Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa
File:                     323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa (raw, json)
Hash identifier:          4hdt9vV39rhr9MZ3oOqjl29hlMwx0w7AB+wEe2BLi9Q=
Subject key identifier:   18:C2:F8:F8:49:AE:9A:32:D3:D8:CB:95:6C:44:24:5C:80:5A:8E:95
Certificate issuer:       /CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
Certificate serial:       64653E229EE9D325662E6C69D653EF2C773B5F93
Authority key identifier: C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa
Signing time:             Mon 26 Aug 2024 19:25:05 +0000
ROA not before:           Mon 26 Aug 2024 19:20:05 +0000
ROA not after:            Mon 25 Aug 2025 19:25:05 +0000
asID:                     215605
IP address blocks:        2602:f9ba:c3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d37a072-15ae-4905-810e-991fc6201b45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:65:3e:22:9e:e9:d3:25:66:2e:6c:69:d6:53:ef:2c:77:3b:5f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247
        Validity
            Not Before: Aug 26 19:20:05 2024 GMT
            Not After : Aug 25 19:25:05 2025 GMT
        Subject: CN=18C2F8F849AE9A32D3D8CB956C44245C805A8E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:5f:65:86:27:17:40:40:5c:21:36:d1:55:
                    ad:f3:67:d4:48:e1:1a:d6:bb:d3:c6:d3:6a:40:b4:
                    52:be:52:66:19:d5:5c:57:74:7d:b2:04:73:87:b5:
                    72:c5:5d:63:67:4b:88:f4:3e:ab:5b:e8:99:01:13:
                    5a:3e:5b:e0:f0:da:dc:28:3e:24:4e:8b:0b:84:e0:
                    98:e4:f5:95:42:f9:4a:f1:30:61:15:47:e1:46:15:
                    ea:1a:99:5c:90:c0:27:3c:be:4c:72:6d:c9:fc:33:
                    59:ab:fa:a4:61:36:98:c9:03:4f:94:e0:7c:f9:d0:
                    d0:75:6a:d7:bf:01:5b:c5:89:57:3a:f3:74:b4:19:
                    33:00:5e:ac:44:bb:1f:24:30:66:95:08:43:16:dd:
                    7e:ba:ba:7d:8c:da:ac:e5:39:21:60:a5:c2:83:9a:
                    e7:51:cb:95:88:3a:03:35:68:90:b9:53:c0:85:cb:
                    2d:18:f1:73:ba:dc:b3:06:c8:46:33:64:3b:de:58:
                    51:7c:01:42:31:b5:8a:98:6b:74:9b:a7:e1:56:15:
                    c4:3e:19:f0:42:8e:7a:be:d5:90:56:fa:68:af:87:
                    02:6c:ea:fa:df:c7:c2:c8:86:05:56:58:44:92:b5:
                    28:63:3a:2a:88:6f:96:8b:dd:af:88:e4:a0:12:28:
                    57:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C2:F8:F8:49:AE:9A:32:D3:D8:CB:95:6C:44:24:5C:80:5A:8E:95
            X509v3 Authority Key Identifier:
                keyid:C1:9A:74:47:85:5F:7A:C5:27:0D:95:C1:6E:13:45:5A:2A:5D:B3:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/C19A7447855F7AC5270D95C16E13455A2A5DB32A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d37a072-15ae-4905-810e-991fc6201b45/8d8a672dd79a741b29e5ff6fa5231f779488e707b290f2f247.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/0/323630323a663962613a63333a3a2f34382d3438203d3e20323135363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9ba:c3::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:09:95:8d:87:a9:57:3f:ab:1c:0d:65:87:36:96:b4:13:a9:
         2b:77:32:b2:06:06:1c:cd:66:a9:4a:d9:f8:cc:9d:17:96:69:
         74:22:88:d9:15:c5:ae:a0:ee:6d:39:06:48:28:4d:c4:d3:80:
         22:ff:36:a6:c2:87:c3:73:e0:e0:aa:88:37:3b:0c:62:d9:bd:
         f2:91:d0:cb:d0:00:f6:a9:bb:a4:c9:78:50:35:a7:89:48:f7:
         9d:5e:7b:b8:90:e8:cc:f6:69:0c:09:dd:ea:82:c0:81:6c:9c:
         ea:3b:ac:79:ff:49:6d:d9:c5:49:e0:db:62:3b:74:e6:be:d9:
         0f:f3:6e:d1:35:cc:90:96:2a:53:a7:f5:45:ad:26:04:e6:40:
         b6:88:7d:fc:a8:07:4c:c4:9a:2a:b7:30:f1:d1:75:89:b8:d8:
         8f:90:56:81:6b:f3:52:88:bb:b1:f8:cc:fc:6c:8b:60:a5:87:
         9d:25:d5:cf:46:5a:93:5a:ba:43:74:e8:a1:72:78:53:79:25:
         38:96:b2:1d:27:ef:d7:bb:ca:bf:26:bb:6e:1c:58:0b:87:0a:
         9d:3b:1e:f3:81:29:77:47:21:1a:8d:d6:77:b5:61:a0:b4:b4:
         68:32:73:5e:b6:12:f7:c3:26:31:50:27:a9:74:07:86:c6:c9:
         53:06:94:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:12:35 2024 by rpki-client on console-fra.rpki-client.org