c6:
         04:0c:05:fe:f9:18:87:ae:2d:e1:98:4c:45:0d:30:4c:4b:ce:
         d8:01:b7:f8:2f:56:ac:4f:e3:b1:71:cf:c1:f2:95:1f:29:f8:
         39:9e:3f:ac:0a:0e:f0:4b:ca:9e:1e:b7:e9:88:be:5c:76:90:
         ea:34:ae:8b:8c:c8:94:e6:79:9e:b1:be:bc:7e:40:65:fb:24:
         e3:28:a1:8f:f2:0b:0f:3c:ce:52:4b:8a:fa:04:4e:32:65:1a:
         be:86:01:35:84:c6:93:13:a7:d3:85:86:b7:20:eb:8b:fa:ef:
         12:c4:7a:db:59:fc:59:bd:26:54:04:27:ef:45:d4:bd:66:a3:
         03:0e:10:a4:2c:c3:c7:57:dc:dd:7d:91:86:29:f5:d4:a5:fb:
         9d:a5:96:d3:55:7a:b9:89:17:b5:63:7e:08:f5:6c:8f:47:78:
         bb:4b:3e:02:66:95:1d:25:96:20:03:e9:77:38:22:f6:90:2c:
         6e:6e:5e:63:fa:74:93:6a:a9:58:42:4b:38:d2:ae:1d:db:34:
         8a:5d:3e:58:87:9b:e5:0a:44:51:47:ab:ae:8e:ad:63:15:b7:
         dc:b9:c7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:49:11 2024 by rpki-client on console-ams.rpki-client.org