Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a3a2f33322d3438203d3e20323033383537.roa
File:                     323630363a623934303a3a2f33322d3438203d3e20323033383537.roa (raw, json)
Hash identifier:          JGYmlqA5dmqdYq+3RvifTnZaOPHC7TNCtoEPzMhATJo=
Subject key identifier:   F7:64:EE:22:92:D1:7F:EA:83:C2:51:B4:1C:BE:29:F2:88:CD:D4:73
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       05507B1BAB4F4CC46A0E30D4602B6779B5B54D26
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a3a2f33322d3438203d3e20323033383537.roa
Signing time:             Tue 09 Apr 2024 01:35:56 +0000
ROA not before:           Tue 09 Apr 2024 01:30:56 +0000
ROA not after:            Tue 08 Apr 2025 01:35:56 +0000
asID:                     203857
IP address blocks:        2606:b940::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:50:7b:1b:ab:4f:4c:c4:6a:0e:30:d4:60:2b:67:79:b5:b5:4d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Apr  9 01:30:56 2024 GMT
            Not After : Apr  8 01:35:56 2025 GMT
        Subject: CN=F764EE2292D17FEA83C251B41CBE29F288CDD473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:c6:b4:c7:52:2d:05:30:06:af:ab:f5:d5:
                    da:2d:eb:af:9f:15:00:9e:22:51:8b:ca:dd:ef:6b:
                    92:75:67:c0:e2:05:aa:19:ab:0b:08:a9:9f:8f:77:
                    3f:39:ae:11:ab:ea:41:5f:c8:c2:2e:e2:6f:7e:42:
                    cd:22:9d:d6:bf:0b:81:de:73:47:89:8b:c4:ac:ef:
                    38:72:c7:95:d0:2c:a5:e8:1d:05:ec:44:db:55:ce:
                    dc:2a:d5:89:31:e2:68:80:d0:53:70:01:98:2d:d9:
                    35:fb:6f:5a:5c:04:ff:89:57:83:87:fc:1c:4b:b9:
                    06:59:78:d5:1a:2f:cc:49:47:09:96:8b:2f:11:2d:
                    fc:f1:d8:cc:a7:34:4c:30:d2:b8:de:b6:c8:03:51:
                    f1:b0:62:86:b2:4c:b9:09:84:40:d5:94:ab:06:1c:
                    b3:13:36:32:05:86:a8:65:e4:76:c4:fa:17:17:0e:
                    fa:37:de:15:31:f2:23:e7:9f:69:26:de:85:ee:53:
                    dd:d1:46:91:10:07:c1:7c:59:02:bb:bf:6d:d9:b8:
                    2e:33:12:b2:08:b1:6e:d8:c9:d9:65:7c:62:ec:06:
                    94:81:a4:f7:8f:92:8d:d5:6f:62:61:6b:78:90:08:
                    b9:f9:ea:e6:fc:ad:ef:4c:2e:8b:6d:32:ba:51:c1:
                    84:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:64:EE:22:92:D1:7F:EA:83:C2:51:B4:1C:BE:29:F2:88:CD:D4:73
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a3a2f33322d3438203d3e20323033383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b940::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:f9:0d:98:ea:d4:5c:9a:e4:84:99:e7:9b:9c:9b:f7:e2:c4:
         e4:d3:b9:c1:b1:9f:33:23:9e:18:83:96:cd:06:b9:6c:9c:d7:
         c4:ec:0b:ff:4a:ed:4d:17:d2:1d:f1:22:ee:7d:57:70:71:f6:
         0d:e8:dd:fe:96:9d:e5:37:f6:67:87:7c:71:bf:6f:6e:12:88:
         15:96:39:9c:11:15:d1:eb:bc:b1:3d:99:88:e0:34:ee:01:f9:
         60:0c:59:39:bb:83:96:41:a5:40:52:00:03:79:b3:8c:33:29:
         4c:27:75:88:8b:30:6c:3d:9c:38:5b:89:03:49:db:83:af:d2:
         ba:85:21:bd:c1:37:52:37:43:95:b1:7a:b6:5d:c3:14:61:85:
         2e:cc:5d:ce:dd:d5:80:fc:46:86:d6:6e:ac:80:e3:6b:d3:22:
         8c:e4:1c:3d:1a:89:c8:95:a0:06:9a:11:78:a8:30:31:29:3d:
         1a:07:55:68:e9:55:a3:33:62:6f:b7:2e:1c:3b:27:7c:c9:1e:
         bc:9c:55:f0:26:df:54:cf:78:9d:ca:60:0e:a2:e2:ef:41:c3:
         d8:4c:43:0f:92:f3:fd:9a:3a:33:a0:64:18:e7:fb:88:22:d7:
         9c:92:66:41:3a:f8:cc:d9:d7:bc:24:e7:82:73:a7:3e:97:8d:
         78:43:e2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:52:27 2024 by rpki-client on console-fra.rpki-client.org