Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/323630343a3763303a3a2f33362d3438203d3e20333935383431.roa
File:                     323630343a3763303a3a2f33362d3438203d3e20333935383431.roa (raw, json)
Hash identifier:          M43YKnFE0diiEYpedn17cSSGO/890rycH/4owY4kmCQ=
Subject key identifier:   92:82:44:07:E9:CD:AD:ED:E6:2C:78:B0:DD:C2:18:EC:98:7B:B9:F8
Certificate issuer:       /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial:       2F3E6D029D39495B308D069BF0D31F66D09CF23A
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/323630343a3763303a3a2f33362d3438203d3e20333935383431.roa
Signing time:             Tue 31 Dec 2024 20:28:23 +0000
ROA not before:           Tue 31 Dec 2024 20:23:23 +0000
ROA not after:            Tue 30 Dec 2025 20:28:23 +0000
asID:                     395841
IP address blocks:        2604:7c0::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3e:6d:02:9d:39:49:5b:30:8d:06:9b:f0:d3:1f:66:d0:9c:f2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Validity
            Not Before: Dec 31 20:23:23 2024 GMT
            Not After : Dec 30 20:28:23 2025 GMT
        Subject: CN=92824407E9CDADEDE62C78B0DDC218EC987BB9F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:3a:ae:28:b0:55:99:b8:67:6f:01:7b:b8:
                    20:cf:92:21:35:80:6a:4a:09:8a:7f:6d:a6:a2:04:
                    1f:46:b9:7e:ab:18:b5:83:39:9b:8c:4c:23:b4:bd:
                    4f:25:5b:82:01:38:11:4e:6f:85:90:99:0f:2e:12:
                    59:ff:c8:77:89:cb:ea:d9:21:e0:81:de:21:32:5e:
                    18:15:a1:73:eb:0d:07:b1:2d:75:8a:3e:11:e7:0a:
                    fc:00:da:82:59:06:6e:b2:f1:d2:e7:1e:98:75:85:
                    9a:11:4f:8d:57:e5:6b:62:48:d2:ba:11:cf:aa:e4:
                    17:01:f2:66:97:0c:20:cd:03:f5:ff:a0:4e:cb:fa:
                    ab:d3:f2:b3:cc:44:40:95:4f:9a:a9:a5:a4:8f:50:
                    20:f5:6e:ef:58:96:bb:63:6e:5c:19:e5:a0:06:fc:
                    05:51:bd:94:28:e1:6a:9f:f1:16:f3:30:ae:fa:72:
                    6d:57:75:d6:9f:a3:67:f5:52:66:e9:b0:03:07:ee:
                    63:64:1e:55:61:bf:bd:36:97:b1:9e:8e:42:13:bb:
                    57:22:40:db:14:7b:40:ab:6f:0c:1b:bd:9c:6e:32:
                    49:52:7d:6a:a5:26:57:47:13:e8:20:07:b8:60:86:
                    d2:b8:91:e8:1f:0c:13:7c:12:77:46:68:14:4f:ae:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:82:44:07:E9:CD:AD:ED:E6:2C:78:B0:DD:C2:18:EC:98:7B:B9:F8
            X509v3 Authority Key Identifier:
                keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/323630343a3763303a3a2f33362d3438203d3e20333935383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7c0::/36

    Signature Algorithm: sha256WithRSAEncryption
         03:83:6b:b5:4f:8a:0a:35:ef:35:52:67:38:32:10:ad:e2:0f:
         df:17:52:4a:06:1b:02:8e:f9:e4:15:35:86:44:1c:25:b1:dd:
         2e:e7:17:d2:ac:c0:13:ee:bc:ad:10:07:f8:de:a7:ab:dc:e6:
         98:e8:3e:33:0c:19:a2:20:af:9b:e3:f0:4a:9d:35:66:bd:af:
         0c:82:c0:90:fb:91:17:fd:99:c0:e8:0d:2a:58:20:ba:b3:9f:
         bd:5a:78:88:60:6a:2b:b9:4f:c9:aa:d8:68:26:6d:32:c2:f6:
         0b:43:f5:6a:46:3b:32:73:71:ed:31:02:ae:65:b5:15:d4:e9:
         34:db:56:7b:7b:df:f7:a5:99:3b:b9:29:cd:97:ea:a2:5a:a9:
         54:b1:a3:3d:98:f4:9d:d8:84:fe:9f:82:4c:da:e8:16:b6:ed:
         87:fb:ff:bf:6d:85:ff:a3:52:58:ef:3b:98:95:c7:dc:7a:07:
         29:db:3f:f0:94:45:ff:d7:c9:f4:f9:78:fa:55:d3:f1:60:8f:
         7d:67:ac:f7:9d:ef:30:f0:6a:97:a4:a6:c5:65:99:ac:bd:85:
         2c:03:f5:c5:46:54:04:f5:dc:4c:8e:be:d8:b0:8d:52:14:9a:
         36:33:c1:47:f8:7e:58:68:c8:f6:e4:92:a0:64:2c:e8:07:41:
         75:17:ba:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:17:41 2025 by rpki-client