Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a31303a3a2f34342d3434203d3e20343031353037.roa
File:                     323630323a663738613a31303a3a2f34342d3434203d3e20343031353037.roa (raw, json)
Hash identifier:          34LqgEP4iGEHdo0Q2GoBEIYPcMYGd8rMb5zLY7PoHtk=
Subject key identifier:   BE:EB:92:68:B0:E2:1A:50:D3:D7:45:1F:2D:91:FF:63:9E:74:B3:14
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       427749ED24C79D7A7D09C2AE3CFA37F9A8F7B9A3
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a31303a3a2f34342d3434203d3e20343031353037.roa
Signing time:             Thu 19 Dec 2024 14:16:45 +0000
ROA not before:           Thu 19 Dec 2024 14:11:45 +0000
ROA not after:            Thu 18 Dec 2025 14:16:45 +0000
asID:                     401507
IP address blocks:        2602:f78a:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:77:49:ed:24:c7:9d:7a:7d:09:c2:ae:3c:fa:37:f9:a8:f7:b9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:11:45 2024 GMT
            Not After : Dec 18 14:16:45 2025 GMT
        Subject: CN=BEEB9268B0E21A50D3D7451F2D91FF639E74B314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5a:7f:52:a7:f5:66:6e:3b:94:10:2d:48:7e:
                    3f:0c:34:39:8b:8a:cb:a6:57:7e:39:5a:dd:c6:79:
                    b7:f1:04:a4:af:ae:ce:b3:dd:fc:19:59:bd:23:d2:
                    eb:00:e8:cc:60:57:3e:12:4f:c1:e1:32:03:78:45:
                    db:06:ad:6e:ec:31:c7:fc:c2:b0:98:81:06:fa:3f:
                    06:99:36:5c:a7:8f:2d:d1:6f:d7:b6:dd:d1:10:cb:
                    2d:22:8f:da:5b:56:b4:a1:71:54:65:fa:6b:16:a7:
                    77:f9:c0:77:dc:af:17:72:7a:8b:74:8b:0a:26:5f:
                    d3:3a:69:7a:41:b2:fd:94:c1:27:ee:48:b8:bf:e3:
                    bc:5c:54:93:41:8a:bc:a5:cc:81:6e:72:0b:d6:13:
                    2a:c0:0c:8f:a6:64:aa:72:8a:c4:6f:d6:8c:bf:90:
                    11:ff:9e:cf:92:a5:56:c7:94:b2:43:01:09:c4:14:
                    49:5a:78:27:aa:5f:50:ad:b7:e1:03:77:a0:d0:7f:
                    4a:e2:b8:ed:52:b3:e9:82:79:53:80:dc:30:46:93:
                    a7:74:75:c3:39:03:7e:f2:71:2e:ff:1a:2a:ca:72:
                    2b:c4:7b:f9:2d:dc:7a:4f:7f:d4:b6:3c:94:a1:cc:
                    c9:b7:06:54:79:0c:2b:5f:01:f0:17:05:bf:c6:b0:
                    52:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EB:92:68:B0:E2:1A:50:D3:D7:45:1F:2D:91:FF:63:9E:74:B3:14
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a31303a3a2f34342d3434203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:56:a8:64:89:b9:b5:05:0e:2a:35:34:08:c2:e3:9e:69:fe:
         29:c9:9e:35:3c:1e:73:bb:31:d9:0c:2f:3e:aa:12:5b:9d:5b:
         40:c1:71:45:2b:44:6e:0e:b1:23:35:a7:6c:bc:02:a7:f8:1e:
         d0:f6:15:16:1c:5d:0f:cc:a7:6d:e0:79:43:a6:8b:5d:08:5a:
         2c:a8:16:a9:d8:5b:e4:5a:86:41:50:4d:2f:33:2b:db:3b:50:
         f5:d4:a8:7e:ed:82:03:d3:1f:ee:ed:57:8b:04:89:93:58:49:
         f8:17:f7:93:c0:93:49:a2:c5:7e:aa:a4:67:0a:d2:b8:64:a1:
         34:38:f9:8e:03:6a:39:77:db:8f:d0:89:4a:7d:0e:57:7b:d7:
         14:67:4d:ca:cf:4b:f8:e1:8c:c2:c2:2f:cc:01:38:2c:9e:d7:
         9f:ef:bf:7b:2e:90:b1:e0:ce:ce:36:d2:f3:3b:63:52:6b:b4:
         e0:20:b2:92:8f:d2:25:d7:d8:2e:d1:36:47:62:94:cd:fd:89:
         04:7d:71:05:7b:5e:8c:f7:d4:75:06:7c:98:83:8e:b0:b0:2a:
         fb:57:c4:96:28:46:ee:94:2e:2e:61:40:2d:23:5d:f8:fe:d3:
         ea:bd:ec:7c:d3:af:9a:10:11:4d:3a:21:13:45:e9:99:d0:3e:
         e9:2b:cd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:49:43 2025 by rpki-client