Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a383a3a2f34382d3438203d3e20313532333638.roa
File:                     323630323a666163323a383a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          IHRgbh+b80nw5QLVJJ2/bOhKevgYf/5GnUkXpuEuvyI=
Subject key identifier:   A4:0C:30:BC:77:24:88:DD:B5:29:33:FC:D2:13:48:E8:53:A5:70:3D
Certificate issuer:       /CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
Certificate serial:       6B11C8F0C620528EB2B7C48DF0E2FD5F976805AD
Authority key identifier: B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a383a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Mon 05 Feb 2024 13:50:46 +0000
ROA not before:           Mon 05 Feb 2024 13:45:46 +0000
ROA not after:            Mon 03 Feb 2025 13:50:46 +0000
asID:                     152368
IP address blocks:        2602:fac2:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/5c6babe0-c981-4c51-971c-b56bd0722eb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:11:c8:f0:c6:20:52:8e:b2:b7:c4:8d:f0:e2:fd:5f:97:68:05:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daadbcd50649091bf3c154099a326233862ce25c671
        Validity
            Not Before: Feb  5 13:45:46 2024 GMT
            Not After : Feb  3 13:50:46 2025 GMT
        Subject: CN=A40C30BC772488DDB52933FCD21348E853A5703D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:e0:9f:aa:3a:84:5c:13:48:93:60:b1:60:
                    cf:ab:04:08:4d:75:d7:1c:59:31:3a:b8:1f:54:8a:
                    61:32:fd:55:e8:6d:5f:c7:f0:7a:79:05:da:08:c8:
                    00:e7:32:b6:e1:52:bf:92:a0:e4:1f:2d:7f:ba:dc:
                    db:07:3f:f6:3d:a5:62:1e:96:d0:24:f2:6a:9b:70:
                    93:b2:e3:79:d1:ce:05:d5:02:af:72:fb:2c:0a:90:
                    31:1f:68:ee:f6:93:23:f6:fa:f1:da:2d:b6:a5:ad:
                    ce:20:a4:02:d7:f5:33:30:ac:d4:e8:c9:85:e1:57:
                    29:6e:a9:6e:0b:48:9a:0e:cb:29:d0:7b:8e:e2:00:
                    da:df:a6:53:81:f6:4b:0d:26:bb:9b:db:cb:c6:9e:
                    c6:41:43:66:53:78:b9:7b:bf:4c:03:d9:1c:77:d9:
                    07:f9:ce:00:ba:bb:14:04:43:2a:13:60:c2:eb:69:
                    91:d3:54:38:16:14:09:ee:dc:a8:85:8e:eb:a7:cd:
                    01:5d:19:89:b7:f7:41:17:b0:b5:54:08:3b:45:a9:
                    da:12:9f:33:6f:dd:b4:14:78:9c:96:d4:d0:38:9d:
                    08:3d:2b:cf:2f:a9:a1:63:8b:e8:a9:aa:6f:81:08:
                    35:d7:44:ee:f0:28:11:3c:0f:89:db:99:b4:27:f4:
                    a0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0C:30:BC:77:24:88:DD:B5:29:33:FC:D2:13:48:E8:53:A5:70:3D
            X509v3 Authority Key Identifier:
                keyid:B3:2D:01:46:71:A0:8A:F0:A5:5B:31:3E:AB:25:A8:2E:DD:40:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/B32D014671A08AF0A55B313EAB25A82EDD402A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daadbcd50649091bf3c154099a326233862ce25c671.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a383a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:13:fa:64:94:d3:05:f6:9a:a4:94:5a:68:29:0d:21:2d:ef:
         52:fb:80:f3:da:e7:a6:a6:b8:4b:ee:c5:b5:36:79:fd:96:9c:
         ca:72:7a:31:d0:a7:f1:ff:6c:22:51:92:0a:ac:ec:3e:68:91:
         25:76:ff:b8:19:f7:d3:70:76:25:53:df:f6:d3:44:25:d0:6c:
         b5:0e:32:30:d6:99:e0:11:53:98:4e:bd:53:0e:36:5d:12:3e:
         b9:62:b0:49:03:05:02:e1:eb:36:84:dc:da:8d:35:8f:71:d8:
         1b:75:b1:2b:7a:d2:43:2e:4e:d2:bb:51:ef:85:cb:0c:98:ed:
         74:7c:ae:11:11:46:1d:d4:a7:43:6d:12:59:56:ac:96:d1:04:
         ee:33:e7:95:eb:8b:08:be:b1:12:09:27:6b:18:e5:a2:b0:c2:
         04:ee:3f:e2:7c:bf:b9:24:c9:81:f6:df:5b:99:c7:39:ea:6d:
         19:73:83:77:42:fa:af:c7:cd:23:e0:bc:8c:5a:97:2a:35:3c:
         90:6a:e7:0a:74:c4:fc:df:a4:50:a9:10:3a:da:44:bd:d2:e8:
         56:ea:60:d7:02:d8:03:e6:06:92:3e:27:43:7b:af:3d:15:14:
         19:0a:d7:02:83:9f:27:e6:12:da:c1:41:98:e1:70:fc:2d:da:
         e8:f7:8b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:49:11 2024 by rpki-client on console-ams.rpki-client.org