Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa
File:                     323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa (raw, json)
Hash identifier:          DCIgH3ble6mwMFNN8fLT2YEAYD3ro9CYr5RvYQmhhmQ=
Subject key identifier:   B9:68:89:FC:FB:E8:F8:21:D3:0B:57:10:FF:03:DB:53:39:38:44:E2
Certificate issuer:       /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial:       36DB320D4D766EF498EC9328D2B724233A06EAD9
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa
Signing time:             Fri 03 Jan 2025 08:58:21 +0000
ROA not before:           Fri 03 Jan 2025 08:53:21 +0000
ROA not after:            Fri 02 Jan 2026 08:58:21 +0000
asID:                     49867
IP address blocks:        2602:f9ba:a9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 19:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:db:32:0d:4d:76:6e:f4:98:ec:93:28:d2:b7:24:23:3a:06:ea:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
        Validity
            Not Before: Jan  3 08:53:21 2025 GMT
            Not After : Jan  2 08:58:21 2026 GMT
        Subject: CN=B96889FCFBE8F821D30B5710FF03DB53393844E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:c9:c0:0c:7b:1f:92:ee:61:a0:4c:a6:a0:
                    b6:32:aa:4a:24:f6:1d:5d:39:49:a1:75:9d:e6:66:
                    24:49:9c:b5:d5:4f:ca:71:43:34:78:8c:80:ec:0a:
                    e6:df:83:66:ea:52:4a:07:6f:71:8f:52:ac:a1:77:
                    1d:b1:22:92:ad:f6:65:72:5c:99:a1:d6:f6:73:f9:
                    26:5f:99:fc:a6:5f:42:b9:18:ce:0d:fa:c6:3c:b9:
                    be:3b:ec:87:70:e1:5a:99:6f:1b:3e:dd:3f:55:14:
                    a3:50:7d:f6:f1:25:e6:d3:23:01:bd:25:45:d8:55:
                    37:12:f0:a6:2f:33:06:30:38:96:ee:6a:9c:08:33:
                    82:51:8c:35:ff:63:55:35:53:99:cd:fc:f9:c1:f5:
                    9a:0b:2c:73:cb:d2:8b:ee:ec:15:4f:53:7b:03:49:
                    b1:10:38:90:95:60:7e:8a:a0:9c:b3:c7:b0:34:ed:
                    93:3a:51:41:ef:94:41:98:26:08:74:34:09:2c:b4:
                    f3:16:16:4f:21:0f:b9:ab:60:56:4b:83:09:f1:31:
                    c4:a4:23:bc:8c:d5:dc:c6:b7:06:47:97:c2:64:b3:
                    d9:a0:81:94:89:22:8a:72:ff:25:d4:85:51:6a:19:
                    66:65:a1:ba:f1:db:1c:d5:35:f7:ef:b4:8a:9c:15:
                    47:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:68:89:FC:FB:E8:F8:21:D3:0B:57:10:FF:03:DB:53:39:38:44:E2
            X509v3 Authority Key Identifier:
                keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a61393a3a2f34382d3438203d3e203439383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:a9::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:26:bf:92:07:c2:d7:36:19:a1:8e:1f:38:11:9f:fa:c2:79:
         12:17:5c:cd:b9:44:75:08:af:4c:99:08:00:1d:2f:62:5b:ef:
         57:4f:d6:4d:8a:7c:5e:31:8d:71:14:78:86:be:67:54:38:7c:
         b2:2d:cd:2c:1e:6e:06:69:f2:10:9e:1e:91:1c:80:db:d2:05:
         7c:c4:0c:cb:9f:7f:f1:3f:5d:23:20:d2:49:ba:9a:f4:c9:0b:
         de:c1:bf:6c:6b:f2:7c:a5:a2:9f:d2:0f:e4:4a:63:00:16:93:
         6c:07:99:6a:24:0e:61:88:e9:3f:82:7c:ad:7e:7f:51:5c:33:
         59:74:06:05:0e:7e:a6:94:9b:26:ad:fd:26:46:15:8d:99:28:
         62:3d:27:fd:ba:d2:da:08:35:02:e7:1c:18:85:09:5a:87:f5:
         39:4e:8f:70:b2:1b:e0:8d:99:fe:41:b1:68:c7:fe:3e:7b:bd:
         04:df:2c:d9:61:a5:d0:65:56:e1:4c:97:0c:10:a6:e0:57:87:
         15:9d:f9:ef:a1:d3:60:10:dc:e7:6e:20:d8:85:38:29:ff:77:
         19:2d:27:7b:4a:46:14:d7:78:7c:f9:a8:7c:01:e2:23:87:a4:
         89:4e:82:39:7f:15:a8:03:86:79:75:2e:9b:04:2c:4e:8b:f6:
         c0:39:3b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 05:56:34 2025 by rpki-client