Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e203338313336.roa
File:                     323630323a666266313a3a2f33322d3438203d3e203338313336.roa (raw, json)
Hash identifier:          bFcShiqwk36II35NKTsv/FRpWSGAxGXGmTgfevuDCWA=
Subject key identifier:   8A:A4:9D:4D:7D:9D:FD:FA:E7:42:6E:FC:D8:9E:1F:D2:58:42:81:93
Certificate issuer:       /CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Certificate serial:       2666948CB3E9541C16EBAD1B24BF1E4E0B69F660
Authority key identifier: FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e203338313336.roa
Signing time:             Fri 16 Aug 2024 07:01:25 +0000
ROA not before:           Fri 16 Aug 2024 06:56:25 +0000
ROA not after:            Fri 15 Aug 2025 07:01:25 +0000
asID:                     38136
IP address blocks:        2602:fbf1::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 18:14:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:66:94:8c:b3:e9:54:1c:16:eb:ad:1b:24:bf:1e:4e:0b:69:f6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
        Validity
            Not Before: Aug 16 06:56:25 2024 GMT
            Not After : Aug 15 07:01:25 2025 GMT
        Subject: CN=8AA49D4D7D9DFDFAE7426EFCD89E1FD258428193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:d3:8e:99:5b:8c:68:d2:6b:74:d4:8f:b3:
                    d3:5e:31:27:a2:46:65:ed:fc:11:91:97:e1:e0:2a:
                    81:6e:8b:ae:ef:41:50:04:43:ec:dd:93:66:70:0f:
                    6c:db:88:e0:05:dc:d4:97:f1:59:c2:a0:64:0b:55:
                    25:8e:b5:8e:df:12:27:58:14:1a:84:55:92:60:98:
                    3e:57:16:97:f0:65:7b:43:f8:f2:da:28:94:55:1c:
                    43:2e:6f:66:0e:9c:f7:02:c3:fc:b3:cf:01:70:2f:
                    62:57:b4:c4:6e:0a:4b:98:a3:03:f2:aa:06:7e:ea:
                    e5:53:75:be:61:85:18:f6:06:c7:e3:a0:01:39:3b:
                    8f:33:2f:36:4d:f5:f1:a6:03:b1:4c:d2:1b:3c:ad:
                    cf:5c:1d:88:54:cc:e3:3e:06:0d:dc:53:78:f0:f7:
                    a1:4c:c0:dc:bd:68:cd:d3:21:95:93:4c:a5:4f:60:
                    e8:24:18:68:92:52:de:e0:8a:45:1d:a3:7d:11:4b:
                    fb:be:cc:10:a3:cd:46:b1:1f:63:ed:7f:c9:89:d9:
                    10:1a:ca:aa:79:37:75:5b:61:22:13:a2:ee:7b:36:
                    2c:2c:9c:1a:9f:d3:e6:be:0e:3d:5a:cc:0c:bd:41:
                    68:9a:41:0b:d8:2f:cf:16:37:fe:08:e4:78:35:35:
                    63:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A4:9D:4D:7D:9D:FD:FA:E7:42:6E:FC:D8:9E:1F:D2:58:42:81:93
            X509v3 Authority Key Identifier:
                keyid:FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf1::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:4d:ea:7a:94:e7:6f:2c:77:ba:49:49:96:de:eb:31:6e:4c:
         e1:dc:8b:f1:93:2a:df:2b:ab:48:75:28:18:db:4a:78:32:6a:
         ef:ff:bb:1e:0b:ec:b2:91:be:37:e9:ca:13:45:76:9b:05:3e:
         f5:7e:43:e5:93:36:64:39:65:fa:59:50:7d:ea:e0:1f:57:13:
         c5:ed:4b:d4:a6:ec:2d:cf:9f:e6:12:49:d4:5e:20:b9:e9:7a:
         68:e9:63:07:c4:30:6b:5e:ca:53:0e:e4:f1:85:46:bd:39:c6:
         b6:ed:31:41:a0:0a:92:f3:39:25:f9:65:bd:3a:e8:6b:22:d4:
         68:55:b8:8f:d3:08:aa:5b:90:b9:60:65:eb:a4:96:d7:90:03:
         a5:2d:48:72:55:fb:ef:28:de:e7:38:cb:03:52:07:0f:4b:96:
         b0:c4:24:7b:5b:25:15:b6:52:2f:41:cf:97:65:33:3b:ee:44:
         36:2c:c2:44:13:2b:9d:38:6c:31:e1:ee:fa:a5:3a:b6:b1:c0:
         2c:ff:5a:f8:64:2e:bd:97:98:6b:a9:6b:3c:1c:2e:55:9e:f1:
         f2:8d:83:4d:41:f1:39:d0:29:1b:0f:a0:1e:59:ac:82:1b:75:
         9c:9a:b8:3a:a1:1e:f6:99:a7:23:ae:98:79:69:4d:4a:e1:1d:
         e0:ff:8b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:51:57 2024 by rpki-client on console-fra.rpki-client.org