Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f33362d3336203d3e203131333538.roa
File:                     323630323a663937653a3a2f33362d3336203d3e203131333538.roa (raw, json)
Hash identifier:          89U5Lu5iuRwucNqGvtg79fohr1kgjn5vFqjOiuRkROc=
Subject key identifier:   58:5B:33:B7:ED:04:22:DB:41:C3:1D:5A:41:A8:BE:48:FE:FB:2B:53
Certificate issuer:       /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial:       46CC37CF29FD3DC2D2134C92AAD5DB8B5D9728A6
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f33362d3336203d3e203131333538.roa
Signing time:             Sun 17 Nov 2024 00:58:25 +0000
ROA not before:           Sun 17 Nov 2024 00:53:25 +0000
ROA not after:            Sun 16 Nov 2025 00:58:25 +0000
asID:                     11358
IP address blocks:        2602:f97e::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Nov 2024 20:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:cc:37:cf:29:fd:3d:c2:d2:13:4c:92:aa:d5:db:8b:5d:97:28:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
        Validity
            Not Before: Nov 17 00:53:25 2024 GMT
            Not After : Nov 16 00:58:25 2025 GMT
        Subject: CN=585B33B7ED0422DB41C31D5A41A8BE48FEFB2B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:74:d6:11:6f:8c:0c:64:eb:72:a3:b2:63:6a:
                    d8:57:65:9b:ca:ca:f6:10:67:d0:75:68:a2:a3:ed:
                    41:c0:8b:0f:42:54:e7:bb:a1:a5:a6:16:0d:e3:63:
                    0a:aa:2c:ec:a8:b2:01:14:88:ac:51:9c:28:05:db:
                    bb:6a:62:ac:9c:1f:e3:a5:2c:b8:df:65:9b:30:45:
                    a8:ae:29:d0:34:3c:ab:a5:8c:2a:5b:87:fa:11:8a:
                    d4:2f:9b:22:6c:7a:ae:e3:56:74:3c:f6:44:6d:01:
                    ef:fc:ed:9a:89:22:f6:db:fa:f5:ea:e4:ab:06:26:
                    eb:97:86:22:7d:59:c8:eb:00:bc:61:f3:4f:02:10:
                    f9:b6:ba:88:2b:bf:46:57:56:a3:2b:0a:12:70:e8:
                    c8:3d:e1:1d:ee:a4:f6:26:a2:8c:fc:78:f8:d1:0d:
                    c2:81:fe:02:d4:65:85:85:09:18:ef:43:d8:58:d5:
                    ef:ba:54:4a:13:46:f9:c4:30:76:8c:b3:67:51:33:
                    e9:c3:10:e5:4e:c4:8f:f8:44:3c:d4:49:84:58:28:
                    d0:a0:e2:bc:f8:01:3e:62:fc:7c:c4:c2:7e:79:48:
                    0b:ac:ab:0f:f2:79:f7:64:fb:fc:43:84:be:99:0c:
                    fe:7b:44:52:6f:72:fd:4f:e9:f2:85:13:f7:38:5f:
                    5b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5B:33:B7:ED:04:22:DB:41:C3:1D:5A:41:A8:BE:48:FE:FB:2B:53
            X509v3 Authority Key Identifier:
                keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/323630323a663937653a3a2f33362d3336203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f97e::/36

    Signature Algorithm: sha256WithRSAEncryption
         57:5d:58:20:7b:78:cd:be:6a:15:43:ba:54:20:57:57:4a:7f:
         15:61:a3:f1:48:c1:82:80:56:84:c4:58:fb:1d:3a:79:24:6e:
         40:89:17:b3:44:4f:a1:4c:cc:65:49:81:e9:2f:85:ca:ef:cc:
         95:58:22:cc:6f:23:b5:84:4e:96:3d:7f:5f:33:12:5d:2a:08:
         ca:91:86:0d:af:b3:f3:05:03:cb:f1:42:1d:33:6b:18:43:52:
         26:4f:91:60:2d:d7:2a:e7:9a:82:45:de:d4:1b:09:89:21:df:
         a8:b8:77:1a:3c:dc:f6:fe:f8:65:c7:d0:7f:53:af:2d:f1:32:
         80:27:01:95:5f:bf:9d:17:2b:d7:73:e4:d3:da:79:67:78:1f:
         4d:92:f4:a0:be:8f:c4:99:3c:59:5d:fb:23:5d:6e:70:c8:c0:
         27:a4:ce:81:0f:aa:d6:38:fa:4b:55:86:7f:44:33:33:07:57:
         e4:be:90:58:8c:68:00:30:c7:c7:58:59:1b:f1:e7:15:6c:fd:
         8b:1d:12:a2:55:5a:9b:04:0c:6f:4e:a9:3d:c5:79:f9:7d:62:
         8b:fa:e6:cf:98:7d:62:1c:1d:d1:26:c6:90:bf:33:1e:4d:1f:
         ed:25:81:58:6f:62:be:6c:9f:79:85:30:ce:27:9c:4b:ed:12:
         78:24:15:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:52:28 2024 by rpki-client on console-fra.rpki-client.org