Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/323630323a3239313a33653a3a2f34382d3438203d3e20323134303932.roa
File:                     323630323a3239313a33653a3a2f34382d3438203d3e20323134303932.roa (raw, json)
Hash identifier:          EIQ75eF/lAQja8pQJrMcNuu7y+cgSA69iU0avrGBwFo=
Subject key identifier:   A9:31:44:CE:0E:BF:9A:DF:B5:8D:4B:F6:9F:3C:84:24:DE:2D:6B:4C
Certificate issuer:       /CN=0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1
Certificate serial:       6E12C7BFCB2001DE1A4940DA3D47BB2F78FC236B
Authority key identifier: E1:C2:F9:B8:BC:DE:6D:9C:27:61:54:58:33:55:B2:45:89:F4:9B:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/323630323a3239313a33653a3a2f34382d3438203d3e20323134303932.roa
Signing time:             Thu 03 Oct 2024 17:49:10 +0000
ROA not before:           Thu 03 Oct 2024 17:44:10 +0000
ROA not after:            Thu 02 Oct 2025 17:49:10 +0000
asID:                     214092
IP address blocks:        2602:291:3e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/E1C2F9B8BCDE6D9C276154583355B24589F49BC8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/E1C2F9B8BCDE6D9C276154583355B24589F49BC8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 11:30:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:12:c7:bf:cb:20:01:de:1a:49:40:da:3d:47:bb:2f:78:fc:23:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1
        Validity
            Not Before: Oct  3 17:44:10 2024 GMT
            Not After : Oct  2 17:49:10 2025 GMT
        Subject: CN=A93144CE0EBF9ADFB58D4BF69F3C8424DE2D6B4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:06:60:78:9d:0d:e0:09:c4:3b:ac:42:b2:ee:
                    22:8a:5e:3f:d5:c1:33:a8:1e:f5:37:9b:4c:64:36:
                    83:65:6e:ec:0c:70:7f:26:60:fe:29:8f:aa:2a:03:
                    54:e2:c8:1b:45:12:57:c3:1d:1e:50:67:d7:8a:73:
                    fc:6f:0a:ce:a7:06:38:ac:3c:90:d3:33:00:b3:bd:
                    24:0c:23:0c:ee:75:0b:fc:5a:9c:5e:70:a0:f8:4e:
                    77:ea:cf:de:a7:4a:13:92:46:e2:92:bc:75:1b:64:
                    a4:39:0d:ae:ac:fd:c2:37:50:10:0c:f8:7d:67:dd:
                    f7:a2:c4:4c:0b:6e:db:8d:be:68:86:5f:3c:2f:7a:
                    64:a4:6f:bb:b5:f5:2c:c5:a4:71:9c:41:16:d9:20:
                    79:c1:75:f9:a8:8d:cc:51:fc:a4:75:5d:78:41:80:
                    d9:e4:05:d1:7e:dc:dc:86:37:a8:98:89:20:fa:9f:
                    97:f2:00:53:45:0e:35:49:dd:b7:3f:b8:d4:50:a5:
                    0e:18:94:13:85:48:be:7e:81:db:b7:5a:be:da:7d:
                    09:46:de:49:46:75:85:25:9d:01:43:ae:d3:5b:48:
                    25:07:e9:0c:13:07:86:c6:27:9d:35:13:7b:ae:fb:
                    80:93:bf:a8:b9:06:5c:9f:06:1c:ae:bd:bb:f7:83:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:31:44:CE:0E:BF:9A:DF:B5:8D:4B:F6:9F:3C:84:24:DE:2D:6B:4C
            X509v3 Authority Key Identifier:
                keyid:E1:C2:F9:B8:BC:DE:6D:9C:27:61:54:58:33:55:B2:45:89:F4:9B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/E1C2F9B8BCDE6D9C276154583355B24589F49BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f6578195eb9729a303b6d74402d1d835d4389ed1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf915cb0a401919022ef071efe/1/323630323a3239313a33653a3a2f34382d3438203d3e20323134303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:291:3e::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:1f:20:c4:9c:8b:38:d3:a9:a3:13:db:ad:0c:27:e2:cb:09:
         75:cb:0f:1a:c5:59:8e:ba:d8:c8:dd:ea:5f:20:d9:81:48:81:
         87:c5:64:0c:af:1d:2b:7b:34:4b:f4:eb:ad:2f:3a:7e:71:10:
         ee:b7:41:0f:4a:c4:46:d0:c1:98:50:23:42:95:65:21:3c:7d:
         e8:52:8f:35:e9:e6:d7:65:56:dc:a0:59:eb:f5:5a:e0:c1:a8:
         d5:3f:8a:f0:8f:6b:b3:04:8c:3c:5c:5e:04:d8:49:4b:7d:0e:
         af:7e:47:3b:33:f1:a5:30:fa:5b:3f:8f:9a:f0:eb:15:99:03:
         2d:2d:e8:fd:70:4b:43:63:23:47:dc:f9:39:0a:17:19:31:62:
         8d:53:41:16:21:f6:02:ed:90:db:6e:4c:70:ae:b1:67:8d:3a:
         f5:15:5c:ce:84:bb:08:7d:32:01:2b:ec:37:7e:11:40:f7:f9:
         ad:0d:05:9d:f2:f5:31:c9:ff:76:78:4d:80:e7:ea:dc:ba:30:
         f1:ef:5d:1f:2d:34:4e:db:eb:fd:0f:f9:59:41:1c:1b:9b:a2:
         a0:77:07:da:fd:25:0c:93:32:12:87:9c:b1:de:35:b3:ce:5f:
         60:ce:1c:8a:9d:10:cf:9f:af:fa:b0:35:de:1a:84:74:52:cf:
         0d:ee:7c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:10 2024 by rpki-client on console-fra.rpki-client.org