Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/aci/1/323630323a666235353a3a2f33362d3438203d3e2031303031.roa
File:                     323630323a666235353a3a2f33362d3438203d3e2031303031.roa (raw, json)
Hash identifier:          YHE5juILGcXmvEbsHkjOWPNwOPk4cYDIWZUneodgsXQ=
Subject key identifier:   18:2F:A5:97:88:F5:AA:D8:31:79:61:E9:83:D5:1A:28:DB:B6:7A:3E
Certificate issuer:       /CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144
Certificate serial:       0414CF5CAAE4396B989CEE063E512D18003BBE6A
Authority key identifier: 04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer
Subject info access:      rsync://rsync.rp.ki/repo/aci/1/323630323a666235353a3a2f33362d3438203d3e2031303031.roa
Signing time:             Sun 03 Nov 2024 22:30:18 +0000
ROA not before:           Sun 03 Nov 2024 22:25:18 +0000
ROA not after:            Sun 02 Nov 2025 22:30:18 +0000
asID:                     1001
IP address blocks:        2602:fb55::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl
                          rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/8a177cd6-d91e-4c15-992e-7337b8e894a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 04:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:14:cf:5c:aa:e4:39:6b:98:9c:ee:06:3e:51:2d:18:00:3b:be:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144
        Validity
            Not Before: Nov  3 22:25:18 2024 GMT
            Not After : Nov  2 22:30:18 2025 GMT
        Subject: CN=182FA59788F5AAD8317961E983D51A28DBB67A3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f8:cc:cc:46:6d:6e:85:97:28:6d:79:72:1d:
                    36:ec:3e:e1:b7:fc:86:ab:69:d1:e9:6f:79:3b:47:
                    3f:46:64:48:a9:0d:e7:f0:d4:a5:af:c0:88:4c:fe:
                    e7:be:b8:78:03:2f:fa:ac:05:02:8c:c3:76:20:34:
                    72:2e:af:1c:1e:81:23:d7:05:68:3c:fe:82:c6:9e:
                    28:db:38:8b:d3:84:b4:dd:4e:85:55:e0:19:94:2d:
                    b5:dc:be:21:0b:cc:82:a4:e4:6e:6b:c2:42:d8:7a:
                    31:d1:05:3f:54:3e:ad:b4:1a:21:8b:3f:7a:4d:e6:
                    30:12:8f:2c:b4:89:32:c1:e7:57:19:b6:30:2a:d4:
                    bf:bd:a9:84:91:a2:df:5f:64:69:2d:49:a6:e6:3b:
                    86:60:4d:6e:af:18:c7:9a:af:c7:68:f7:e1:85:42:
                    a4:ee:fb:9e:f0:f1:4e:28:b0:a4:7b:4f:08:13:a8:
                    a7:02:2b:9d:eb:7c:ce:ca:ff:ef:9f:0d:eb:6f:f0:
                    55:e3:fa:ae:55:c6:7f:36:5f:4c:39:c5:a4:fa:4a:
                    b7:18:a5:c6:81:f1:4a:5e:bd:db:ef:6e:48:ff:83:
                    b7:58:c0:39:67:2d:8d:30:13:42:c7:78:d8:c2:93:
                    b7:9f:47:dc:6e:fe:03:31:8f:3e:f8:56:65:cd:0d:
                    69:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2F:A5:97:88:F5:AA:D8:31:79:61:E9:83:D5:1A:28:DB:B6:7A:3E
