Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a3435303a3a2f34342d3438203d3e20313939323033.roa
File:                     323630323a666161383a3435303a3a2f34342d3438203d3e20313939323033.roa (raw, json)
Hash identifier:          xrfH9Axd08AUqNQjE+NwXNsxb4GldRXHuPMCJPIxhkg=
Subject key identifier:   46:60:87:69:17:DF:3E:1A:D5:F4:04:4A:AF:1C:44:3D:D6:A5:6C:3A
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       02C05D11DE7CE7ABA9B117C0989FF0028706A5F9
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a3435303a3a2f34342d3438203d3e20313939323033.roa
Signing time:             Tue 13 Feb 2024 08:21:46 +0000
ROA not before:           Tue 13 Feb 2024 08:16:46 +0000
ROA not after:            Tue 11 Feb 2025 08:21:46 +0000
asID:                     199203
IP address blocks:        2602:faa8:450::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl
                          rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c0:5d:11:de:7c:e7:ab:a9:b1:17:c0:98:9f:f0:02:87:06:a5:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Feb 13 08:16:46 2024 GMT
            Not After : Feb 11 08:21:46 2025 GMT
        Subject: CN=4660876917DF3E1AD5F4044AAF1C443DD6A56C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:67:8d:d7:70:61:6f:6f:8c:99:07:61:cf:25:
                    d5:a3:28:8d:25:51:a0:e4:b8:55:80:3a:42:0e:57:
                    b8:4b:44:ec:44:9d:30:19:b6:40:6b:df:9f:f4:8c:
                    8d:79:1d:31:93:40:b9:5e:ce:0a:6e:cd:cb:96:74:
                    1a:60:6a:10:00:7e:d4:9a:cf:ac:f9:90:98:fa:f5:
                    26:40:63:4c:2b:20:e8:bb:2b:db:26:5f:29:99:4d:
                    dd:cc:fb:fb:58:d4:2e:fb:f9:51:1a:83:58:3f:65:
                    25:77:6e:d1:30:ab:6b:5f:d3:37:86:53:dc:73:a3:
                    fb:c3:ae:0f:df:48:c1:3b:44:a8:97:b9:de:12:19:
                    8d:11:f1:eb:00:bc:10:b1:4a:3b:e2:81:b7:0f:78:
                    10:4c:20:2c:c7:b7:e2:f5:1d:85:15:8a:1f:22:89:
                    6d:e4:d3:c4:a2:99:bf:0c:1b:97:07:56:8d:fd:af:
                    d9:6d:77:fb:e2:5f:e8:91:01:d7:08:f9:79:26:83:
                    2d:48:2e:d7:08:73:eb:f8:7f:77:70:3c:e3:68:c3:
                    f8:24:69:20:66:54:39:88:c2:6a:45:0a:b1:a3:90:
                    d7:af:f0:bb:fc:05:c6:68:68:51:20:a6:e8:b8:32:
                    55:c8:bf:4a:74:85:88:23:de:54:64:d6:ea:e4:67:
                    e4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:60:87:69:17:DF:3E:1A:D5:F4:04:4A:AF:1C:44:3D:D6:A5:6C:3A
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a3435303a3a2f34342d3438203d3e20313939323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:450::/44

    Signature Algorithm: sha256WithRSAEncryption
         83:0a:16:7e:a4:81:52:f2:c6:f3:82:73:b4:e5:95:58:7a:0d:
         ba:7a:34:c4:fd:b6:43:35:d4:36:6b:69:9b:fd:69:6b:f6:db:
         54:99:f6:3b:5f:da:65:53:e0:c0:30:4e:31:7f:13:1a:22:24:
         1d:c3:73:58:49:4d:29:66:31:b3:f6:77:8c:23:c9:10:83:b0:
         c3:b7:b5:ed:29:ae:a6:ab:ad:d7:b1:f7:ff:cf:02:31:cd:21:
         1c:c5:69:e4:8c:d2:24:70:eb:a1:2a:9e:ec:0d:18:76:f0:d4:
         dc:6a:3a:b9:03:5a:77:c2:d6:76:09:bf:bc:b2:bb:b9:a6:e3:
         35:0c:f0:b6:ad:24:3b:bf:e6:0d:0c:c9:24:29:3e:a8:f1:af:
         0e:0e:f1:5c:38:6b:5f:e5:d4:02:14:68:48:00:33:59:e6:bc:
         20:5e:33:7b:a7:53:75:84:7c:ee:dc:31:09:95:39:9f:3b:60:
         5f:2c:55:30:35:bd:04:27:7a:05:ed:89:3c:87:45:71:f4:75:
         d8:db:c0:06:2d:6c:e2:6a:ec:52:9b:ec:6d:3b:3f:99:7b:48:
         e9:b1:e7:a0:62:39:df:2a:a0:fd:02:96:2e:60:88:90:5d:4e:
         89:d0:9f:65:c0:0a:a9:bd:a0:82:2c:af:dd:2e:ea:39:c2:8d:
         0c:2d:f7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:30:59 2024 by rpki-client on console-ams.rpki-client.org