Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a35633a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a35633a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Fcn5oO3/Gz4Ft1SCxGoKm7YLOP2gV71sJvHypU3fDao=
Subject key identifier:   90:E3:3D:0C:56:4E:A8:A9:21:50:72:69:AD:A9:CE:E1:16:C2:C3:43
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       546EDF2AB921959D94970F4A9739E41006FBCDE4
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a35633a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 17:23:07 +0000
ROA not before:           Thu 19 Dec 2024 17:18:07 +0000
ROA not after:            Thu 18 Dec 2025 17:23:07 +0000
asID:                     16909
IP address blocks:        2602:f78a:5c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6e:df:2a:b9:21:95:9d:94:97:0f:4a:97:39:e4:10:06:fb:cd:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 17:18:07 2024 GMT
            Not After : Dec 18 17:23:07 2025 GMT
        Subject: CN=90E33D0C564EA8A921507269ADA9CEE116C2C343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:18:5c:20:46:69:42:59:79:87:d8:2f:58:1a:
                    95:69:b7:01:86:34:51:55:aa:44:3d:eb:9e:7c:37:
                    4a:1a:d1:72:ce:47:4e:1a:06:22:59:f5:c2:92:b2:
                    0d:15:2c:a4:db:db:26:99:8a:b4:6f:6c:61:15:10:
                    82:6d:ce:41:f1:64:6d:1d:14:13:68:c5:3e:2f:52:
                    c5:31:8f:43:5c:9d:5b:01:96:39:af:39:fa:86:22:
                    ef:60:94:38:ad:27:c8:2b:7d:50:60:fb:a7:1f:ac:
                    49:79:05:1d:e1:00:f5:ab:d0:dc:d0:1f:44:e2:bd:
                    1e:b2:5f:81:90:d5:a3:7c:f3:03:52:53:69:7a:ff:
                    ef:b4:94:3e:25:09:16:ff:6f:49:fb:29:48:d4:02:
                    71:29:74:58:22:4c:b6:f7:91:25:b8:57:69:c2:aa:
                    6d:16:b1:8e:38:4d:f2:03:99:ab:a0:f9:33:02:ba:
                    e3:b1:0e:6e:40:91:87:37:53:af:66:c9:3b:ae:e9:
                    88:e9:ca:b7:4f:06:f4:f2:cc:46:3b:e2:42:44:9a:
                    49:e2:aa:40:2d:0a:bf:e9:99:f3:2b:60:0c:3d:a8:
                    57:7f:55:40:ed:dd:70:94:91:3a:ab:cc:04:54:5c:
                    9a:cd:3f:a8:e2:6e:5b:8f:d0:07:f7:d5:1a:f5:ee:
                    4d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:E3:3D:0C:56:4E:A8:A9:21:50:72:69:AD:A9:CE:E1:16:C2:C3:43
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a35633a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:5c::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:f0:8d:96:80:cb:cd:d9:cc:93:8b:c0:26:39:e5:71:7a:69:
         4e:6a:25:00:b6:51:00:0a:38:20:3e:6c:ba:26:5f:3e:a3:4c:
         0d:07:93:e2:fd:59:0a:1c:df:8c:82:00:87:60:0f:94:54:ca:
         79:26:46:6d:5e:94:2c:3b:3a:97:f2:46:76:d6:66:c9:8a:e3:
         93:6a:5c:dd:32:27:00:85:b7:f7:47:83:a8:b2:f3:ae:60:61:
         82:19:ea:91:fc:16:63:37:a4:82:db:2e:8c:7c:73:00:aa:7e:
         3d:99:81:09:2d:45:46:ec:53:11:96:d6:86:ee:c2:6c:d9:68:
         0e:cd:41:8b:1b:3b:8b:c9:66:6f:ff:49:23:ea:40:ff:d7:4d:
         38:57:38:5d:e6:c8:f0:8b:d3:ef:b7:5b:64:c9:9d:83:6a:57:
         f2:1c:61:9f:9a:fe:49:1c:55:55:9f:5a:82:f8:7b:cc:13:b0:
         9f:ab:c0:9a:e3:4b:03:a2:66:28:71:00:30:6a:cf:5c:c3:ca:
         b2:75:f9:c9:5a:1c:f8:b8:40:1d:8d:05:e9:49:c3:63:ee:fc:
         46:72:92:f6:71:53:54:0f:08:49:01:7e:67:cb:74:d6:6d:88:
         35:53:70:05:fd:44:a1:5f:62:49:1a:5f:94:e1:ab:fc:7b:86:
         b3:64:ee:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:42:28 2025 by rpki-client