Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36393a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a36393a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          QzI0XnShO7aT6CRZCmw3ZvkkOZZYtuGiPrVt1MOvkVQ=
Subject key identifier:   8E:15:27:B7:4A:46:29:1C:8B:44:AB:05:6E:3C:21:63:E3:EA:C0:26
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       44E5A7E2254F041FE5E4C1A5DF348874A428348E
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36393a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 14:16:11 +0000
ROA not before:           Thu 19 Dec 2024 14:11:11 +0000
ROA not after:            Thu 18 Dec 2025 14:16:11 +0000
asID:                     16909
IP address blocks:        2602:f78a:69::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e5:a7:e2:25:4f:04:1f:e5:e4:c1:a5:df:34:88:74:a4:28:34:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:11:11 2024 GMT
            Not After : Dec 18 14:16:11 2025 GMT
        Subject: CN=8E1527B74A46291C8B44AB056E3C2163E3EAC026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:b6:97:60:c3:58:60:7c:82:e4:26:a2:b2:
                    48:0c:4b:22:60:9b:42:e4:26:d2:61:99:f0:94:82:
                    48:f8:94:4d:8a:ad:59:d0:55:5b:ca:2b:b8:fa:8e:
                    c5:87:54:41:29:4f:0c:fc:46:df:18:73:45:fb:cd:
                    70:e7:55:74:1c:c6:c4:87:1a:3f:70:35:29:08:d9:
                    66:25:66:8e:f2:a0:1e:34:b4:73:ad:90:23:a1:e9:
                    fb:2b:7e:10:2d:9f:c4:60:ce:9b:45:21:20:a2:87:
                    46:7b:86:00:b8:af:88:d1:1a:67:8d:ad:f7:21:c1:
                    9a:71:df:38:c6:06:58:3f:3b:ad:77:4a:3d:cd:6f:
                    96:38:86:ce:88:69:05:87:61:8b:55:1c:04:56:9d:
                    b5:dd:d9:9b:76:7f:af:7a:39:24:7d:b6:11:d7:56:
                    d2:36:99:0d:94:5b:20:e1:7a:fa:58:e9:23:d2:3d:
                    5e:bc:6c:8d:3a:05:ae:2a:4d:be:29:54:2b:68:42:
                    61:90:45:48:9b:19:b4:d1:ea:a6:9a:ff:22:14:07:
                    4f:6e:cc:2a:57:af:8e:c6:bb:f5:0d:d9:ef:29:a8:
                    03:d0:b3:60:9e:ae:e6:f7:ad:fd:43:46:a3:d0:ab:
                    69:53:45:87:12:01:a0:02:4c:9d:89:25:db:f3:2c:
                    ba:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:15:27:B7:4A:46:29:1C:8B:44:AB:05:6E:3C:21:63:E3:EA:C0:26
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a36393a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:69::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:62:a7:c7:f6:46:c4:c9:60:9f:60:b4:3c:9f:a2:a3:97:e3:
         8e:9b:e4:5d:b8:3e:74:86:ff:ee:2b:f9:f2:4c:70:ac:09:51:
         f1:e4:e1:e5:72:14:5b:bb:2f:0b:e8:83:8b:f5:3c:d8:ae:8c:
         f6:d0:62:85:8d:41:df:01:69:43:fe:90:98:e3:77:8d:64:46:
         7e:99:a5:06:27:90:e4:e1:e0:da:be:27:74:3c:b6:27:c3:7b:
         87:f8:0f:6b:76:b2:c7:12:36:ba:28:8b:eb:a7:a1:0d:0b:f9:
         70:11:b4:6b:e4:62:91:69:06:57:0c:b0:88:6d:30:f4:8f:50:
         79:18:c2:c3:26:a1:0a:2e:5a:95:ec:ab:4c:52:aa:5c:7f:2d:
         ab:d5:87:7a:3e:51:b2:75:89:32:cb:b7:b7:90:be:99:e0:4d:
         65:77:d7:04:1f:49:fb:aa:42:8b:25:27:29:58:d6:83:f7:f7:
         d9:a5:96:79:18:66:cc:2c:fd:2d:63:e6:65:57:45:21:25:eb:
         a5:45:b6:2f:76:6f:d9:4b:be:b0:be:b7:9b:d6:da:26:8e:05:
         72:79:4e:1a:27:47:f3:07:6a:a4:95:29:f6:6b:e8:06:63:76:
         f4:2e:53:18:64:02:93:ed:75:48:61:ea:55:a0:6c:97:42:57:
         64:60:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:50:49 2025 by rpki-client