Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3230303a3a2f34332d3433203d3e203533333433.roa
File:                     323630323a663736353a3230303a3a2f34332d3433203d3e203533333433.roa (raw, json)
Hash identifier:          0pyXE81nqb4vJ0PXem67eeYyaTaVPTEcGIoKGVgW0KU=
Subject key identifier:   95:08:07:1A:01:DC:3C:DA:CD:40:54:5D:97:01:87:97:33:75:45:C0
Certificate issuer:       /CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
Certificate serial:       5A1018181F0B9B5942555E0D98FC2B9FBB209091
Authority key identifier: 6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3230303a3a2f34332d3433203d3e203533333433.roa
Signing time:             Tue 07 Jan 2025 04:04:03 +0000
ROA not before:           Tue 07 Jan 2025 03:59:03 +0000
ROA not after:            Tue 06 Jan 2026 04:04:03 +0000
asID:                     53343
IP address blocks:        2602:f765:200::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 15:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:10:18:18:1f:0b:9b:59:42:55:5e:0d:98:fc:2b:9f:bb:20:90:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
        Validity
            Not Before: Jan  7 03:59:03 2025 GMT
            Not After : Jan  6 04:04:03 2026 GMT
        Subject: CN=9508071A01DC3CDACD40545D97018797337545C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:40:60:d0:4f:c0:94:e9:a9:63:9c:28:68:
                    ad:5b:c2:3a:20:48:07:ce:6c:5d:6a:5b:fc:d1:ed:
                    43:8e:0d:93:32:3b:5f:8f:e0:c3:f2:df:5f:1e:c1:
                    3e:2f:08:86:8e:8c:e9:34:ed:12:81:d5:60:08:81:
                    15:3d:1d:a5:e6:1b:a0:ca:58:9c:c5:45:58:28:01:
                    08:0e:bd:0f:99:d1:be:f4:f9:8c:dd:22:c1:0c:d3:
                    72:90:a5:ac:e3:47:7a:52:09:b6:3a:5e:41:60:3c:
                    ce:4d:a8:46:9b:eb:c1:30:ed:e3:e5:8f:fc:ed:0a:
                    de:85:30:a2:49:69:5d:72:5d:20:f3:d5:c2:17:97:
                    73:09:fb:67:d3:5b:6e:ca:50:17:cb:79:98:1e:f0:
                    e6:b1:d7:23:73:0e:8f:93:fc:ed:1b:03:73:3c:b4:
                    19:e3:d9:2b:19:f9:6e:de:c8:49:13:be:a2:18:64:
                    ec:03:84:18:f6:98:81:cb:4b:70:01:63:20:66:2e:
                    95:28:73:39:2b:22:e5:fe:1f:ec:d3:8f:27:02:c6:
                    57:1a:61:c8:ae:99:c5:a8:ea:6d:3b:12:b0:49:15:
                    10:ad:00:53:4c:1b:55:95:f1:e8:ad:79:73:c3:0c:
                    41:91:bf:1a:c7:f8:cf:14:f4:37:24:84:15:20:01:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:08:07:1A:01:DC:3C:DA:CD:40:54:5D:97:01:87:97:33:75:45:C0
            X509v3 Authority Key Identifier:
                keyid:6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3230303a3a2f34332d3433203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f765:200::/43

    Signature Algorithm: sha256WithRSAEncryption
         15:83:a7:16:35:34:38:69:eb:03:78:63:69:06:97:98:97:3a:
         8b:47:d0:02:ec:2b:67:d2:43:09:04:7a:f1:82:5f:87:20:c6:
         db:61:39:57:2f:a8:e4:ab:d0:9b:c1:9b:55:be:9e:1b:ef:2a:
         3e:10:42:ad:f4:4f:ab:9e:2a:78:a3:aa:23:14:65:f6:ad:43:
         4b:34:50:37:cb:40:45:4d:b1:2e:e9:82:92:a7:ad:1a:17:c5:
         8e:8f:e8:65:98:cd:83:52:5a:80:a0:6c:cf:09:84:93:e5:41:
         bd:18:6b:83:25:c7:9c:66:29:d7:fe:52:80:40:35:6c:e3:19:
         a7:2d:d0:de:d2:62:7e:f0:96:64:6c:ea:f4:11:c0:5e:fd:4b:
         fe:6d:f4:f3:a1:ad:5c:15:82:00:08:bd:01:37:17:f4:8b:05:
         11:9a:d6:f7:1a:52:da:7b:ab:55:41:60:7e:11:a3:f5:a3:e7:
         10:1c:1d:33:48:36:fe:bc:ed:95:50:c2:3c:c3:61:c4:ef:a7:
         19:bb:36:31:3e:48:c1:60:e7:01:0d:00:c1:5e:6c:97:f2:2a:
         92:c8:f6:21:f6:91:0e:d2:58:81:bb:13:ab:59:7b:35:06:d6:
         82:f6:be:78:6b:f3:9d:57:68:db:08:95:64:d4:16:0f:a6:d8:
         ad:1b:9d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:44:52 2025 by rpki-client