Route Origin Authorization

$ rpki-client -vvf rpki.akrn.net/repo/AKRN/1/323630323a666266313a3a2f33322d3438203d3e203338313336.roa
File:                     323630323a666266313a3a2f33322d3438203d3e203338313336.roa (raw, json)
Hash identifier:          hSpQ5elAA54N2J61dMA4toQHF/gkowUP+Dkw1EXvW6I=
Subject key identifier:   58:1F:34:27:6B:65:11:70:55:B0:AD:A3:48:C2:50:69:5C:4D:F5:3C
Certificate issuer:       /CN=99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054
Certificate serial:       6A5A8FEE0C991D3BC66F79EB6E7A23040DC629DE
Authority key identifier: 75:CD:9B:B1:70:C2:C4:20:F0:B6:DA:A7:78:8F:CC:B0:BF:7B:4F:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054.cer
Subject info access:      rsync://rpki.akrn.net/repo/AKRN/1/323630323a666266313a3a2f33322d3438203d3e203338313336.roa
Signing time:             Wed 28 Feb 2024 13:49:19 +0000
ROA not before:           Wed 28 Feb 2024 13:44:19 +0000
ROA not after:            Wed 26 Feb 2025 13:49:19 +0000
asID:                     38136
IP address blocks:        2602:fbf1::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.akrn.net/repo/AKRN/1/75CD9BB170C2C420F0B6DAA7788FCCB0BF7B4FAB.crl
                          rsync://rpki.akrn.net/repo/AKRN/1/75CD9BB170C2C420F0B6DAA7788FCCB0BF7B4FAB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 May 2024 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5a:8f:ee:0c:99:1d:3b:c6:6f:79:eb:6e:7a:23:04:0d:c6:29:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054
        Validity
            Not Before: Feb 28 13:44:19 2024 GMT
            Not After : Feb 26 13:49:19 2025 GMT
        Subject: CN=3082010A0282010100BFE33F19C64F8D38DB7C144A61BE3D89D904C3AE7AB04F122148B38041F2AE16E3693FA75CFF5878568CF6C5802C8086166BD192D06BDF70F52216FCC78CEEFD876FE4D29A74A8C31623D400A8D1485C8476E815622C17152E494C1A247C586F46BF3EA13827CE83D305C49E86C2165856AA81179D4A1F9F71A4E5BAAB477F73896E872F426FF533BEFE2FE58392E54415ED6E6B1DAFBB6052CA1FA018D88B106BF81228F1FD49244C156405B04B78B1346AB9811F533293EA5F0894FECF1FFE04B3F00A31829DFF859599E87CCFC49A2A5F631D34493BD9FE90503DDF2AE3642567D6CBACD0146EB592C8A3538FDEF111A16627D7F63DD3B1B1AEFA86B6E3B30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:3f:19:c6:4f:8d:38:db:7c:14:4a:61:be:
                    3d:89:d9:04:c3:ae:7a:b0:4f:12:21:48:b3:80:41:
                    f2:ae:16:e3:69:3f:a7:5c:ff:58:78:56:8c:f6:c5:
                    80:2c:80:86:16:6b:d1:92:d0:6b:df:70:f5:22:16:
