Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a623030623a3a2f34382d3438203d3e20323132313439.roa
File:                     323630363a623934303a623030623a3a2f34382d3438203d3e20323132313439.roa (raw, json)
Hash identifier:          Yjvqdw9P7EPKfbEGKFaXSPqA3vAcrUdFeBP2Rr3mUq4=
Subject key identifier:   89:64:52:04:B8:4E:64:EA:26:5F:F9:2E:EC:AF:52:91:25:57:7E:C8
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       56A9239CC9AAD7D994B1F117A834B09C286F40FC
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a623030623a3a2f34382d3438203d3e20323132313439.roa
Signing time:             Mon 11 Dec 2023 05:44:21 +0000
ROA not before:           Mon 11 Dec 2023 05:39:21 +0000
ROA not after:            Mon 09 Dec 2024 05:44:21 +0000
asID:                     212149
IP address blocks:        2606:b940:b00b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Apr 2024 01:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a9:23:9c:c9:aa:d7:d9:94:b1:f1:17:a8:34:b0:9c:28:6f:40:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Dec 11 05:39:21 2023 GMT
            Not After : Dec  9 05:44:21 2024 GMT
        Subject: CN=89645204B84E64EA265FF92EECAF529125577EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:da:44:5a:40:fa:fd:20:bb:a8:68:1f:0e:41:
                    5f:34:63:3f:8b:82:ca:bd:7c:db:f3:87:eb:f2:ae:
                    a2:f8:71:38:3f:5a:4a:7b:13:f0:45:2c:7a:24:44:
                    97:a4:7a:2a:b2:bb:af:30:49:cc:49:1a:c4:fc:9a:
                    d8:3d:f6:84:ec:5b:c4:cf:ad:fe:56:56:7f:f3:cd:
                    4b:05:09:e1:b2:90:c5:31:4d:40:bc:b6:7e:38:17:
                    da:b9:e2:47:94:ea:34:12:2a:01:5e:7c:e5:52:2c:
                    85:15:16:30:5a:96:89:88:cb:81:5e:a3:b2:af:f3:
                    65:f9:e6:ad:d6:1d:2b:33:a2:cf:ed:71:c8:ad:d0:
                    1f:68:d6:24:72:9c:6d:25:72:8a:aa:25:4c:4b:6b:
                    9b:84:81:a2:dc:b4:6f:93:90:68:28:26:37:c1:59:
                    bb:8e:08:bb:f9:df:08:29:11:28:1a:af:a8:09:16:
                    ae:a5:58:d4:4d:8a:9e:a7:6f:a4:a2:dc:8f:49:d5:
                    c4:66:2a:d3:e0:08:cf:06:96:86:cc:9e:7a:ca:56:
                    bf:c8:bd:7c:ad:81:91:d3:c7:63:fa:d9:41:e1:2c:
                    d7:cf:b1:05:76:0d:f8:de:01:d3:fd:f5:50:a7:fd:
                    2a:c9:a6:5c:1c:6e:0c:f7:2a:44:2b:d0:cb:bf:c3:
                    6c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:64:52:04:B8:4E:64:EA:26:5F:F9:2E:EC:AF:52:91:25:57:7E:C8
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/323630363a623934303a623030623a3a2f34382d3438203d3e20323132313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:b940:b00b::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:ab:52:11:1e:1a:3e:f9:e8:98:7e:98:2f:61:f9:1f:12:0f:
         a7:19:3a:84:ca:00:19:61:c3:5a:44:64:de:93:ca:13:39:b1:
         00:bc:ef:76:91:b9:f7:6d:4c:37:a0:c2:03:c4:7d:72:bd:5e:
         ed:9f:d8:e6:4e:02:c4:a8:e3:e5:9e:1d:b2:0f:92:8f:bf:19:
         f5:d8:cd:43:30:17:fb:1e:01:63:16:59:1b:ae:17:87:29:ea:
         1a:d3:ab:f1:82:45:82:80:65:fd:28:e6:c9:a8:a5:36:96:bc:
         ab:c2:17:b0:83:7f:54:d3:83:88:96:16:9b:2c:b5:cc:fb:1a:
         37:08:8b:bc:8b:83:bd:0b:3f:1f:17:d1:4f:05:47:35:8b:ea:
         12:bf:3a:d8:34:3c:0f:6b:eb:9e:1a:98:a1:ce:9c:23:4d:28:
         92:60:e1:3d:3c:15:27:26:16:dc:b1:05:e5:4f:a8:9d:d9:b4:
         8d:09:82:3b:30:08:8d:07:ba:79:54:10:b1:e2:b1:49:b7:b8:
         4f:bb:d8:42:f7:a1:54:7f:58:0e:1a:bf:b4:aa:89:51:b9:4b:
         0e:02:05:51:17:4e:6c:d3:ae:cb:e5:1c:59:e6:d2:fa:fd:38:
         45:cb:10:e7:fd:7a:f6:7b:45:82:bd:8f:29:b4:ed:66:44:f5:
         82:8a:d0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:28:31 2024 by rpki-client on console-fra.rpki-client.org