Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3830303a3a2f33392d3339203d3e203533333433.roa
File:                     323630323a663736353a3830303a3a2f33392d3339203d3e203533333433.roa (raw, json)
Hash identifier:          wRbdhxljYcVlbQ7gRVDhfYeb5WAuN9eWY0/w4mQ3sfg=
Subject key identifier:   0C:2C:3F:C7:31:95:9C:1E:5A:11:C8:8C:38:2B:78:5D:7E:65:CF:6C
Certificate issuer:       /CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
Certificate serial:       163492672CF6AF60DE832BAA7C3D87F179A0E713
Authority key identifier: 6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3830303a3a2f33392d3339203d3e203533333433.roa
Signing time:             Tue 07 Jan 2025 04:04:03 +0000
ROA not before:           Tue 07 Jan 2025 03:59:03 +0000
ROA not after:            Tue 06 Jan 2026 04:04:03 +0000
asID:                     53343
IP address blocks:        2602:f765:800::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 15:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:34:92:67:2c:f6:af:60:de:83:2b:aa:7c:3d:87:f1:79:a0:e7:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
        Validity
            Not Before: Jan  7 03:59:03 2025 GMT
            Not After : Jan  6 04:04:03 2026 GMT
        Subject: CN=0C2C3FC731959C1E5A11C88C382B785D7E65CF6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dd:cb:73:ce:bf:66:44:cd:bc:3a:ba:29:1b:
                    7f:d6:98:b1:fa:7b:06:cd:4c:f3:15:cc:23:a7:bc:
                    88:67:1b:9c:86:2e:33:20:a9:64:42:6d:d4:58:ee:
                    e2:31:9a:f9:33:d4:3e:cb:b7:08:94:50:9e:b0:34:
                    e3:b9:67:4b:8d:4a:00:91:e6:7e:3c:0c:56:8e:4d:
                    4d:b3:b5:32:ab:e7:a4:77:10:43:30:86:6d:4a:5f:
                    06:a3:13:ca:8a:3d:81:1c:a3:10:c6:bb:01:79:3f:
                    db:6d:fa:4e:ef:af:f1:c5:7c:af:5b:b5:6e:d1:60:
                    8e:01:9c:2a:b2:6a:e6:ec:6a:4c:0c:a8:6c:f7:73:
                    67:c5:cd:77:e6:e4:48:1c:60:4a:39:17:f4:c6:f4:
                    ad:e7:58:96:25:d6:7b:41:e1:51:6d:df:80:75:1a:
                    c8:b5:b8:b9:3f:df:e5:31:ee:1c:e6:da:b5:f1:6a:
                    4e:8f:d1:12:e1:0e:f4:75:4e:f4:89:af:4a:fc:87:
                    74:e8:47:cf:21:dd:a9:5a:f6:3c:25:f6:57:c6:fb:
                    28:ad:34:69:77:24:66:b4:80:41:91:15:2a:3b:f8:
                    95:1c:f9:e9:22:5a:22:d3:be:fa:4c:9c:29:58:1d:
                    11:90:10:6a:b9:9d:e7:b6:cb:f3:04:07:15:e5:a9:
                    3a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2C:3F:C7:31:95:9C:1E:5A:11:C8:8C:38:2B:78:5D:7E:65:CF:6C
            X509v3 Authority Key Identifier:
                keyid:6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3830303a3a2f33392d3339203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f765:800::/39

    Signature Algorithm: sha256WithRSAEncryption
         19:a9:0d:b2:a8:c8:d8:ba:34:39:b1:5e:0a:dd:ec:41:c1:a5:
         63:32:f7:28:58:0c:c1:59:4b:c7:73:80:a9:df:b2:d4:0a:6e:
         3d:1f:e5:50:58:40:03:1c:ae:64:fd:d6:c8:52:68:40:b5:72:
         44:91:8f:fd:4a:f9:21:b2:19:3a:40:3c:5b:e8:92:53:bf:b1:
         37:2d:58:54:6a:9e:80:5c:ec:26:63:57:bf:50:95:27:9f:eb:
         c3:27:59:a7:a6:f5:81:5f:bf:8f:b3:ce:14:bd:20:0f:93:9e:
         bc:12:f6:39:96:cd:8e:6e:55:74:d6:7d:97:4d:68:5e:7d:ba:
         a1:e6:9a:3e:93:2a:df:58:ab:d9:6a:f9:31:92:53:cd:c0:ce:
         03:ea:41:ca:31:87:51:21:1d:11:c0:01:fd:b1:99:5f:3b:4e:
         ef:8c:bf:57:15:7d:77:e1:ed:bc:3e:5b:b2:16:62:e7:b1:c8:
         f2:ff:9f:07:59:61:96:0a:83:a5:fb:53:09:80:df:b4:07:1f:
         03:1a:08:57:0c:4f:cb:a2:4e:52:ab:ae:74:9e:d9:22:dc:31:
         63:6e:4b:5f:f1:0e:27:c2:cf:76:0c:e5:5d:a2:33:5a:76:2e:
         c7:c2:15:74:fb:08:ae:ab:fd:57:7e:2c:4a:d5:ae:46:01:e5:
         50:53:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:51:21 2025 by rpki-client