                    fc:c7:8c:ee:fd:87:6f:e4:d2:9a:74:a8:c3:16:23:
                    d4:00:a8:d1:48:5c:84:76:e8:15:62:2c:17:15:2e:
                    49:4c:1a:24:7c:58:6f:46:bf:3e:a1:38:27:ce:83:
                    d3:05:c4:9e:86:c2:16:58:56:aa:81:17:9d:4a:1f:
                    9f:71:a4:e5:ba:ab:47:7f:73:89:6e:87:2f:42:6f:
                    f5:33:be:fe:2f:e5:83:92:e5:44:15:ed:6e:6b:1d:
                    af:bb:60:52:ca:1f:a0:18:d8:8b:10:6b:f8:12:28:
                    f1:fd:49:24:4c:15:64:05:b0:4b:78:b1:34:6a:b9:
                    81:1f:53:32:93:ea:5f:08:94:fe:cf:1f:fe:04:b3:
                    f0:0a:31:82:9d:ff:85:95:99:e8:7c:cf:c4:9a:2a:
                    5f:63:1d:34:49:3b:d9:fe:90:50:3d:df:2a:e3:64:
                    25:67:d6:cb:ac:d0:14:6e:b5:92:c8:a3:53:8f:de:
                    f1:11:a1:66:27:d7:f6:3d:d3:b1:b1:ae:fa:86:b6:
                    e3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1F:34:27:6B:65:11:70:55:B0:AD:A3:48:C2:50:69:5C:4D:F5:3C
            X509v3 Authority Key Identifier:
                keyid:75:CD:9B:B1:70:C2:C4:20:F0:B6:DA:A7:78:8F:CC:B0:BF:7B:4F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.akrn.net/repo/AKRN/1/75CD9BB170C2C420F0B6DAA7788FCCB0BF7B4FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/1/323630323a666266313a3a2f33322d3438203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf1::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:96:f5:54:9e:f6:e0:a6:f0:b2:88:cd:01:b5:fa:c5:9e:39:
         7a:3d:2e:61:5f:a0:35:d0:6f:3b:d6:b0:23:e3:1d:d4:8d:3c:
         9f:44:cd:93:29:b2:df:12:77:1a:21:84:d1:4a:0a:cb:f8:1b:
         0c:ce:e3:27:81:7d:84:de:6b:0d:df:27:bd:c3:7a:11:56:fe:
         be:55:00:e7:85:70:c1:1b:78:c2:be:72:72:ef:46:9a:b5:82:
         a5:c0:3f:ff:de:98:bd:87:a9:8d:de:1b:7d:e4:d5:59:b7:1d:
         25:9a:56:26:0f:26:38:19:1d:7b:32:8e:10:f9:5d:3a:a6:4c:
         35:97:6e:47:27:3a:88:76:1c:09:11:6f:66:bd:2a:75:2d:e1:
         9d:ed:47:f3:3a:38:88:95:e0:29:3c:c3:fc:b6:41:91:4e:73:
         34:c9:5f:33:af:60:4d:5f:ef:7a:27:3a:d4:41:e8:80:ef:7a:
         9a:57:06:f0:66:a1:70:cf:bf:9a:c0:44:83:77:66:be:be:61:
         95:24:43:ac:4f:bb:d9:13:e6:aa:79:10:9d:68:4f:73:ea:e1:
         69:bf:d2:e9:20:f8:22:02:a7:e7:a7:d2:45:d2:1f:23:d2:e4:
         5a:79:f3:65:70:bf:12:61:16:fa:95:a3:cb:e8:ce:c7:44:63:
         b2:a2:16:cd
-----BEGIN CERTIFICATE-----
MIIHWzCCBkOgAwIBAgIUalqP7gyZHTvGb3nrbnojBA3GKd4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTlhOGEwMzZkYmZlYzlkM2E3ZGM1MDY3Y2FhN2EyYWE5
