Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a623030623a3a2f34382d3438203d3e20323132313439.roa
File:                     323630363a623934303a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier:          jCA4uMwbU/mcQCEFZI9p7QZeY+4o2QwPAMrWq/vTnIk=
Subject key identifier:   71:E4:F3:3D:AF:80:5C:29:F1:43:EE:CC:25:7C:3C:5D:42:EF:10:ED
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       700309427ECAC1F02549AEB777FD261859B449E3
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time:             Mon 11 Nov 2024 06:40:12 +0000
ROA not before:           Mon 11 Nov 2024 06:35:12 +0000
ROA not after:            Mon 10 Nov 2025 06:40:12 +0000
asID:                     212149
IP address blocks:        2606:b940:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:03:09:42:7e:ca:c1:f0:25:49:ae:b7:77:fd:26:18:59:b4:49:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Nov 11 06:35:12 2024 GMT
            Not After : Nov 10 06:40:12 2025 GMT
        Subject: CN=71E4F33DAF805C29F143EECC257C3C5D42EF10ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:40:5f:d2:b6:03:7c:c0:9e:15:be:9f:eb:28:
                    7c:ac:fb:7b:9e:3f:44:0d:01:dc:88:1d:09:92:54:
                    81:e0:41:0e:29:fb:b9:05:d1:98:e8:b3:c0:06:4d:
                    fd:4f:3f:92:e7:4d:8a:40:35:d5:a8:e8:07:33:c6:
                    4c:ec:17:f4:ec:21:39:00:b8:9e:37:ce:49:b1:34:
                    b5:46:a2:92:92:d6:6c:52:45:64:58:35:30:60:3b:
                    a0:39:e4:3c:6e:a3:41:57:bc:76:fd:01:2d:5c:bb:
                    6e:08:5c:34:dc:cd:99:94:b5:23:1d:d2:08:da:08:
                    ff:68:44:c4:ab:e1:0e:2d:cd:ea:3b:26:89:48:54:
                    fc:69:25:29:9f:f2:aa:5d:c4:64:3a:4b:c5:9a:e6:
                    41:48:41:5c:e0:57:56:cd:0f:e1:34:e7:ef:24:d2:
                    ce:3a:af:90:f8:6f:84:7f:41:86:15:b4:63:01:fa:
                    41:d7:b8:a3:7f:da:f6:9b:5a:c0:0c:bd:41:b3:20:
                    97:00:86:dc:f2:e5:79:72:c9:eb:9b:7f:e8:16:35:
                    b0:1f:bf:da:32:27:09:c3:26:9e:63:de:6f:86:f3:
                    c4:00:70:bb:a5:23:de:aa:a4:46:d4:cf:32:f6:af:
                    20:90:21:26:54:d4:6a:cb:d3:a6:08:ca:67:4f:ab:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E4:F3:3D:AF:80:5C:29:F1:43:EE:CC:25:7C:3C:5D:42:EF:10:ED
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a623030623a3a2f34382d3438203d3e20323132313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b940:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:1b:7b:ce:62:75:2a:a5:b5:a9:11:21:bd:e7:89:33:50:f9:
         01:e7:f5:96:f5:17:ba:11:76:8d:a6:50:25:f9:9e:ba:75:14:
         b1:c2:5e:2e:82:62:69:96:d6:36:eb:2f:f9:07:c2:d8:2c:b7:
         99:d8:9b:9b:79:3b:25:fd:59:c1:fe:fa:77:ea:35:cf:d7:3e:
         60:d3:b9:44:ca:67:d5:76:56:d3:f8:e5:44:9c:da:b9:f4:1a:
         b8:24:1e:6a:d0:53:eb:c9:fd:97:4d:8d:29:06:eb:6a:3a:4b:
         9e:68:4f:10:e3:44:19:13:1a:c9:0f:78:f5:7c:8a:cc:0b:20:
         b3:16:ba:3e:25:9e:50:09:0f:a9:b0:b1:11:0b:7f:13:e2:d3:
         9d:ad:37:59:4a:a7:0c:52:bf:06:30:42:fc:ec:a9:08:39:48:
         90:74:b4:2b:0a:33:d4:f8:78:1e:18:12:8d:7a:81:27:6b:c6:
         78:62:73:de:be:c7:7d:19:58:c7:0d:22:75:4d:4d:9d:65:12:
         bf:c5:c6:0d:79:ec:28:2f:a3:53:b4:c3:6f:cc:6f:ae:bd:6c:
         2a:ea:6c:b8:e8:ad:0b:cd:bf:c8:b6:3d:cf:11:09:5c:32:dd:
         91:89:92:95:55:40:01:4f:e1:fd:b9:28:76:ae:bc:ce:99:a6:
         b7:f3:1d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:40:16 2024 by rpki-client on console-ams.rpki-client.org