Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a31323a3a2f34382d313238203d3e20333933353737.roa
File:                     323630323a663962613a31323a3a2f34382d313238203d3e20333933353737.roa (raw, json)
Hash identifier:          EkKtA7jvIDuPgLqxDLik3p80FWS0hs8xwLvOOhZVzjg=
Subject key identifier:   AD:D8:D0:65:DE:87:52:C0:AB:20:27:19:74:11:F1:CE:95:6E:74:08
Certificate issuer:       /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial:       25B8E16852E81695C9C0498AAED0A0186C6F5136
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a31323a3a2f34382d313238203d3e20333933353737.roa
Signing time:             Wed 30 Oct 2024 12:36:22 +0000
ROA not before:           Wed 30 Oct 2024 12:31:22 +0000
ROA not after:            Wed 29 Oct 2025 12:36:22 +0000
asID:                     393577
IP address blocks:        2602:f9ba:12::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 01:16:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b8:e1:68:52:e8:16:95:c9:c0:49:8a:ae:d0:a0:18:6c:6f:51:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
        Validity
            Not Before: Oct 30 12:31:22 2024 GMT
            Not After : Oct 29 12:36:22 2025 GMT
        Subject: CN=ADD8D065DE8752C0AB2027197411F1CE956E7408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:71:11:c9:d0:ec:ca:49:b7:da:33:e2:bd:f1:
                    d9:a6:18:ed:bb:9c:09:10:31:67:76:53:c5:1b:a3:
                    6c:01:8b:7f:5a:a3:cf:28:70:42:71:64:07:51:93:
                    37:1f:e5:0c:08:8f:d1:4c:9c:b3:3e:20:cf:d0:ee:
                    e4:67:48:17:03:ab:0c:82:69:05:3d:d4:53:97:91:
                    d1:01:7f:d4:9b:7b:1a:34:2c:06:1c:a7:fd:ad:7d:
                    8b:0d:d2:47:8f:ec:52:bf:19:09:36:ed:2c:06:56:
                    f2:62:e8:23:b2:09:6d:36:f8:ce:ba:9e:2b:8a:67:
                    5c:d1:ad:10:d1:d1:9e:ec:d4:48:e6:83:b8:9d:63:
                    b9:04:aa:98:7d:02:12:77:bf:f1:b5:71:6a:05:93:
                    3d:3f:c2:02:db:4e:d5:71:d4:3c:62:88:d6:b6:e4:
                    62:dd:d3:89:5a:5b:31:e7:70:80:19:92:f1:10:0e:
                    f6:bc:76:d4:19:d3:a2:4f:68:3b:95:18:c3:b5:30:
                    84:8a:9c:be:1d:be:d7:d1:59:bb:c5:f8:46:02:61:
                    05:31:2c:c6:fd:aa:b6:2d:58:75:61:9e:d9:f0:37:
                    63:42:6d:6a:ab:12:77:ac:5e:8a:47:d5:dc:d9:1c:
                    a8:e5:97:13:3a:04:c2:37:bd:21:da:a0:e3:af:2e:
                    a8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D8:D0:65:DE:87:52:C0:AB:20:27:19:74:11:F1:CE:95:6E:74:08
            X509v3 Authority Key Identifier:
                keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a31323a3a2f34382d313238203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:ff:db:c3:a2:2b:3e:f0:84:56:d4:76:bb:ca:f9:a7:fd:31:
         12:80:2c:cb:2a:8c:6d:5b:4d:b8:25:ad:ac:75:37:68:dd:5c:
         ed:e2:44:9c:b2:72:56:98:08:96:55:df:5f:26:3c:2e:aa:28:
         bd:f4:50:5a:dc:c2:36:fb:ab:f7:33:0b:23:8f:68:d6:75:b3:
         1d:5c:82:a2:7b:55:e6:7e:b7:69:e3:54:c6:1e:5a:04:fa:be:
         43:5c:65:5c:2a:58:f0:78:67:e0:8c:22:c8:ba:b9:a3:59:bf:
         70:ba:72:b7:21:91:13:07:e9:a5:d3:e3:f6:32:07:2d:01:3f:
         40:0c:0d:2c:b1:60:70:1e:5e:03:a8:81:ad:e9:69:a9:29:2d:
         d1:67:c9:67:70:06:45:4a:8b:7e:9c:59:67:ce:a5:ba:7c:d2:
         ba:e7:63:8a:80:80:35:7c:8b:d0:90:7d:3a:e2:92:17:02:a5:
         26:e3:15:9d:21:6a:db:f0:8a:25:9a:1d:05:f8:5e:ab:2a:d5:
         b6:48:c7:29:e6:0d:0e:9e:b0:f1:fb:a8:39:35:29:bf:cf:49:
         68:58:a5:3a:61:f0:ad:6e:53:18:fa:4f:0b:51:37:53:54:8d:
         72:3c:1b:f8:6b:6b:ef:c1:ee:e4:b2:fc:0e:d7:32:30:ee:99:
         9a:2a:2e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:54:31 2024 by rpki-client on console-ams.rpki-client.org