Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3130303a3a2f34382d3438203d3e203131333538.roa
File:                     323630323a663937653a3130303a3a2f34382d3438203d3e203131333538.roa (raw, json)
Hash identifier:          Rmn3XiMTG1SlInIYOJfLud7HtY7/kCI9S5+/u4Ly06M=
Subject key identifier:   9D:CB:12:18:8C:7E:D3:30:A3:81:E7:24:F4:45:B1:10:7D:F6:00:52
Certificate issuer:       /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial:       075056E9033EFA4B2EF86C73899175E4BB44F612
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3130303a3a2f34382d3438203d3e203131333538.roa
Signing time:             Sun 17 Nov 2024 00:58:54 +0000
ROA not before:           Sun 17 Nov 2024 00:53:54 +0000
ROA not after:            Sun 16 Nov 2025 00:58:54 +0000
asID:                     11358
IP address blocks:        2602:f97e:100::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:17:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:50:56:e9:03:3e:fa:4b:2e:f8:6c:73:89:91:75:e4:bb:44:f6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
        Validity
            Not Before: Nov 17 00:53:54 2024 GMT
            Not After : Nov 16 00:58:54 2025 GMT
        Subject: CN=9DCB12188C7ED330A381E724F445B1107DF60052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:3c:e6:f5:ec:95:71:71:2d:9c:28:9c:69:
                    e9:de:04:e6:a7:d0:02:e9:1f:6a:82:c6:6f:50:f8:
                    24:19:ad:f0:7f:59:df:92:ef:17:d9:e6:9b:86:16:
                    66:ea:34:d4:44:8b:7c:4b:58:34:18:34:89:9f:e9:
                    22:75:06:79:16:79:21:ac:b6:9c:91:15:eb:3e:70:
                    df:af:f5:5f:54:ae:85:ea:24:51:f8:99:d8:a0:03:
                    fd:ed:4f:06:5a:2c:9e:67:11:19:30:a0:cd:9b:22:
                    17:00:d9:d8:8d:22:34:be:fd:2b:14:c9:ba:ff:64:
                    21:4d:a8:a4:2f:56:5c:04:8f:08:ff:00:18:d9:72:
                    b4:bc:22:96:05:47:54:6b:c8:77:4c:31:20:c0:1a:
                    6a:38:99:92:19:a7:71:34:10:2b:8c:2e:be:99:78:
                    63:dd:62:3b:5f:71:87:91:3c:e4:a9:35:7b:c3:bb:
                    83:25:ba:20:d2:e8:8a:32:89:c9:18:de:d2:6c:bf:
                    58:6c:87:24:2a:31:c6:14:e5:c6:9b:ec:2a:8a:20:
                    96:9f:2d:0c:1a:d7:81:72:85:44:44:3c:d2:a5:08:
                    28:6a:68:99:7c:f1:aa:63:46:e5:d9:fc:b0:93:9f:
                    d6:2d:73:42:97:65:50:63:5c:d0:b1:eb:54:3a:1e:
                    d3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CB:12:18:8C:7E:D3:30:A3:81:E7:24:F4:45:B1:10:7D:F6:00:52
            X509v3 Authority Key Identifier:
                keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3130303a3a2f34382d3438203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f97e:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:77:70:c6:82:92:7c:5e:e2:84:a0:4d:c1:8d:14:4a:6a:1d:
         b3:df:89:79:2a:40:09:e6:76:00:1d:46:2a:40:86:13:f6:79:
         0b:63:3b:48:31:c8:3b:8c:ab:be:2f:e4:18:0f:f8:96:5e:54:
         8e:91:d2:51:fc:5a:0c:cd:40:28:3c:12:71:c6:33:5d:3d:db:
         46:b3:a9:51:79:4c:38:84:91:d7:44:13:72:78:59:d9:9b:a6:
         2f:f3:03:fb:0c:a5:6c:4c:4a:2a:bb:55:cc:be:3c:b4:0a:e5:
         c4:1d:d7:5c:55:4d:df:ad:8b:d4:95:64:df:0f:21:97:9f:15:
         90:a7:b9:11:c6:50:9e:be:ed:32:ea:79:36:49:42:99:ce:a4:
         a6:1f:f4:6f:9e:30:f2:26:78:a9:41:7e:0c:84:19:38:09:d6:
         90:4e:4a:c0:6d:88:66:ac:97:c5:d3:2e:86:92:a3:4e:e1:cd:
         7d:2f:70:27:d8:54:37:5f:ce:34:0f:48:9c:48:3b:37:55:b1:
         40:25:22:72:ae:ec:54:3a:52:41:01:dc:86:78:6e:d6:5e:00:
         d4:84:b6:db:a4:bd:df:8a:ca:78:3f:6b:bc:eb:49:d4:22:fe:
         ca:4e:ec:96:95:5c:f6:b2:e0:40:51:c2:66:f0:a3:1d:e7:29:
         8e:a2:57:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:55:08 2024 by rpki-client on console-ams.rpki-client.org