ZWRiMDVhNTE3OGJmNGUwNTQwHhcNMjQwMjI4MTM0NDE5WhcNMjUwMjI2MTM0OTE5
WjCCAi0xggIpMIICJQYDVQQDE4ICHDMwODIwMTBBMDI4MjAxMDEwMEJGRTMzRjE5
QzY0RjhEMzhEQjdDMTQ0QTYxQkUzRDg5RDkwNEMzQUU3QUIwNEYxMjIxNDhCMzgw
NDFGMkFFMTZFMzY5M0ZBNzVDRkY1ODc4NTY4Q0Y2QzU4MDJDODA4NjE2NkJEMTky
RDA2QkRGNzBGNTIyMTZGQ0M3OENFRUZEODc2RkU0RDI5QTc0QThDMzE2MjNENDAw
QThEMTQ4NUM4NDc2RTgxNTYyMkMxNzE1MkU0OTRDMUEyNDdDNTg2RjQ2QkYzRUEx
MzgyN0NFODNEMzA1QzQ5RTg2QzIxNjU4NTZBQTgxMTc5RDRBMUY5RjcxQTRFNUJB
QUI0NzdGNzM4OTZFODcyRjQyNkZGNTMzQkVGRTJGRTU4MzkyRTU0NDE1RUQ2RTZC
MURBRkJCNjA1MkNBMUZBMDE4RDg4QjEwNkJGODEyMjhGMUZENDkyNDRDMTU2NDA1
QjA0Qjc4QjEzNDZBQjk4MTFGNTMzMjkzRUE1RjA4OTRGRUNGMUZGRTA0QjNGMDBB
MzE4MjlERkY4NTk1OTlFODdDQ0ZDNDlBMkE1RjYzMUQzNDQ5M0JEOUZFOTA1MDNE
REYyQUUzNjQyNTY3RDZDQkFDRDAxNDZFQjU5MkM4QTM1MzhGREVGMTExQTE2NjI3
RDdGNjNERDNCMUIxQUVGQTg2QjZFM0IzMDIwMzAxMDAwMTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL/jPxnGT40423wUSmG+PYnZBMOuerBPEiFIs4BB
8q4W42k/p1z/WHhWjPbFgCyAhhZr0ZLQa99w9SIW/MeM7v2Hb+TSmnSowxYj1ACo
0UhchHboFWIsFxUuSUwaJHxYb0a/PqE4J86D0wXEnobCFlhWqoEXnUofn3Gk5bqr
R39ziW6HL0Jv9TO+/i/lg5LlRBXtbmsdr7tgUsofoBjYixBr+BIo8f1JJEwVZAWw
S3ixNGq5gR9TMpPqXwiU/s8f/gSz8Aoxgp3/hZWZ6HzPxJoqX2MdNEk72f6QUD3f
KuNkJWfWy6zQFG61ksijU4/e8RGhZifX9j3TsbGu+oa247MCAwEAAaOCAl8wggJb
MB0GA1UdDgQWBBRYHzQna2URcFWwraNIwlBpXE31PDAfBgNVHSMEGDAWgBR1zZux
cMLEIPC22qd4j8ywv3tPqzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKg
UIZOcnN5bmM6Ly9ycGtpLmFrcm4ubmV0L3JlcG8vQUtSTi8xLzc1Q0Q5QkIxNzBD
MkM0MjBGMEI2REFBNzc4OEZDQ0IwQkY3QjRGQUIuY3JsMIHzBggrBgEFBQcBAQSB
5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zN2Zl
OGE0YS0zZmQzLTRiYTAtOTQyMy1mOTU3YmQ1OGJjYTQvOTlhOGEwMzZkYmZlYzlk
M2E3ZGM1MDY3Y2FhN2EyYWE5ZWRiMDVhNTE3OGJmNGUwNTQuY2VyMHYGCCsGAQUF
BwELBGowaDBmBggrBgEFBQcwC4ZacnN5bmM6Ly9ycGtpLmFrcm4ubmV0L3JlcG8v
QUtSTi8xLzMyMzYzMDMyM2E2NjYyNjYzMTNhM2EyZjMzMzIyZDM0MzgyMDNkM2Uy
MDMzMzgzMTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYB
BQUHAQcBAf8EETAPMA0EAgACMAcDBQAmAvvxMA0GCSqGSIb3DQEBCwUAA4IBAQAc
lvVUnvbgpvCyiM0BtfrFnjl6PS5hX6A10G871rAj4x3UjTyfRM2TKbLfEncaIYTR
SgrL+BsMzuMngX2E3msN3ye9w3oRVv6+VQDnhXDBG3jCvnJy70aatYKlwD//3pi9
h6mN3ht95NVZtx0lmlYmDyY4GR17Mo4Q+V06pkw1l25HJzqIdhwJEW9mvSp1LeGd
7UfzOjiIleApPMP8tkGRTnM0yV8zr2BNX+96JzrUQeiA73qaVwbwZqFwz7+awESD
d2a+vmGVJEOsT7vZE+aqeRCdaE9z6uFpv9LpIPgiAqfnp9JF0h8j0uRaefNlcL8S
YRb6laPL6M7HRGOyohbN
-----END CERTIFICATE-----
Generated at Tue May 21 12:41:27 2024 by rpki-client on console-fra.rpki-client.org