Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS202400/0/323630323a666161383a3a2f33362d3438203d3e20323032343030.roa
File:                     323630323a666161383a3a2f33362d3438203d3e20323032343030.roa (raw, json)
Hash identifier:          bUZeHKJuRMZRc25kv2llcesOVbM8jWKlY1YgDIroG4g=
Subject key identifier:   44:9A:E6:CB:58:F2:BD:3C:89:80:B8:CD:81:53:12:E9:AE:DF:51:71
Certificate issuer:       /CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
Certificate serial:       7448014045AD4175D41681745FBCBDE367924FC3
Authority key identifier: B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
Subject info access:      rsync://rpki.co/repo/AS202400/0/323630323a666161383a3a2f33362d3438203d3e20323032343030.roa
Signing time:             Sat 13 Apr 2024 03:14:56 +0000
ROA not before:           Sat 13 Apr 2024 03:09:56 +0000
ROA not after:            Sat 12 Apr 2025 03:14:56 +0000
asID:                     202400
IP address blocks:        2602:faa8::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl
                          rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:48:01:40:45:ad:41:75:d4:16:81:74:5f:bc:bd:e3:67:92:4f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f
        Validity
            Not Before: Apr 13 03:09:56 2024 GMT
            Not After : Apr 12 03:14:56 2025 GMT
        Subject: CN=449AE6CB58F2BD3C8980B8CD815312E9AEDF5171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a0:4a:e7:ad:58:f2:de:06:7e:e4:9a:8e:e0:
                    6f:8f:ab:b2:e7:75:d5:d3:6d:63:97:fc:73:a1:1c:
                    b5:bc:22:f8:cd:7c:d6:31:ef:00:45:7b:7f:67:e7:
                    b9:f4:8b:5f:6a:52:30:04:72:19:0e:fb:c7:7c:26:
                    1a:81:3f:6f:47:14:d4:31:82:ce:b8:fc:bd:90:51:
                    73:34:40:03:94:07:cd:58:6c:a6:59:d8:8c:b5:82:
                    ee:ed:8e:85:e9:61:91:89:5f:f9:db:a8:07:02:d3:
                    ba:6b:2d:0c:af:6c:20:61:86:56:76:af:ed:7a:ac:
                    25:a1:5b:cb:9c:31:01:0d:af:a8:c6:b0:b8:56:a4:
                    6b:63:c3:b6:e3:74:58:22:cc:01:5f:f3:e1:3c:ae:
                    62:a9:fb:1e:18:f5:5c:28:ad:47:20:9c:57:cb:82:
                    3d:3d:5c:47:42:7c:4d:09:d6:88:f9:9b:a0:5a:b8:
                    9a:d3:ef:06:61:5e:e2:b6:cf:53:9b:a2:49:28:9b:
                    82:25:c8:e2:4c:8e:3e:c6:66:a9:88:25:f0:3f:c9:
                    3e:26:cc:9f:ae:5a:f9:47:3e:1c:01:f6:e0:bb:f6:
                    4f:23:6d:de:6d:7b:59:ca:2b:a0:89:2f:6c:dc:24:
                    28:d9:ba:31:8f:9b:e6:f6:46:22:c1:5c:69:b2:93:
                    38:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9A:E6:CB:58:F2:BD:3C:89:80:B8:CD:81:53:12:E9:AE:DF:51:71
            X509v3 Authority Key Identifier:
                keyid:B0:BE:7A:BD:BE:B3:E0:14:7D:08:12:2B:69:9C:47:8C:99:A1:B0:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS202400/0/B0BE7ABDBEB3E0147D08122B699C478C99A1B0FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb9d4d437cf3ac13206067caa11b1798319623f21f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS202400/0/323630323a666161383a3a2f33362d3438203d3e20323032343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8::/36

    Signature Algorithm: sha256WithRSAEncryption
         5d:25:a7:29:da:1b:9d:b1:ed:c9:ea:d2:20:a1:03:b1:cc:7e:
         c2:bf:1d:42:84:1f:65:59:fb:aa:82:b8:e8:d3:3e:7d:7a:ea:
         fb:02:d4:12:44:2a:c7:37:17:fc:98:20:8c:28:45:a5:60:21:
         4d:81:b0:a1:c4:d8:fb:b1:b6:7e:f3:18:f0:38:98:03:d8:b2:
         41:a3:ce:95:01:99:36:0b:2b:95:0c:1d:df:4f:c1:34:d8:86:
         49:ee:55:37:bb:9a:2f:54:32:41:2e:e0:4c:57:bf:64:f3:34:
         12:ec:01:84:04:55:69:8b:0b:a2:bd:74:e3:c7:89:12:90:2f:
         87:f7:38:ac:44:e3:ed:a9:06:93:38:b2:50:5e:a1:f7:04:e7:
         64:bd:c4:a5:a1:33:8a:b2:b9:30:9e:30:03:27:34:23:42:81:
         62:5b:70:ba:3c:e9:4d:52:40:3b:79:6b:8e:41:3f:3d:39:21:
         fb:ef:cd:9f:c8:b5:09:06:1e:a5:58:46:02:ee:64:ad:9d:ae:
         8e:79:85:cd:92:9b:9c:85:12:9c:9c:79:a7:f9:36:a1:25:4a:
         0f:1a:a3:71:b6:cb:e6:15:c6:d1:ec:8f:3f:80:2f:3d:28:f0:
         d4:6e:24:2c:79:e8:0f:3f:84:71:08:18:c4:2a:2f:35:af:dd:
         b6:32:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:58:55 2024 by rpki-client on console-ams.rpki-client.org