Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a6330303a3a2f34332d3433203d3e203533333433.roa
File:                     323630323a663736353a6330303a3a2f34332d3433203d3e203533333433.roa (raw, json)
Hash identifier:          dGEaEx8iyNHss6ZXn1yyDBZT6oFC2wvZzpyuVd6lcKA=
Subject key identifier:   33:26:4E:3D:A4:CA:D4:0C:41:46:D7:58:98:C8:AF:41:CB:7F:6D:17
Certificate issuer:       /CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
Certificate serial:       3BBE354B61DF5C6AFFE96F1DDC8A9842BCAEA53A
Authority key identifier: 6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a6330303a3a2f34332d3433203d3e203533333433.roa
Signing time:             Sun 09 Feb 2025 17:18:06 +0000
ROA not before:           Sun 09 Feb 2025 17:13:06 +0000
ROA not after:            Sun 08 Feb 2026 17:18:06 +0000
asID:                     53343
IP address blocks:        2602:f765:c00::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 22:50:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:be:35:4b:61:df:5c:6a:ff:e9:6f:1d:dc:8a:98:42:bc:ae:a5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
        Validity
            Not Before: Feb  9 17:13:06 2025 GMT
            Not After : Feb  8 17:18:06 2026 GMT
        Subject: CN=33264E3DA4CAD40C4146D75898C8AF41CB7F6D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:28:95:eb:99:b6:40:59:ac:3e:60:41:45:40:
                    3b:0a:3c:4e:52:45:5d:a9:a2:46:44:1d:23:cb:e6:
                    64:fc:aa:78:16:b3:de:f7:de:55:83:8e:a9:a7:e6:
                    73:fc:3d:b4:d0:05:e7:b5:3e:bc:b5:12:67:dd:13:
                    1f:81:89:99:e1:c9:4f:74:25:92:3b:28:33:ac:97:
                    ff:5c:b2:a6:18:1b:6e:0a:58:fd:01:c8:82:e5:64:
                    54:83:04:27:09:fa:03:b2:c7:be:77:22:4a:e5:e9:
                    d8:60:ca:c7:35:84:3d:6b:4a:98:e0:ae:12:ad:0b:
                    be:de:ad:1e:85:40:22:09:c2:96:0a:a5:a8:f0:12:
                    84:95:4c:44:7e:da:a7:1f:ee:6e:5e:7a:79:30:0d:
                    91:e0:0e:28:ac:4e:ac:e7:e3:cb:3a:d9:5a:43:b2:
                    fd:ab:db:0f:f2:18:8a:5c:b2:10:2b:a1:18:09:51:
                    30:a5:31:ab:91:f6:c1:7a:ec:89:c3:74:d5:06:09:
                    66:5a:87:34:9c:9f:ff:46:76:d0:5d:46:47:dd:9f:
                    f1:cb:56:db:b0:01:97:82:e4:a8:18:4a:3f:3f:2e:
                    08:f3:0e:02:5f:98:d7:d8:06:1c:14:82:ae:90:da:
                    70:42:d5:8d:c0:50:fb:bf:62:10:48:6a:2f:43:95:
                    f7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:26:4E:3D:A4:CA:D4:0C:41:46:D7:58:98:C8:AF:41:CB:7F:6D:17
            X509v3 Authority Key Identifier:
                keyid:6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a6330303a3a2f34332d3433203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f765:c00::/43

    Signature Algorithm: sha256WithRSAEncryption
         87:88:70:96:e4:b7:38:dc:27:59:c7:24:b6:cd:20:d2:22:ab:
         37:72:91:09:69:a2:60:1e:67:db:e8:1d:44:b2:3e:d6:30:82:
         83:68:6c:e4:ac:df:85:b0:4d:08:f2:19:7a:3d:30:95:56:65:
         48:08:50:92:8a:3c:06:98:46:2e:5d:30:4c:1f:cb:8c:c1:9b:
         d1:ff:81:fe:63:79:49:c1:2e:26:dd:06:32:63:38:67:4e:f4:
         de:f3:f0:64:5d:a8:50:03:ea:9f:86:61:dc:69:a7:8b:ff:30:
         45:cc:46:62:7e:6d:da:0a:1c:7b:5c:73:45:34:d6:20:da:d0:
         99:77:14:b7:8a:e0:bd:2e:96:8a:7f:7a:b6:59:17:02:3a:8d:
         26:d1:5c:b2:0b:ff:13:e6:48:61:e2:42:ce:fc:70:37:84:3b:
         64:96:94:f2:52:a0:62:d0:39:1c:bf:ef:d9:31:9b:90:c9:bc:
         41:49:40:cf:27:f4:9b:b0:8e:fd:43:71:17:71:cb:70:49:77:
         a4:25:07:a6:bd:2a:61:e9:80:89:99:d8:6b:a7:8d:8d:61:0f:
         1e:37:62:bd:72:a4:aa:0f:60:52:a2:93:62:08:0e:17:80:4c:
         46:6f:03:37:cd:f3:70:2b:6f:b6:0c:93:ae:27:c2:f8:e3:2b:
         72:84:4e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:02:24 2025 by rpki-client