Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3832303a3a2f34332d3433203d3e203533333433.roa
File:                     323630323a663736353a3832303a3a2f34332d3433203d3e203533333433.roa (raw, json)
Hash identifier:          YX73rIq3pLQMn2MTQP9I0XZewyUgeGlxC1yykb6e9ls=
Subject key identifier:   5C:90:64:AC:8D:9C:4C:53:C4:CC:16:E6:5E:47:0F:E5:EE:C1:7A:0B
Certificate issuer:       /CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
Certificate serial:       3065891F8A6843F082726093C818D7ED09B7DDE6
Authority key identifier: 6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3832303a3a2f34332d3433203d3e203533333433.roa
Signing time:             Tue 07 Jan 2025 04:04:05 +0000
ROA not before:           Tue 07 Jan 2025 03:59:05 +0000
ROA not after:            Tue 06 Jan 2026 04:04:05 +0000
asID:                     53343
IP address blocks:        2602:f765:820::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 15:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:65:89:1f:8a:68:43:f0:82:72:60:93:c8:18:d7:ed:09:b7:dd:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
        Validity
            Not Before: Jan  7 03:59:05 2025 GMT
            Not After : Jan  6 04:04:05 2026 GMT
        Subject: CN=5C9064AC8D9C4C53C4CC16E65E470FE5EEC17A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cc:a8:94:9e:af:a6:06:16:73:17:1e:40:b5:
                    ab:27:67:9e:b4:16:33:1c:5d:88:88:2e:af:e3:ed:
                    a4:00:fc:c5:25:8e:05:b2:b0:ad:f8:42:fa:81:6a:
                    26:89:d2:9c:51:6e:4f:f8:47:6c:d1:8c:a7:38:04:
                    58:bb:a8:f5:0c:31:ea:da:7a:46:93:68:1e:d5:9c:
                    17:c2:c3:7d:b4:c7:b3:0e:4f:a7:de:76:91:f1:4c:
                    3a:10:1c:ff:ab:02:20:cb:ab:e5:e3:2b:c2:f8:0d:
                    d7:52:8a:30:d2:8d:ec:a8:58:a0:ad:63:55:44:85:
                    65:4c:91:40:8e:3c:bf:24:47:f6:b6:cc:7e:a8:c7:
                    3c:b1:2d:f6:67:42:50:85:39:2c:12:ff:70:9a:86:
                    d4:f8:41:68:bd:a0:c9:c3:18:98:ae:ed:10:bd:ec:
                    cc:50:b9:7b:1b:fd:e2:5a:e5:7e:08:a7:6f:e8:32:
                    8f:d6:d0:79:1e:be:8d:b4:66:d7:f2:c1:2a:1e:a6:
                    1c:fb:32:ca:a5:9c:fd:a9:ba:8f:3d:75:2f:15:ef:
                    81:8b:69:fb:79:79:11:62:02:0f:a2:e5:9c:f6:a5:
                    84:07:6a:4c:6c:6e:9f:de:60:8f:85:6a:78:44:84:
                    59:9d:d3:e6:2c:ef:23:e7:3e:54:ac:ef:56:be:8d:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:90:64:AC:8D:9C:4C:53:C4:CC:16:E6:5E:47:0F:E5:EE:C1:7A:0B
            X509v3 Authority Key Identifier:
                keyid:6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3832303a3a2f34332d3433203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f765:820::/43

    Signature Algorithm: sha256WithRSAEncryption
         7c:1f:1a:7b:c0:0a:fd:d1:b3:33:49:ed:a4:07:5e:64:cb:44:
         d9:32:46:40:a8:b2:c5:53:f4:c4:46:2f:94:ff:bf:20:f2:82:
         dd:8f:35:8c:46:d4:7a:15:4a:b9:90:3d:07:aa:d8:e2:2d:35:
         9c:f3:61:7d:7b:df:3d:3c:41:36:b2:c9:0d:7a:6d:17:d2:08:
         53:c2:ce:ff:bb:75:3c:cb:05:d1:72:e0:87:9c:bb:6d:5a:9b:
         79:7e:87:1f:55:48:19:d8:67:6a:7e:51:f0:29:fa:92:1a:71:
         9a:44:51:40:7d:1d:9a:98:cb:1f:5c:b5:0c:78:28:f3:16:5b:
         a9:8c:33:d6:6c:b6:b1:e3:f4:f1:92:54:56:39:ca:67:f9:50:
         ae:9f:71:4d:dd:d9:56:e3:06:20:79:f4:29:22:93:ac:27:f8:
         26:46:b4:ee:d7:84:72:1e:f0:6c:ad:43:96:1d:06:9b:32:4a:
         d2:8a:a0:aa:a9:51:6d:a3:b1:39:bb:28:f6:11:86:5e:e7:35:
         3d:b6:ab:7b:50:cd:55:b1:d5:94:54:4a:54:65:97:aa:98:35:
         46:3b:f0:6b:b7:ac:91:5b:2b:e1:60:23:53:7c:94:68:92:90:
         94:b8:1c:ad:ce:9d:c5:4a:8d:17:62:8d:c7:08:70:0e:a3:66:
         e6:49:ce:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:55:31 2025 by rpki-client