Route Origin Authorization

$ rpki-client -vvf rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6631313a3a2f34382d3438203d3e20323134343739.roa
File:                     323630323a666161353a6631313a3a2f34382d3438203d3e20323134343739.roa (raw, json)
Hash identifier:          Hm2u4ZYa30GebATRwhybq4NAqG4WB2lH9Ts81qUpg5k=
Subject key identifier:   95:B8:FE:40:1C:3D:8E:C1:9F:C5:D5:32:AD:AE:28:A8:7C:43:AE:12
Certificate issuer:       /CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
Certificate serial:       7E04EFF1126A79DDF39399DAA5FE79EB7253F07A
Authority key identifier: A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
Subject info access:      rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6631313a3a2f34382d3438203d3e20323134343739.roa
Signing time:             Mon 20 Jan 2025 05:01:53 +0000
ROA not before:           Mon 20 Jan 2025 04:56:53 +0000
ROA not after:            Mon 19 Jan 2026 05:01:53 +0000
asID:                     214479
IP address blocks:        2602:faa5:f11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl
                          rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/26ce408d-5581-483d-90b3-5119fc830064.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 23:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:04:ef:f1:12:6a:79:dd:f3:93:99:da:a5:fe:79:eb:72:53:f0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01286d5411b53f893a4a569df9d6d933d29a653abdb8108643
        Validity
            Not Before: Jan 20 04:56:53 2025 GMT
            Not After : Jan 19 05:01:53 2026 GMT
        Subject: CN=95B8FE401C3D8EC19FC5D532ADAE28A87C43AE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:63:ed:fb:d3:43:db:2a:15:83:40:d2:25:10:
                    62:6b:37:bf:83:51:56:5c:b6:f0:9a:06:aa:5d:02:
                    e1:d7:4a:08:64:c1:23:b0:75:2b:c0:87:4c:f0:ee:
                    03:fd:32:fb:f5:77:d2:4c:c0:29:48:ae:2a:60:45:
                    c1:57:8a:fa:f7:f7:d8:22:4f:4c:7e:da:4c:29:80:
                    79:53:59:aa:6b:ab:35:c2:6e:db:5a:1d:bc:55:25:
                    4d:da:34:eb:61:3e:41:ac:24:3d:5f:52:f9:c7:a5:
                    f1:67:59:b0:f1:ea:da:a3:bf:06:f9:c1:e9:b2:67:
                    91:c0:46:d4:18:ae:d4:b2:e4:4d:3f:74:f3:9d:0a:
                    59:2e:35:01:04:dd:59:74:21:7f:08:ab:48:56:b5:
                    80:4a:0d:b4:ba:09:6a:18:92:89:a6:c8:96:e6:b1:
                    fd:8e:db:f4:7b:87:02:11:f5:a7:be:a6:2e:85:d2:
                    22:f0:0d:cd:01:46:9b:5b:a0:a8:83:5a:47:2f:f8:
                    98:8e:da:b8:a2:a8:36:d3:49:7f:0a:d0:17:68:b9:
                    7c:e9:4a:03:13:e2:33:74:99:34:6c:1b:80:cd:14:
                    f6:6e:82:b1:94:79:2e:78:ec:7a:a1:c2:c5:82:9b:
                    6a:65:af:b1:3e:cf:17:97:04:ae:93:8d:42:7d:e5:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B8:FE:40:1C:3D:8E:C1:9F:C5:D5:32:AD:AE:28:A8:7C:43:AE:12
            X509v3 Authority Key Identifier:
                keyid:A1:56:4C:CE:2E:9C:73:24:D3:18:FC:B4:A0:8A:00:BB:09:F3:B4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/A1564CCE2E9C7324D318FCB4A08A00BB09F3B469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/26ce408d-5581-483d-90b3-5119fc830064/01286d5411b53f893a4a569df9d6d933d29a653abdb8108643.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.leitecastro.com/repo/CASTRO-INTERNET/1/323630323a666161353a6631313a3a2f34382d3438203d3e20323134343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f11::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:16:90:e0:50:fa:d3:f7:64:29:61:e7:0a:5a:d1:20:a7:42:
