Route Origin Authorization

$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a3a2f33322d3332203d3e20323030343534.roa
File:                     323630323a666161353a3a2f33322d3332203d3e20323030343534.roa (raw, json)
Hash identifier:          BKtmlliirKGKbAt31UmLiJZQCZGoqGhYSG4mUc03+wI=
Subject key identifier:   C9:60:7F:E0:F5:64:31:51:C5:88:DA:A2:9C:FD:16:62:1A:E1:A1:22
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       3EC9C204EEA6B883F8C1F0AB843CC40CEDF5C29C
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a3a2f33322d3332203d3e20323030343534.roa
Signing time:             Mon 20 Jan 2025 05:01:51 +0000
ROA not before:           Mon 20 Jan 2025 04:56:51 +0000
ROA not after:            Mon 19 Jan 2026 05:01:51 +0000
asID:                     200454
IP address blocks:        2602:faa5::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl
                          rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 23:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c9:c2:04:ee:a6:b8:83:f8:c1:f0:ab:84:3c:c4:0c:ed:f5:c2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Jan 20 04:56:51 2025 GMT
            Not After : Jan 19 05:01:51 2026 GMT
        Subject: CN=C9607FE0F5643151C588DAA29CFD16621AE1A122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:aa:f0:0e:e9:42:0a:26:d6:91:43:56:1a:9a:
                    3f:0a:52:0c:1d:03:33:8a:ed:b6:c9:e8:c9:27:37:
                    16:cb:22:55:2c:83:91:07:5d:6c:b6:2f:ab:a1:e7:
                    71:9f:ac:66:c4:91:3b:28:a6:a1:c9:57:92:46:56:
                    ae:e5:1c:12:9c:2c:dc:f0:1d:94:18:90:58:65:b5:
                    df:0d:70:9d:d1:c7:c4:b2:72:d0:73:d8:c8:20:b6:
                    a3:e4:8c:03:0e:b4:1b:02:4f:0e:fe:49:54:30:0b:
                    52:13:12:ec:9f:96:19:0b:4a:44:25:cf:63:a7:1a:
                    14:7b:25:86:25:7e:a1:01:e1:b8:ec:aa:99:82:eb:
                    09:41:1f:bc:6f:1a:e9:e5:20:27:54:eb:bc:35:2b:
                    87:84:32:e2:29:58:f9:06:df:fc:a5:ef:26:da:6e:
                    7b:bb:a1:6a:c6:a0:7e:6a:e1:ae:0d:bd:4f:9f:98:
                    82:d6:bf:78:09:f1:46:31:58:84:a7:64:f2:36:a0:
                    9e:58:90:10:bd:13:a8:48:49:38:0b:78:b3:8e:05:
                    58:00:13:d3:ba:4f:6f:cf:d7:79:6a:1e:c4:03:cd:
                    1c:e0:9a:b7:54:33:e6:f8:e5:59:fe:e1:56:5b:f8:
                    fe:3a:b4:de:20:10:16:ff:07:78:37:12:f6:2f:68:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:60:7F:E0:F5:64:31:51:C5:88:DA:A2:9C:FD:16:62:1A:E1:A1:22
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a3a2f33322d3332203d3e20323030343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:5c:f4:60:10:a7:2c:c0:4d:2b:65:d7:13:03:1f:4b:95:81:
         a4:2f:c3:df:80:f5:b8:fc:75:7c:4d:7b:6f:8f:2b:ab:f0:6a:
         4c:29:a7:0e:d9:7a:8c:12:3a:21:02:e3:72:4c:a9:da:fd:77:
         01:c0:1e:38:03:e4:9d:42:15:e1:67:9e:a9:62:e3:6b:77:29:
         1c:ef:0c:14:7a:a8:d6:c5:9b:8c:35:e7:b3:15:34:5a:cd:db:
         4e:27:9b:08:00:f8:1e:e5:5a:bd:d1:0d:ad:c0:11:78:52:76:
         44:2a:b4:02:75:45:cd:5d:48:40:a1:5f:08:56:a5:61:ab:ad:
         cc:e8:55:46:0f:33:08:fb:1f:74:a5:5e:b6:7d:13:2a:ef:21:
         c7:13:d3:e1:09:ec:6d:7b:d0:57:f8:87:a5:da:e2:58:5f:7a:
         d0:55:2b:fb:ab:8a:ff:32:9c:6f:c5:4b:c3:20:5e:f8:ec:fe:
         4b:98:c1:8c:62:b9:cb:5c:6f:a4:e5:e3:08:a5:dc:4e:dc:a0:
         19:7a:e9:6e:56:c5:88:2e:3e:bf:94:7e:cb:76:db:a7:e8:c6:
         1c:dc:ca:bb:95:bf:b2:59:5b:9f:c8:29:41:28:a8:a0:85:8e:
         56:9d:00:42:95:f7:31:dc:d1:08:1a:59:b8:40:aa:90:d4:f8:
         83:e3:f1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:57:57 2025 by rpki-client