Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a313a3a2f34382d3438203d3e20343031353037.roa
File:                     323630323a663738613a313a3a2f34382d3438203d3e20343031353037.roa (raw, json)
Hash identifier:          20JwP+3lqTLACVRGDa3iMvvCjeZvp1TTwBa5+1FofF0=
Subject key identifier:   D6:F6:C2:A0:0F:03:49:F8:AC:F8:FB:7E:C5:98:49:A4:33:05:53:6B
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       3BEA3CB9BC342BEFB6BCFFB0573F66FEBE741272
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a313a3a2f34382d3438203d3e20343031353037.roa
Signing time:             Thu 19 Dec 2024 14:16:40 +0000
ROA not before:           Thu 19 Dec 2024 14:11:40 +0000
ROA not after:            Thu 18 Dec 2025 14:16:40 +0000
asID:                     401507
IP address blocks:        2602:f78a:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ea:3c:b9:bc:34:2b:ef:b6:bc:ff:b0:57:3f:66:fe:be:74:12:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:11:40 2024 GMT
            Not After : Dec 18 14:16:40 2025 GMT
        Subject: CN=D6F6C2A00F0349F8ACF8FB7EC59849A43305536B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:33:e6:ae:50:66:74:2b:28:0c:7a:16:c6:
                    5d:8c:80:4b:41:e2:ba:9a:cd:69:f2:c6:03:7f:ad:
                    1a:81:41:6b:33:60:bc:81:08:ec:e8:7e:05:7f:b0:
                    04:58:83:5f:0c:3b:62:0a:85:f6:a4:f0:cc:1d:f3:
                    54:5f:99:52:52:73:19:48:e1:3d:ec:8b:0b:87:d7:
                    a7:29:73:22:0c:4f:7f:c0:03:76:16:bb:96:a1:11:
                    f5:fe:e3:e8:75:9d:a5:5b:ea:6c:50:de:db:7e:63:
                    13:c4:eb:22:d4:6b:9f:30:56:77:8d:08:2d:f8:72:
                    d4:df:1a:c3:30:bb:e1:e4:2d:0b:53:f1:56:6f:eb:
                    4b:e7:11:ab:b7:69:78:78:11:49:11:7e:23:06:b8:
                    29:80:a8:3c:94:95:98:d5:ce:e6:b8:08:32:db:10:
                    9c:53:20:00:b1:f7:f6:f9:e3:74:f9:4b:b9:c6:53:
                    73:36:15:e8:54:41:32:e2:12:72:4a:18:b6:d1:03:
                    10:8b:88:38:f2:fd:49:d7:cb:fc:37:a2:35:88:08:
                    f0:33:51:0b:0d:9c:80:eb:8e:ce:e6:41:e0:9f:af:
                    b4:8a:4e:10:f8:07:2a:35:41:b8:7f:db:84:1e:58:
                    ac:af:1b:61:45:09:e1:0f:62:4d:65:27:e4:73:a2:
                    09:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F6:C2:A0:0F:03:49:F8:AC:F8:FB:7E:C5:98:49:A4:33:05:53:6B
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a313a3a2f34382d3438203d3e20343031353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:7c:19:65:4e:5c:31:0c:c1:89:f9:0d:a1:ff:db:7b:07:51:
         ec:be:10:e2:f1:28:90:f1:ef:65:43:7a:17:bc:4c:c9:ba:61:
         d2:60:a5:8a:d8:82:cb:86:b6:65:d3:f6:0b:da:b8:f8:8c:85:
         c4:6a:8f:f0:97:e3:41:26:cc:b4:0c:50:3e:4d:9c:fb:11:a7:
         f9:d5:bd:aa:e7:e7:63:d0:94:38:75:2e:58:78:2f:f9:cc:cb:
         22:5f:46:23:eb:27:c1:6e:16:16:b1:1d:32:eb:e4:5b:42:dd:
         55:b0:00:a2:b9:c1:2b:9b:6c:3b:c1:66:04:b1:4e:ef:6c:25:
         17:de:fb:f3:66:3f:93:e7:29:c6:7c:7d:1d:fa:77:cc:7b:c1:
         19:7d:81:ea:55:0f:3a:83:0a:35:60:38:39:45:33:22:a1:2e:
         27:a0:66:f9:45:eb:54:5a:a7:3c:f9:55:7f:5e:34:33:e9:c8:
         da:0f:21:16:71:59:c6:33:9f:3b:5b:1c:33:75:3b:60:ae:2e:
         88:72:25:51:93:5c:2d:3d:06:77:d2:de:e6:9a:5b:35:d8:25:
         70:ca:d7:c3:5e:93:d8:47:fd:7c:5b:c4:48:cf:48:6b:73:44:
         a5:a9:05:db:5a:e7:6c:9b:bb:07:d3:fa:a5:07:bb:c3:fd:c0:
         74:79:a6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 07:45:32 2025 by rpki-client