Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38313a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a38313a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          0OK1txmSH27rGFd5gLpVniKIuQU4sxmYu72dWx4XDV8=
Subject key identifier:   38:41:16:84:7F:E4:17:49:00:17:7F:02:0D:D7:3E:D4:D6:AC:C5:56
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       67DBA31A370703A5CDFF1234C8E1DC8D69DF4A5A
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38313a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 14:16:22 +0000
ROA not before:           Thu 19 Dec 2024 14:11:22 +0000
ROA not after:            Thu 18 Dec 2025 14:16:22 +0000
asID:                     16909
IP address blocks:        2602:f78a:81::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:db:a3:1a:37:07:03:a5:cd:ff:12:34:c8:e1:dc:8d:69:df:4a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:11:22 2024 GMT
            Not After : Dec 18 14:16:22 2025 GMT
        Subject: CN=384116847FE4174900177F020DD73ED4D6ACC556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:22:4a:9b:87:2b:cc:f7:c4:d8:11:38:51:
                    e6:b4:e6:2e:e0:4a:c9:c9:90:d3:44:42:e9:88:38:
                    eb:59:d0:77:c8:6b:f8:81:6d:3a:57:1b:10:df:7a:
                    7a:81:bd:d0:3f:16:21:b2:6c:52:35:05:db:75:ba:
                    e0:48:95:87:cf:f2:3b:9c:75:3c:7a:f2:2d:e1:19:
                    f5:27:fe:ef:05:6a:96:36:35:f1:71:5b:3a:e0:00:
                    86:ef:12:4f:87:e9:5a:4d:ea:09:cc:6e:da:2e:de:
                    fd:95:1d:39:1d:f7:4f:7e:ae:c8:f6:39:df:62:3c:
                    d5:f6:94:5f:1c:52:8c:73:8c:7d:85:f7:6f:23:c3:
                    1b:16:f6:ec:be:f4:a6:a3:0e:41:5f:88:65:4e:b4:
                    29:33:d2:7b:a5:b4:7a:66:35:a8:f1:94:88:fa:6c:
                    34:c4:43:d4:a7:de:8a:5b:a6:dc:5e:8b:f4:cc:b0:
                    45:fc:08:d8:94:2e:45:76:df:61:a3:24:9c:af:ee:
                    d3:99:65:de:5a:74:c6:03:db:71:8a:fe:71:75:4f:
                    14:30:d3:fd:3c:b4:f3:a5:ab:f8:61:cd:1b:f5:54:
                    a6:16:96:12:c7:47:9f:92:bd:c1:86:71:fe:00:f1:
                    e9:13:79:c7:67:d0:b8:04:6e:d1:b5:2a:59:47:5e:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:41:16:84:7F:E4:17:49:00:17:7F:02:0D:D7:3E:D4:D6:AC:C5:56
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38313a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:81::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:45:6b:5b:55:4e:3f:6b:d2:94:1a:d8:f2:84:3c:03:c2:33:
         22:05:d0:32:c9:9f:2e:99:8b:25:2c:b2:c5:1b:49:6e:e9:de:
         02:82:68:09:da:ba:87:42:87:ba:f9:82:fa:16:d8:49:05:d9:
         7d:d3:dd:82:fc:29:57:50:b0:42:31:11:05:71:f7:3f:c1:8d:
         b6:54:24:96:11:38:68:63:d4:36:10:13:10:49:d3:11:41:52:
         1a:c2:a2:68:06:8b:30:2a:9d:b3:d6:ce:47:8b:9b:4c:04:a9:
         35:73:18:4c:a1:0b:1d:43:43:4a:19:e4:c0:0b:a3:bf:dd:81:
         0f:cf:15:4b:20:68:7f:d4:a1:f9:53:3d:b5:cb:65:d3:62:f4:
         ec:b5:ea:28:da:8e:31:a7:29:22:35:c8:65:c2:d7:63:84:04:
         1c:f3:59:16:ec:0b:3d:b1:1c:07:dc:1c:e1:b8:f3:47:6a:d3:
         34:c5:95:14:61:f5:0b:b6:77:dd:2f:a4:53:0d:09:96:d0:97:
         61:c6:e8:66:cd:8b:ca:36:3b:8d:91:c3:01:da:59:9b:ab:91:
         73:a0:7a:9b:01:6d:2c:a6:89:f5:bc:9d:bc:f6:c6:57:e4:3f:
         54:f6:95:b2:aa:16:ac:70:5d:83:62:65:bd:4c:1e:c1:79:9f:
         a4:ab:c8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:44:23 2025 by rpki-client