Route Origin Authorization

$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630313a3a2f34382d3438203d3e20313939353138.roa
File:                     323630323a666161353a6630313a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          J/tgmXwTG0jkwPJM+1/ve3sdmcugFa7NhdbUQFS7lQQ=
Subject key identifier:   0F:3A:E8:87:71:DB:A1:8C:EA:C0:25:8D:46:D5:F4:1F:1D:E5:6E:FA
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       491B95F346324F3B90451AC39892E29219327FF0
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630313a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Mon 20 Jan 2025 05:01:52 +0000
ROA not before:           Mon 20 Jan 2025 04:56:52 +0000
ROA not after:            Mon 19 Jan 2026 05:01:52 +0000
asID:                     199518
IP address blocks:        2602:faa5:f01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl
                          rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 23:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:1b:95:f3:46:32:4f:3b:90:45:1a:c3:98:92:e2:92:19:32:7f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Jan 20 04:56:52 2025 GMT
            Not After : Jan 19 05:01:52 2026 GMT
        Subject: CN=0F3AE88771DBA18CEAC0258D46D5F41F1DE56EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7b:17:4b:50:ac:a2:90:06:b4:21:84:6e:6f:
                    cc:d2:88:5a:16:e1:3b:12:12:1f:5d:ad:63:51:e9:
                    10:5e:45:16:d8:8b:ea:0d:59:6f:5b:1d:c7:3e:04:
                    c4:cf:af:f4:5c:39:98:36:c6:c9:20:1a:f0:73:0a:
                    37:ba:8c:c6:0f:93:a1:26:ea:da:c8:e5:f4:08:69:
                    50:9f:ec:cb:bd:16:6e:01:1d:6e:43:23:a5:97:a0:
                    36:9e:a2:0f:65:ab:10:72:0f:c5:b8:10:bd:4c:26:
                    af:96:f7:1f:a9:66:60:74:a7:36:b1:7e:42:ae:77:
                    fa:cd:ac:0f:1a:04:c3:e2:ef:03:75:7f:a8:9a:4c:
                    60:b9:f9:32:eb:ce:ca:48:9b:e0:bd:95:61:79:8e:
                    fb:5a:64:98:b6:49:27:0d:77:4d:20:3e:12:f3:29:
                    64:ec:29:cb:83:f7:bb:7d:9c:79:1e:67:42:f5:59:
                    73:5a:3a:aa:db:3e:e3:48:72:15:40:85:e1:0f:02:
                    cd:6e:61:ca:2c:9c:f2:1e:26:e9:6c:59:d4:00:3d:
                    51:a2:7b:c0:3a:0e:94:4c:bf:f7:96:f3:96:45:57:
                    be:f1:5d:78:da:42:18:cd:9c:a7:f1:23:fb:ec:36:
                    df:f2:a4:33:0e:41:7c:f5:73:e1:4f:5f:c5:2d:6b:
                    0e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3A:E8:87:71:DB:A1:8C:EA:C0:25:8D:46:D5:F4:1F:1D:E5:6E:FA
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630313a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f01::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:88:ba:88:eb:26:fa:b3:a4:3c:74:03:a0:f7:2d:39:72:42:
         73:6b:6d:a0:a5:99:19:5f:68:8d:df:b9:38:22:f3:ae:cd:c2:
         2a:f6:01:27:c7:ed:a2:94:c4:47:ab:24:83:d7:c8:c3:54:d5:
         2f:3d:51:0d:fd:73:0d:f7:af:80:c5:b7:ae:cd:7c:f3:e2:8d:
         b9:eb:34:5b:6e:e4:b8:a1:07:d5:ce:d0:ac:20:3a:e6:a9:24:
         b5:8f:59:5a:f8:47:79:60:be:31:23:38:f1:d9:10:a3:54:ee:
         17:79:d6:eb:a8:fa:1c:3d:45:32:83:d0:aa:cd:69:39:f9:dd:
         39:d4:cd:a8:1f:30:d3:bf:e1:9c:0e:b8:7c:8d:47:32:99:4f:
         70:be:8e:aa:d3:5f:b7:5c:68:e4:7d:d4:a3:60:9b:61:82:00:
         b5:0d:ae:9f:54:29:a1:cd:10:19:3d:3c:3d:89:34:68:43:4f:
         aa:c7:65:dd:aa:b2:06:10:24:b6:64:15:33:cf:1d:42:18:e2:
         4e:4e:8b:9c:68:7a:2e:08:91:0d:eb:23:46:f6:eb:71:8a:e3:
         52:82:36:1d:97:31:55:53:4b:e5:ee:f8:f8:25:63:42:9f:bb:
         6c:9e:b9:81:11:d1:d4:5a:ff:c9:ee:29:64:92:06:f9:1c:2d:
         4a:df:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:51:48 2025 by rpki-client