Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3830303a3a2f34332d3433203d3e203533333433.roa
File:                     323630323a663736353a3830303a3a2f34332d3433203d3e203533333433.roa (raw, json)
Hash identifier:          RccPsaKCYo4JAJTpO35rXXfr5Z89di20Au470aGiu5A=
Subject key identifier:   30:03:1F:ED:BC:52:A5:F1:DA:20:1F:46:12:BF:6F:0A:33:D8:9C:79
Certificate issuer:       /CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
Certificate serial:       287DC2F87158D7FA596A6CFC40F64049CD43A598
Authority key identifier: 6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3830303a3a2f34332d3433203d3e203533333433.roa
Signing time:             Tue 07 Jan 2025 04:04:03 +0000
ROA not before:           Tue 07 Jan 2025 03:59:03 +0000
ROA not after:            Tue 06 Jan 2026 04:04:03 +0000
asID:                     53343
IP address blocks:        2602:f765:800::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 15:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7d:c2:f8:71:58:d7:fa:59:6a:6c:fc:40:f6:40:49:cd:43:a5:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
        Validity
            Not Before: Jan  7 03:59:03 2025 GMT
            Not After : Jan  6 04:04:03 2026 GMT
        Subject: CN=30031FEDBC52A5F1DA201F4612BF6F0A33D89C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:c7:00:5a:15:41:5a:62:8f:c6:48:6b:f9:
                    dc:69:e8:d8:74:a7:c7:45:ae:85:0d:02:b0:44:c4:
                    05:f1:d1:8c:73:f3:1c:78:1b:e9:31:9e:75:a0:5a:
                    c5:81:84:9a:6f:3d:40:2a:96:dd:25:88:48:ca:38:
                    20:cf:c1:f6:74:85:aa:78:8e:92:af:af:4c:5d:a0:
                    73:4d:23:37:66:5c:bf:eb:56:d9:1c:5a:3f:eb:93:
                    07:64:97:b3:55:c4:4f:d1:fe:19:78:97:d2:14:11:
                    5e:c3:94:9f:9f:20:3c:7c:c5:79:f6:ea:14:b4:1f:
                    bf:34:15:12:8b:80:1e:54:71:c0:46:a8:48:bf:c4:
                    5f:8a:55:b7:98:eb:af:5e:15:45:b1:68:bb:3e:b2:
                    bf:fd:1a:00:66:47:ea:41:cd:20:7b:8e:16:c8:d3:
                    46:21:fe:c7:75:e5:2e:0e:75:32:10:2f:44:e1:7b:
                    68:bd:f8:f8:c2:60:5a:c1:a9:3c:85:af:0d:3b:74:
                    d1:97:89:6c:59:a5:57:55:0e:4a:0d:76:72:a5:0e:
                    28:4b:49:f0:44:03:73:80:01:bd:4a:97:77:f4:cc:
                    6c:de:21:dc:8a:b2:68:ae:39:77:b1:f6:d3:f0:b1:
                    49:90:b6:87:26:27:36:e2:c0:ab:0e:a8:a8:e4:43:
                    4e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:1F:ED:BC:52:A5:F1:DA:20:1F:46:12:BF:6F:0A:33:D8:9C:79
            X509v3 Authority Key Identifier:
                keyid:6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3830303a3a2f34332d3433203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f765:800::/43

    Signature Algorithm: sha256WithRSAEncryption
         02:7d:a4:48:1c:ca:b1:93:b3:05:d1:3e:73:b0:41:d0:74:72:
         ae:8e:cf:9d:ea:1f:2c:50:7b:8b:a3:e5:83:99:b0:6e:e1:a2:
         d6:42:5c:4a:0b:aa:88:c3:0d:b6:1d:92:49:d0:3a:ed:e8:94:
         d9:e4:3d:d9:97:5b:f3:73:a4:f6:06:ef:77:d5:df:a5:66:52:
         b4:55:cf:e3:85:14:1a:67:ba:70:c9:77:48:a6:64:38:80:2e:
         1b:7d:07:8d:0a:23:1d:8f:b7:2e:a1:40:58:68:80:b7:e3:be:
         78:61:5e:50:2d:f8:5c:2e:79:5b:7a:9f:25:ae:43:66:32:29:
         e4:e9:47:cc:6d:5b:b5:af:4f:47:1b:fb:2e:c4:e4:f6:e0:1a:
         66:2c:33:20:7f:31:9d:f6:d9:f4:f1:14:43:c1:e8:8e:0f:a6:
         4f:96:95:ec:a2:86:cd:0c:71:4c:55:1a:43:44:a6:ea:72:6f:
         fa:a0:d9:08:66:04:92:08:f6:02:58:c3:44:58:8f:2e:67:9d:
         77:32:7b:85:a4:15:80:cd:f6:4e:26:a4:1d:58:b9:66:45:4e:
         4f:fb:2e:81:f5:e9:99:c5:4f:7c:9b:2d:0e:9c:bb:37:3c:87:
         e0:72:e8:1e:92:5e:32:a3:9e:46:95:f2:d3:cd:93:03:8d:93:
         54:23:ce:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:41:14 2025 by rpki-client