         29:3d:de:7b:b1:8e:50:6b:c1:d0:60:30:45:0e:68:0f:76:89:
         50:03:49:98:2c:06:5e:fc:43:55:0c:7b:aa:c5:26:2d:03:c6:
         f8:47:1f:b8:f9:0c:69:46:2f:4b:2e:b2:a8:ef:02:71:69:0b:
         51:7c:36:b8:03:a3:d3:c4:ab:15:71:54:fc:f5:29:ab:7f:76:
         a9:a0:46:63:d9:c5:5a:3e:9c:f4:82:14:ef:c1:4a:e2:db:27:
         f2:5c:5c:8f:e9:c8:73:ef:50:3c:72:b5:d8:01:79:15:c9:ca:
         f9:c0:0e:fb:ee:5e:85:93:88:55:27:22:de:1d:47:04:f0:58:
         f9:3c:5b:3f:7f:09:82:82:e2:aa:bb:db:72:92:63:cd:91:ec:
         24:c9:90:95:63:47:87:84:61:65:a6:0a:dd:5f:a4:f1:a6:dc:
         26:6a:06:49:1a:3d:f4:c2:fe:78:19:0d:95:ab:c9:4c:7d:37:
         13:42:52:31:4d:f6:04:3b:e8:27:07:7c:0c:e1:30:8b:03:d5:
         40:7b:5f:c6:89:b3:36:20:27:ec:45:33:1c:a4:be:24:26:f0:
         31:75:ac:84:77:d5:60:6e:11:3c:fe:5c:ed:c4:56:fe:34:de:
         82:be:7a:db
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUfgTv8RJqed3zk5napf5563JT8HowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDEyODZkNTQxMWI1M2Y4OTNhNGE1NjlkZjlkNmQ5MzNk
MjlhNjUzYWJkYjgxMDg2NDMwHhcNMjUwMTIwMDQ1NjUzWhcNMjYwMTE5MDUwMTUz
WjAzMTEwLwYDVQQDEyg5NUI4RkU0MDFDM0Q4RUMxOUZDNUQ1MzJBREFFMjhBODdD
NDNBRTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmPt+9ND2yoV
g0DSJRBiaze/g1FWXLbwmgaqXQLh10oIZMEjsHUrwIdM8O4D/TL79XfSTMApSK4q
YEXBV4r69/fYIk9MftpMKYB5U1mqa6s1wm7bWh28VSVN2jTrYT5BrCQ9X1L5x6Xx
Z1mw8erao78G+cHpsmeRwEbUGK7UsuRNP3TznQpZLjUBBN1ZdCF/CKtIVrWASg20
uglqGJKJpsiW5rH9jtv0e4cCEfWnvqYuhdIi8A3NAUabW6Cog1pHL/iYjtq4oqg2
00l/CtAXaLl86UoDE+IzdJk0bBuAzRT2boKxlHkueOx6ocLFgptqZa+xPs8XlwSu
k41CfeX8KQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFJW4/kAcPY7Bn8XVMq2uKKh8
Q64SMB8GA1UdIwQYMBaAFKFWTM4unHMk0xj8tKCKALsJ87RpMA4GA1UdDwEB/wQE
AwIHgDBxBgNVHR8EajBoMGagZKBihmByc3luYzovL3Jwa2kubGVpdGVjYXN0cm8u
Y29tL3JlcG8vQ0FTVFJPLUlOVEVSTkVULzEvQTE1NjRDQ0UyRTlDNzMyNEQzMThG
Q0I0QTA4QTAwQkIwOUYzQjQ2OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggr
BgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4t
cnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNGFi
N2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQyYTgzMzdkLzI2Y2U0MDhkLTU1ODEt
NDgzZC05MGIzLTUxMTlmYzgzMDA2NC8wMTI4NmQ1NDExYjUzZjg5M2E0YTU2OWRm
OWQ2ZDkzM2QyOWE2NTNhYmRiODEwODY0My5jZXIwgZUGCCsGAQUFBwELBIGIMIGF
MIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLmxlaXRlY2FzdHJvLmNvbS9yZXBv
L0NBU1RSTy1JTlRFUk5FVC8xLzMyMzYzMDMyM2E2NjYxNjEzNTNhNjYzMTMxM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTM0MzQzNzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL6
pQ8RMA0GCSqGSIb3DQEBCwUAA4IBAQAwFpDgUPrT92QpYecKWtEgp0IpPd57sY5Q
a8HQYDBFDmgPdolQA0mYLAZe/ENVDHuqxSYtA8b4Rx+4+QxpRi9LLrKo7wJxaQtR
fDa4A6PTxKsVcVT89Smrf3apoEZj2cVaPpz0ghTvwUri2yfyXFyP6chz71A8crXY
AXkVycr5wA777l6Fk4hVJyLeHUcE8Fj5PFs/fwmCguKqu9tykmPNkewkyZCVY0eH
hGFlpgrdX6TxptwmagZJGj30wv54GQ2Vq8lMfTcTQlIxTfYEO+gnB3wM4TCLA9VA
e1/GibM2ICfsRTMcpL4kJvAxdayEd9VgbhE8/lztxFb+NN6Cvnrb
-----END CERTIFICATE-----
Generated at Wed Feb 5 09:54:18 2025 by rpki-client