Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38303a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a38303a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          S9T8JMWiSxB7HR2JQyR1OhK4ev9XusUY38kEM9V/ujU=
Subject key identifier:   99:A2:90:09:0C:6C:C4:71:CE:67:E7:25:C3:0F:37:27:D4:7C:9A:EA
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       71E7D8083D5D56304EBEEC43538A7E70E72EEE2B
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38303a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 14:16:20 +0000
ROA not before:           Thu 19 Dec 2024 14:11:20 +0000
ROA not after:            Thu 18 Dec 2025 14:16:20 +0000
asID:                     16909
IP address blocks:        2602:f78a:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e7:d8:08:3d:5d:56:30:4e:be:ec:43:53:8a:7e:70:e7:2e:ee:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:11:20 2024 GMT
            Not After : Dec 18 14:16:20 2025 GMT
        Subject: CN=99A290090C6CC471CE67E725C30F3727D47C9AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:9b:a9:5d:f1:d8:31:59:67:fb:b6:0e:9f:
                    9c:b7:7c:7c:30:18:ff:0f:e4:29:f0:44:45:40:01:
                    a3:2d:07:a4:fc:dd:29:25:ae:51:ce:52:4b:90:94:
                    de:d5:b3:ff:55:3a:65:49:39:7d:20:9c:fb:9e:b1:
                    91:1d:73:a0:4d:bc:16:c3:03:4e:f6:b7:9d:35:1f:
                    dd:87:66:0c:d7:ae:28:0e:70:14:81:3e:bc:ae:ea:
                    20:b2:43:06:aa:3c:fd:0b:57:04:6b:51:30:d2:87:
                    ba:ac:d1:0d:bb:14:b5:dd:f6:56:69:4b:35:d0:28:
                    9f:36:ed:c3:05:a0:72:e8:1a:f9:9c:80:5b:9e:6b:
                    e2:5d:3d:44:6e:c9:54:4d:76:e0:66:e1:7e:31:d9:
                    52:8f:cb:65:c8:fa:ff:80:78:0b:b3:4b:41:d4:f0:
                    15:c8:d7:30:34:72:88:d8:d9:3c:f8:ac:94:c9:8e:
                    c9:1b:22:f4:d4:04:e6:89:f9:ff:63:3f:c0:22:9c:
                    fb:40:08:72:a7:0f:7b:e8:61:5a:d7:76:e6:d0:cf:
                    6b:7e:c5:1c:6d:e2:c6:a5:3c:34:06:16:f7:23:04:
                    46:e3:71:d7:74:d4:e1:51:26:2c:cc:26:24:0a:73:
                    1b:9b:cc:0c:c1:7e:2c:ff:b6:48:59:ec:57:49:4e:
                    69:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A2:90:09:0C:6C:C4:71:CE:67:E7:25:C3:0F:37:27:D4:7C:9A:EA
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38303a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:80::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:26:39:c8:36:a1:fe:c8:26:de:88:c5:fb:c3:02:90:34:43:
         e1:ab:7d:fb:fb:e2:ff:cf:77:8b:31:84:b4:98:1c:0f:04:cf:
         1f:cd:53:4a:e3:94:aa:93:a1:5b:d6:c3:6d:5c:fe:d5:41:5a:
         1c:be:58:3a:c5:b0:94:bd:ee:ef:f5:04:48:4d:28:09:af:81:
         bb:71:75:05:5a:d0:fa:5d:10:f3:f1:45:89:c6:fe:5c:6a:55:
         2e:7f:d5:e7:1a:57:15:b5:84:66:ac:73:f7:f4:f3:e7:88:af:
         07:01:f5:9e:3f:0b:34:ba:64:b1:56:f4:83:96:ef:a9:9a:72:
         16:f4:13:56:91:05:d4:4c:17:c6:44:79:c8:1e:5b:c4:ac:57:
         9f:74:27:6e:67:f3:bf:16:7d:ec:06:cd:c7:3e:54:04:cd:94:
         c2:af:ab:37:93:9d:94:dc:2c:a3:12:fa:94:09:e3:a9:42:4b:
         6d:1c:23:ae:5b:b0:f4:57:09:bf:64:95:e7:66:c5:d5:8f:42:
         e4:34:e9:b5:53:72:02:70:7d:d1:1d:fd:47:33:22:2d:2f:48:
         7b:fa:b0:4d:fe:fa:3c:a6:f9:2b:e1:ea:1f:0e:0f:c6:59:a7:
         4d:c5:44:e1:0e:21:c5:92:e6:91:e7:25:23:22:09:c6:0c:ae:
         21:b2:6e:71
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUcefYCD1dVjBOvuxDU4p+cOcu7iswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA2YmUxNWUxOTk2MDVlNzU2MDI4MTM3MDkyMDM2Mjk4
YTc0NmJjZGZlMjQyMjdlNzIwHhcNMjQxMjE5MTQxMTIwWhcNMjUxMjE4MTQxNjIw
WjAzMTEwLwYDVQQDEyg5OUEyOTAwOTBDNkNDNDcxQ0U2N0U3MjVDMzBGMzcyN0Q0
N0M5QUVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MKbqV3x2DFZ
Z/u2Dp+ct3x8MBj/D+Qp8ERFQAGjLQek/N0pJa5RzlJLkJTe1bP/VTplSTl9IJz7
nrGRHXOgTbwWwwNO9redNR/dh2YM164oDnAUgT68ruogskMGqjz9C1cEa1Ew0oe6
rNENuxS13fZWaUs10CifNu3DBaBy6Br5nIBbnmviXT1EbslUTXbgZuF+MdlSj8tl
yPr/gHgLs0tB1PAVyNcwNHKI2Nk8+KyUyY7JGyL01ATmifn/Yz/AIpz7QAhypw97
6GFa13bm0M9rfsUcbeLGpTw0Bhb3IwRG43HXdNThUSYszCYkCnMbm8wMwX4s/7ZI
WexXSU5pwwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFJmikAkMbMRxzmfnJcMPNyfU
fJrqMB8GA1UdIwQYMBaAFBXgJDcag1uwDqu6+0T2jw+K6/j3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEwZWE2Njg3LzAv
MTVFMDI0MzcxQTgzNUJCMDBFQUJCQUZCNDRGNjhGMEY4QUVCRjhGNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05YzNkLTM0OWRkMTkwMDBkMy81MDZi
ZTE1ZTE5OTYwNWU3NTYwMjgxMzcwOTIwMzYyOThhNzQ2YmNkZmUyNDIyN2U3Mi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8wLzMyMzYzMDMyM2E2NjM3Mzg2MTNhMzgzMDNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzYzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAveKAIAwDQYJKoZI
hvcNAQELBQADggEBAIImOcg2of7IJt6IxfvDApA0Q+Grffv74v/Pd4sxhLSYHA8E
zx/NU0rjlKqToVvWw21c/tVBWhy+WDrFsJS97u/1BEhNKAmvgbtxdQVa0PpdEPPx
RYnG/lxqVS5/1ecaVxW1hGasc/f08+eIrwcB9Z4/CzS6ZLFW9IOW76machb0E1aR
BdRMF8ZEecgeW8SsV590J25n878WfewGzcc+VATNlMKvqzeTnZTcLKMS+pQJ46lC
S20cI65bsPRXCb9kledmxdWPQuQ06bVTcgJwfdEd/UczIi0vSHv6sE3++jym+Svh
6h8OD8ZZp03FROEOIcWS5pHnJSMiCcYMriGybnE=
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:53:12 2025 by rpki-client