Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a3230333a3a2f34382d3438203d3e20313939323033.roa
File:                     323630323a666161383a3230333a3a2f34382d3438203d3e20313939323033.roa (raw, json)
Hash identifier:          CqED198IBJA8A+eUMREkbndQWKsOBJ3ubTSk5eEmw1A=
Subject key identifier:   F8:E9:10:45:DC:5B:4F:B9:B6:21:D4:D3:A7:49:03:B2:CD:14:CD:64
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       7C882361043E76461E75480BB67C8C12C5DBBCAD
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a3230333a3a2f34382d3438203d3e20313939323033.roa
Signing time:             Tue 13 Feb 2024 08:14:29 +0000
ROA not before:           Tue 13 Feb 2024 08:09:29 +0000
ROA not after:            Tue 11 Feb 2025 08:14:29 +0000
asID:                     199203
IP address blocks:        2602:faa8:203::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl
                          rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:88:23:61:04:3e:76:46:1e:75:48:0b:b6:7c:8c:12:c5:db:bc:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Feb 13 08:09:29 2024 GMT
            Not After : Feb 11 08:14:29 2025 GMT
        Subject: CN=F8E91045DC5B4FB9B621D4D3A74903B2CD14CD64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9e:a5:60:16:96:df:33:3f:68:69:b7:48:52:
                    79:c8:c6:18:19:53:db:49:16:34:bb:63:35:a3:83:
                    ae:56:70:33:78:75:2b:97:77:5e:82:76:d9:9d:a5:
                    01:d7:c4:e5:67:04:61:75:2d:35:47:ed:f5:3f:18:
                    98:0c:65:21:cc:36:ae:86:fc:76:43:26:0e:7b:86:
                    c5:16:d4:24:75:48:d6:e2:fa:b2:87:5d:13:5e:4a:
                    a5:ba:02:32:0e:57:76:a3:93:9f:af:a9:2e:ae:a4:
                    9b:88:7d:73:c8:a6:0e:b0:eb:d6:7a:0a:21:8d:be:
                    b5:f6:21:d6:2c:d6:3d:10:0b:dd:b5:51:60:bb:79:
                    68:f7:b4:ca:17:4c:2c:38:b4:76:ec:75:10:32:12:
                    4d:17:31:ca:e3:0c:6e:9b:5b:a6:93:9a:d9:2c:94:
                    98:65:99:b6:72:f1:ba:98:6f:a6:00:3f:ba:84:20:
                    be:60:24:f4:74:f7:7f:04:b0:8b:fc:80:7c:d9:70:
                    2e:22:66:01:b6:29:1d:41:1a:e2:70:15:b3:e6:16:
                    52:9a:26:37:d0:71:06:8e:1c:c6:2a:23:ca:57:1a:
                    08:05:b3:60:93:79:70:0b:de:fc:e6:02:4c:64:5e:
                    cc:ba:55:10:b5:a3:b2:7a:2d:9d:3a:ea:1c:bf:0b:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E9:10:45:DC:5B:4F:B9:B6:21:D4:D3:A7:49:03:B2:CD:14:CD:64
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a3230333a3a2f34382d3438203d3e20313939323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:203::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:3c:07:23:04:1f:5b:aa:27:16:9c:dc:0a:f4:30:ff:dc:74:
         21:88:27:1c:d3:52:c6:4d:e6:13:d1:c2:76:a8:32:7a:73:4c:
         12:14:4d:a9:d8:7d:4f:b7:a0:19:71:ba:7f:9c:bf:2e:9a:cd:
         1e:2c:17:44:d8:ce:25:8d:01:80:20:79:c8:16:8d:48:c2:e5:
         92:dc:ce:35:06:14:35:60:78:76:85:f6:e6:92:97:87:9b:5e:
         a3:d2:b5:89:54:6e:44:8d:3f:71:b6:0d:42:4b:99:28:d6:15:
         30:02:09:4b:1f:e7:c0:6b:34:5d:39:e1:66:5b:19:55:86:59:
         e0:b9:32:93:9c:23:bc:a6:11:61:30:bb:ee:52:aa:58:ff:b1:
         c7:f1:26:35:25:98:85:8c:00:2a:50:74:0a:b5:c9:52:3d:ab:
         43:57:4d:ba:15:7e:31:67:f6:62:cf:58:ea:57:d3:9c:17:74:
         e1:f1:03:bb:f4:ae:e9:36:d4:be:4e:2f:87:84:72:e9:5c:69:
         16:26:62:ef:6d:a2:7f:95:c9:ce:85:fc:f4:09:b6:4a:de:06:
         22:4e:fa:27:11:af:99:ec:97:00:e8:89:08:2b:d2:db:b6:1b:
         3c:b0:cf:8b:f2:aa:63:49:3b:43:fd:59:e3:55:78:4e:83:4b:
         e8:c5:2c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:05:43 2024 by rpki-client on console-fra.rpki-client.org