Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38333a3a2f34382d3438203d3e203136393039.roa
File:                     323630323a663738613a38333a3a2f34382d3438203d3e203136393039.roa (raw, json)
Hash identifier:          Un+1rpvVMJFPKweP9c2rwcbObrQjfeEAGGPxuutZW/g=
Subject key identifier:   B2:CA:7A:47:00:9E:0E:26:21:54:DB:08:1B:A0:1A:F8:BD:12:71:42
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       57D941703460A35DC25A59B77F16EE0B755B1BC3
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38333a3a2f34382d3438203d3e203136393039.roa
Signing time:             Thu 19 Dec 2024 14:16:27 +0000
ROA not before:           Thu 19 Dec 2024 14:11:27 +0000
ROA not after:            Thu 18 Dec 2025 14:16:27 +0000
asID:                     16909
IP address blocks:        2602:f78a:83::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:d9:41:70:34:60:a3:5d:c2:5a:59:b7:7f:16:ee:0b:75:5b:1b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Dec 19 14:11:27 2024 GMT
            Not After : Dec 18 14:16:27 2025 GMT
        Subject: CN=B2CA7A47009E0E262154DB081BA01AF8BD127142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:9b:da:95:3b:7d:e4:1b:7e:91:95:ca:11:
                    ef:78:63:5d:ec:57:6f:f3:c2:84:89:84:ab:dd:bc:
                    2e:3b:f3:96:1b:e7:dc:88:60:17:10:41:ae:43:af:
                    91:a9:c5:18:ed:42:ad:2a:73:88:79:e0:49:13:4f:
                    23:f3:6e:3a:95:b4:f9:26:d9:8a:9a:52:5e:85:d2:
                    5f:94:6a:89:d1:9e:6a:6d:8b:6d:e0:10:14:f1:fa:
                    d9:6a:0e:f8:45:4e:6d:38:f1:fb:54:5c:b0:86:78:
                    3f:27:06:33:8f:eb:47:b4:76:c2:28:24:fc:05:63:
                    b9:04:f9:60:f3:f2:19:0a:0f:c2:4f:c3:a4:3d:fc:
                    0e:18:92:aa:67:3d:97:1b:ad:55:be:15:c4:23:ad:
                    80:e1:2e:97:48:d2:8c:75:ba:7f:61:ba:9b:9b:61:
                    0b:03:a3:e1:5b:ad:43:a4:32:19:e1:c7:52:7e:33:
                    40:11:2b:ce:75:6e:71:84:54:38:b0:04:66:6f:21:
                    2a:5a:61:0b:e6:84:1f:f1:79:e3:8a:59:58:54:7d:
                    e9:c5:30:f9:7d:d3:36:1a:40:d6:c8:ca:69:71:8c:
                    7d:4e:64:b9:44:15:c1:ca:ce:4d:26:57:f4:8b:38:
                    16:36:97:da:43:5b:a9:9c:9f:53:16:66:ab:93:01:
                    1a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:CA:7A:47:00:9E:0E:26:21:54:DB:08:1B:A0:1A:F8:BD:12:71:42
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/323630323a663738613a38333a3a2f34382d3438203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f78a:83::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:f9:44:da:c7:ad:eb:01:d3:04:6c:c1:76:11:4e:8f:2a:f6:
         87:95:f4:50:5a:64:95:36:91:1a:1a:62:c5:df:7c:1f:18:ec:
         e2:ff:64:41:8b:df:bd:76:90:1b:37:b0:a9:e8:69:83:a8:23:
         11:77:31:68:d2:ea:19:ea:f2:db:7f:c5:0e:89:b3:89:fd:b1:
         e0:de:64:b7:a8:90:ce:ab:06:3d:0a:07:8b:5a:07:6e:d5:9a:
         a6:ce:23:ad:c1:5b:a2:b1:71:bc:ee:2f:8c:cc:9f:62:84:a3:
         bc:21:e4:b8:e6:0b:33:b5:6a:eb:d8:35:6f:4e:a0:51:82:a2:
         0a:f8:54:0a:03:a3:d7:18:55:72:e4:6b:d5:b8:6b:83:c2:6c:
         be:0d:06:5b:d8:40:b5:a0:e5:d4:cd:06:42:8d:8b:f9:61:2d:
         ff:5f:c6:19:36:3c:a6:66:60:09:21:85:f4:8b:15:60:e5:f7:
         c2:bb:00:8b:cd:98:1e:f9:33:6c:30:b7:16:69:b1:83:a7:57:
         a1:80:e3:72:24:4e:29:d5:30:8f:ce:78:3a:33:70:70:77:1b:
         9d:1f:3f:2c:84:47:72:35:b7:f5:20:1e:06:99:a4:ce:2c:ef:
         40:5e:05:c3:32:5e:ff:59:2f:e3:c4:76:8e:b8:1d:1c:51:4e:
         e4:f2:8a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:40:13 2025 by rpki-client