Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38323a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a38323a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          JmdtFVK89hFFFDZ0oOL47QYo4X2HjQ+aaEiVG10LWhs=
Subject key identifier:   F8:63:DC:84:32:A8:F5:CD:2E:EC:47:32:B0:35:73:66:83:5E:1D:5F
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       4A2F2BFBFD62020D4A1FE7EE0AA787A70DB6419F
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38323a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 14:16:24 +0000
ROA not before:           Thu 19 Dec 2024 14:11:24 +0000
ROA not after:            Thu 18 Dec 2025 14:16:24 +0000
asID:                     16909
IP address blocks:        2602:f78a:82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:2f:2b:fb:fd:62:02:0d:4a:1f:e7:ee:0a:a7:87:a7:0d:b6:41:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:11:24 2024 GMT
            Not After : Dec 18 14:16:24 2025 GMT
        Subject: CN=F863DC8432A8F5CD2EEC4732B0357366835E1D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:94:ce:cb:d0:73:ac:3c:93:2b:e6:48:13:56:
                    de:87:fc:1b:21:13:6e:fa:2f:78:fc:0d:1a:68:4f:
                    31:a9:26:9a:47:dd:c5:73:5b:a0:18:82:e0:d6:60:
                    9b:bc:22:9e:da:c5:65:97:c8:61:7c:94:38:a5:ad:
                    f1:b3:e3:10:ce:d0:b6:55:81:7d:6f:76:77:bd:7f:
                    66:5e:1f:57:ac:e4:66:f6:da:7e:c7:8d:1e:aa:89:
                    55:b1:49:33:11:4c:13:0a:6d:65:91:30:03:85:91:
                    06:bd:f9:9e:ea:f1:4a:27:fd:d9:81:e9:9b:ce:50:
                    5b:df:8a:11:6d:e9:9c:35:93:b6:f6:fc:c9:1f:4d:
                    35:5a:a2:ec:05:1d:d8:42:a4:71:e5:85:1e:a1:fc:
                    70:79:d6:a5:cd:d9:9a:a9:5a:1a:79:29:86:a2:5c:
                    02:ae:54:1f:9e:02:4d:b7:5d:50:0b:40:83:f1:a6:
                    f4:72:d9:3a:2e:f2:14:a1:75:0b:30:7c:c8:93:61:
                    d6:7f:8e:56:64:db:9b:65:31:03:f1:e0:c0:c2:32:
                    1a:ec:41:0e:67:cc:a1:d2:07:1d:64:18:77:d7:20:
                    d6:4b:64:3c:9f:2a:68:4c:1c:d8:08:08:ad:70:86:
                    88:76:29:74:f0:90:bf:59:92:aa:7c:5d:c8:8e:3f:
                    83:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:63:DC:84:32:A8:F5:CD:2E:EC:47:32:B0:35:73:66:83:5E:1D:5F
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38323a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:82::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:b3:69:4f:39:26:bf:e5:05:64:75:64:32:69:8a:83:8b:
         65:f5:10:e3:9c:e1:55:aa:0a:ff:8e:a6:dc:ac:aa:8c:a6:94:
         6b:64:9d:09:36:ff:4f:e6:b2:5f:d9:a9:ae:6b:ed:bf:e3:3b:
         43:b9:cc:e1:30:17:7e:63:67:d1:e8:c4:31:77:ad:49:05:c7:
         c6:9f:68:86:4a:e9:9d:99:9c:a5:8d:d1:3f:ec:87:12:65:c9:
         eb:3b:f9:36:9d:7b:b7:80:73:d3:77:40:fc:71:96:35:e1:b0:
         07:76:0b:2c:08:fd:02:18:51:64:18:83:06:57:df:5e:a4:df:
         06:9f:07:09:0c:67:cb:8b:80:cb:82:5d:84:c8:a9:4f:47:53:
         7f:45:f7:ef:12:8a:92:48:a4:46:f0:08:7d:49:e8:0f:8d:3e:
         58:75:3b:13:c1:b9:b2:4f:b3:10:db:31:c1:c7:5e:21:9c:f1:
         92:a2:3e:da:46:91:2b:35:a5:4d:f6:35:3c:d4:fa:11:4f:10:
         b5:ed:a6:ca:6f:3d:7e:ad:d6:e8:79:2d:a6:9b:ed:56:1d:d3:
         a0:6a:b2:ec:20:0a:38:df:0f:a3:2d:1b:be:1c:00:5e:68:1e:
         07:60:bb:39:cc:cb:f7:65:a0:16:b3:c9:91:9f:f2:82:be:eb:
         9d:18:50:2e
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUSi8r+/1iAg1KH+fuCqeHpw22QZ8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA2YmUxNWUxOTk2MDVlNzU2MDI4MTM3MDkyMDM2Mjk4
YTc0NmJjZGZlMjQyMjdlNzIwHhcNMjQxMjE5MTQxMTI0WhcNMjUxMjE4MTQxNjI0
WjAzMTEwLwYDVQQDEyhGODYzREM4NDMyQThGNUNEMkVFQzQ3MzJCMDM1NzM2Njgz
NUUxRDVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5TOy9BzrDyT
K+ZIE1beh/wbIRNu+i94/A0aaE8xqSaaR93Fc1ugGILg1mCbvCKe2sVll8hhfJQ4
pa3xs+MQztC2VYF9b3Z3vX9mXh9XrORm9tp+x40eqolVsUkzEUwTCm1lkTADhZEG
vfme6vFKJ/3ZgembzlBb34oRbemcNZO29vzJH001WqLsBR3YQqRx5YUeofxwedal
zdmaqVoaeSmGolwCrlQfngJNt11QC0CD8ab0ctk6LvIUoXULMHzIk2HWf45WZNub
ZTED8eDAwjIa7EEOZ8yh0gcdZBh31yDWS2Q8nypoTBzYCAitcIaIdil08JC/WZKq
fF3Ijj+DlwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFPhj3IQyqPXNLuxHMrA1c2aD
Xh1fMB8GA1UdIwQYMBaAFBXgJDcag1uwDqu6+0T2jw+K6/j3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEwZWE2Njg3LzAv
MTVFMDI0MzcxQTgzNUJCMDBFQUJCQUZCNDRGNjhGMEY4QUVCRjhGNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05YzNkLTM0OWRkMTkwMDBkMy81MDZi
ZTE1ZTE5OTYwNWU3NTYwMjgxMzcwOTIwMzYyOThhNzQ2YmNkZmUyNDIyN2U3Mi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8wLzMyMzYzMDMyM2E2NjM3Mzg2MTNhMzgzMjNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMxMzYzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAveKAIIwDQYJKoZI
hvcNAQELBQADggEBAHSNs2lPOSa/5QVkdWQyaYqDi2X1EOOc4VWqCv+Optysqoym
lGtknQk2/0/msl/Zqa5r7b/jO0O5zOEwF35jZ9HoxDF3rUkFx8afaIZK6Z2ZnKWN
0T/shxJlyes7+Tade7eAc9N3QPxxljXhsAd2CywI/QIYUWQYgwZX316k3wafBwkM
Z8uLgMuCXYTIqU9HU39F9+8SipJIpEbwCH1J6A+NPlh1OxPBubJPsxDbMcHHXiGc
8ZKiPtpGkSs1pU32NTzU+hFPELXtpspvPX6t1uh5Laab7VYd06BqsuwgCjjfD6Mt
G74cAF5oHgdguznMy/dloBazyZGf8oK+650YUC4=
-----END CERTIFICATE-----
Generated at Wed Feb 5 06:45:14 2025 by rpki-client