Route Origin Authorization

$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa
File:                     323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa (raw, json)
Hash identifier:          0kucvBBBX3tG9ACMZwiVhtqgOFJef/45IqHPx2tB8Hs=
Subject key identifier:   AF:92:73:33:40:D5:52:CB:CE:57:E2:E3:FB:7A:D9:7F:EC:90:6B:75
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       38FE3807D4672B7936F03479FEE3B2ED360722C0
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa
Signing time:             Mon 20 Jan 2025 05:01:52 +0000
ROA not before:           Mon 20 Jan 2025 04:56:52 +0000
ROA not after:            Mon 19 Jan 2026 05:01:52 +0000
asID:                     199518
IP address blocks:        2602:faa5:f04::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl
                          rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 23:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:fe:38:07:d4:67:2b:79:36:f0:34:79:fe:e3:b2:ed:36:07:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Jan 20 04:56:52 2025 GMT
            Not After : Jan 19 05:01:52 2026 GMT
        Subject: CN=AF92733340D552CBCE57E2E3FB7AD97FEC906B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:2f:91:f1:80:ad:c8:d8:27:a2:a7:98:62:
                    30:88:4d:9b:1e:25:fa:62:09:ea:56:9a:b3:94:cb:
                    c9:ca:da:3b:d9:85:6e:70:dd:21:cb:ea:30:7d:11:
                    75:14:3b:46:3a:4f:59:ea:d0:94:b4:55:62:7d:e1:
                    25:c0:ca:ec:00:50:c9:6b:4b:c3:75:f1:51:d4:77:
                    c5:6f:41:74:fd:20:06:40:84:46:3d:d8:19:ee:b8:
                    49:0d:50:e5:22:ee:45:e8:b0:84:89:bb:30:85:5a:
                    91:2b:a5:59:76:28:8f:28:5e:fe:8e:ca:cf:c7:60:
                    3a:d8:76:24:78:9f:bc:c0:8e:eb:92:70:2b:64:b6:
                    08:bf:82:da:6d:73:6a:c6:d6:6d:3a:3f:3a:e2:42:
                    88:2a:1e:61:fd:a2:65:fe:ba:4c:ed:c4:f0:c2:ce:
                    e6:66:bd:96:e2:cb:38:b2:c2:84:be:f1:b3:27:50:
                    e9:7a:8e:2f:51:da:d4:ee:70:28:2a:80:b2:be:67:
                    80:07:e6:7e:b2:60:55:c6:16:58:4a:97:ba:9c:18:
                    22:6c:8b:b0:e8:cd:a2:cc:09:75:cf:ee:42:cd:b7:
                    ea:7a:ae:ff:87:08:82:09:72:48:4d:7b:12:e5:65:
                    5e:3d:8e:ca:68:18:6c:62:9d:7c:f7:ad:46:2d:58:
                    3f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:92:73:33:40:D5:52:CB:CE:57:E2:E3:FB:7A:D9:7F:EC:90:6B:75
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6630343a3a2f34382d3438203d3e20313939353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f04::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:f9:9f:53:14:f1:9f:1f:57:f9:2f:2d:ec:e5:8f:cf:2e:b6:
         90:90:90:26:58:14:42:21:dd:ca:1e:6b:40:b4:70:33:79:6c:
         4c:4e:d0:af:6a:f5:d3:5d:d6:57:a7:3a:ac:75:4f:e6:7e:41:
         d3:20:8e:ae:50:79:bb:85:ff:f9:19:54:5a:64:e2:87:15:db:
         5e:70:3b:b8:53:76:c8:13:7c:6d:45:e1:57:8f:77:82:c3:5c:
         9b:c3:c9:53:48:71:c0:cb:f3:b8:66:42:ff:9d:0e:ff:53:e6:
         87:df:c1:4b:25:c8:9b:ad:bd:fd:c2:0c:8f:87:67:e9:58:70:
         75:cd:72:ef:e4:e2:ff:bc:1c:5e:cf:f9:26:5f:b8:3a:42:10:
         e8:af:00:d7:3f:ec:c2:b7:40:7b:fd:c5:07:8e:55:40:d1:f7:
         48:22:92:62:8b:b2:87:a6:ec:03:d7:5c:fa:d2:bf:a0:50:6c:
         61:51:85:1f:31:c8:76:03:b6:ad:85:0b:d3:55:7a:61:ab:49:
         b7:da:de:91:5d:b5:1a:78:9b:af:17:e9:7d:2c:e7:b5:c7:14:
         ee:f1:c4:b9:21:ab:d3:df:a5:30:8d:56:b4:a2:80:6d:af:3c:
         3b:af:d2:69:53:c1:bf:97:21:6c:7c:6f:ae:78:f6:f4:c4:9a:
         bc:51:5f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:41:47 2025 by rpki-client