Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a32323a3a2f34382d3438203d3e20323135323737.roa
File:                     323630323a663937653a32323a3a2f34382d3438203d3e20323135323737.roa (raw, json)
Hash identifier:          5kDuoqB4nFLqbNTx5/CXah+hxT+ggj0kpn1R6g8oKYQ=
Subject key identifier:   A7:1C:0B:96:4F:22:DF:9C:03:35:4A:A5:17:3B:44:87:68:8D:34:6F
Certificate issuer:       /CN=ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a
Certificate serial:       28046ADEB3598E309A90747ACD747A6A2888C3A0
Authority key identifier: 47:9F:29:66:0F:9E:05:B3:E7:2E:0C:85:B1:58:C5:87:0A:E0:E9:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a32323a3a2f34382d3438203d3e20323135323737.roa
Signing time:             Tue 09 Jul 2024 04:10:12 +0000
ROA not before:           Tue 09 Jul 2024 04:05:12 +0000
ROA not after:            Tue 08 Jul 2025 04:10:12 +0000
asID:                     215277
IP address blocks:        2602:f97e:22::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/479F29660F9E05B3E72E0C85B158C5870AE0E95B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/479F29660F9E05B3E72E0C85B158C5870AE0E95B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Sep 2024 11:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:04:6a:de:b3:59:8e:30:9a:90:74:7a:cd:74:7a:6a:28:88:c3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a
        Validity
            Not Before: Jul  9 04:05:12 2024 GMT
            Not After : Jul  8 04:10:12 2025 GMT
        Subject: CN=A71C0B964F22DF9C03354AA5173B4487688D346F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a3:aa:23:ab:8d:73:fa:51:87:14:1c:4e:44:
                    a6:fa:6b:45:be:a8:8d:0c:82:3f:12:7c:0b:eb:99:
                    d8:95:68:ec:8a:c8:28:04:80:4a:03:bb:3d:29:6c:
                    ad:11:d1:22:4f:a9:3e:6c:ef:a5:c8:4f:02:8d:4d:
                    9f:ed:32:33:7d:73:62:6a:aa:d9:82:50:b2:2d:4c:
                    38:78:ed:9c:b1:a3:38:b6:30:ba:b9:f7:be:ed:92:
                    38:e8:b6:44:fd:98:45:1e:64:80:77:21:3d:52:4c:
                    5e:cf:a7:4a:d8:0a:c8:a3:dd:36:1d:a3:aa:01:05:
                    2d:d5:ff:17:ff:8b:12:ae:3f:fc:8d:8b:fb:88:cd:
                    a5:68:06:ee:e9:71:ec:13:57:01:1e:47:77:f1:f8:
                    6d:26:23:db:17:92:90:96:0d:5c:fb:f7:ca:8c:79:
                    f2:33:10:ad:e0:c5:37:e7:21:2c:21:7c:6d:b6:92:
                    5b:8e:6f:75:ab:d0:38:f8:e6:f3:e2:d3:13:13:ef:
                    50:8c:de:11:b0:53:0d:10:55:e2:aa:fd:51:4e:0a:
                    67:eb:a9:05:a3:ed:5d:cf:ad:a8:62:e0:4e:10:ab:
                    36:18:31:9d:46:06:9c:f9:28:4e:a4:ea:62:79:4c:
                    72:89:7e:88:1a:80:f3:9d:cc:e4:b9:bd:5d:36:14:
                    15:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1C:0B:96:4F:22:DF:9C:03:35:4A:A5:17:3B:44:87:68:8D:34:6F
            X509v3 Authority Key Identifier:
                keyid:47:9F:29:66:0F:9E:05:B3:E7:2E:0C:85:B1:58:C5:87:0A:E0:E9:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/479F29660F9E05B3E72E0C85B158C5870AE0E95B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac78a3704dabe69d74570cb11566afd1b7dbdd388a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a32323a3a2f34382d3438203d3e20323135323737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f97e:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:0c:b8:7e:d2:08:a5:52:c4:be:b9:fb:f1:58:a8:a1:87:64:
         6d:07:7a:57:5c:2c:30:ad:70:4f:f0:41:ef:da:73:ea:f8:bd:
         62:7f:2a:0d:1f:9e:c1:44:f8:5c:52:9c:4e:40:01:01:86:f6:
         dd:cb:92:0a:a0:79:5f:5d:f8:d9:29:3b:5c:94:6d:72:38:e6:
         17:53:df:67:dc:51:0c:ad:c5:38:4b:a8:85:29:e8:4c:ee:f4:
         ce:da:f0:53:9b:3c:c3:6a:58:f5:2a:91:89:a1:47:6b:a8:55:
         d3:56:d9:dd:c0:95:45:13:a6:24:f4:42:d8:69:01:ca:9d:f7:
         da:76:84:44:c9:2b:28:3d:86:99:5a:d7:bc:73:bc:dd:c7:d0:
         38:18:b7:70:bb:52:39:47:7a:90:93:a7:ff:e0:2a:46:d2:5c:
         9a:a8:f2:6d:9d:8d:e1:6a:8f:09:c1:50:32:e6:c1:46:16:a9:
         b9:c6:2c:40:0a:a7:22:3c:b4:cd:c7:b5:c9:4a:f5:29:26:5e:
         9d:be:09:9f:b5:af:4e:2a:23:dd:ae:51:52:43:94:83:b9:85:
         56:56:ea:c1:c2:29:8f:5d:79:76:f4:73:b3:66:ea:60:fa:8c:
         4d:58:5f:f0:3a:43:57:26:47:fd:99:11:a1:a7:73:4e:b1:b8:
         b7:63:91:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 10:54:06 2024 by rpki-client on console-fra.rpki-client.org