            X509v3 Authority Key Identifier:
                keyid:04:C3:A5:EF:44:0A:79:31:A7:BB:6D:C0:A0:82:11:C4:90:E2:09:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/aci/1/04C3A5EF440A7931A7BB6DC0A08211C490E209E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8a177cd6-d91e-4c15-992e-7337b8e894a8/446cfa381c716d6a769d01644b1fed7d0df32d3f3a5de26144.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/aci/1/323630323a666235353a3a2f33362d3438203d3e2031303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb55::/36

    Signature Algorithm: sha256WithRSAEncryption
         0e:8e:66:05:3e:5b:ad:29:fb:4a:d4:8e:6e:70:6b:b6:d5:1f:
         cf:8a:d6:a7:9b:fa:bb:c3:17:02:80:76:8c:59:d8:54:8a:d8:
         d9:32:43:40:3c:2a:91:47:e8:71:ba:af:57:fd:4f:b2:d8:0e:
         de:16:7e:47:47:dc:e2:cd:e1:03:00:58:3c:2a:c4:aa:9b:de:
         15:7c:54:32:00:f7:73:5b:cb:a4:a1:0a:f7:1c:4d:b6:8d:5e:
         9d:bb:d8:bb:d1:e6:c7:6f:02:25:23:f2:df:82:b8:2d:6e:59:
         95:4d:af:ee:78:d3:f9:ee:2e:b8:fb:b0:91:8e:3e:c0:e8:c8:
         4a:7e:d4:ec:2d:9c:87:24:13:9a:c0:34:f1:9c:18:01:3e:d2:
         f1:67:16:5a:b5:27:1d:f9:e2:5a:f1:0d:9a:37:93:3c:1d:94:
         5a:90:d1:71:e1:08:df:81:5a:da:7d:11:91:8c:87:0e:c8:3b:
         f1:dc:5b:9f:1f:38:b3:9e:22:34:88:6d:d5:73:8e:57:68:85:
         60:1d:91:cd:20:90:52:f4:36:68:d0:83:7b:54:72:a1:eb:3d:
         61:a8:4c:27:ce:32:94:0e:f6:9d:5a:d8:be:9d:2a:a5:cb:c7:
         87:06:11:08:6e:97:92:40:ac:36:e0:e2:78:4c:84:db:50:c7:
         06:20:d5:3c
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUBBTPXKrkOWuYnO4GPlEtGAA7vmowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDQ2Y2ZhMzgxYzcxNmQ2YTc2OWQwMTY0NGIxZmVkN2Qw
ZGYzMmQzZjNhNWRlMjYxNDQwHhcNMjQxMTAzMjIyNTE4WhcNMjUxMTAyMjIzMDE4
WjAzMTEwLwYDVQQDEygxODJGQTU5Nzg4RjVBQUQ4MzE3OTYxRTk4M0Q1MUEyOERC
QjY3QTNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/jMzEZtboWX
KG15ch027D7ht/yGq2nR6W95O0c/RmRIqQ3n8NSlr8CITP7nvrh4Ay/6rAUCjMN2
IDRyLq8cHoEj1wVoPP6Cxp4o2ziL04S03U6FVeAZlC213L4hC8yCpORua8JC2Hox
0QU/VD6ttBohiz96TeYwEo8stIkywedXGbYwKtS/vamEkaLfX2RpLUmm5juGYE1u
rxjHmq/HaPfhhUKk7vue8PFOKLCke08IE6inAiud63zOyv/vnw3rb/BV4/quVcZ/
Nl9MOcWk+kq3GKXGgfFKXr3b725I/4O3WMA5Zy2NMBNCx3jYwpO3n0fcbv4DMY8+
+FZlzQ1pfQIDAQABo4ICWDCCAlQwHQYDVR0OBBYEFBgvpZeI9arYMXlh6YPVGijb
tno+MB8GA1UdIwQYMBaAFATDpe9ECnkxp7ttwKCCEcSQ4gnjMA4GA1UdDwEB/wQE
AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3JzeW5jLnJwLmtpL3JlcG8v
YWNpLzEvMDRDM0E1RUY0NDBBNzkzMUE3QkI2REMwQTA4MjExQzQ5MEUyMDlFMy5j
cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr
aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh
LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYt
OTJkZDQ5ZWYzMjIzLzhhMTc3Y2Q2LWQ5MWUtNGMxNS05OTJlLTczMzdiOGU4OTRh
OC80NDZjZmEzODFjNzE2ZDZhNzY5ZDAxNjQ0YjFmZWQ3ZDBkZjMyZDNmM2E1ZGUy
NjE0NC5jZXIwcQYIKwYBBQUHAQsEZTBjMGEGCCsGAQUFBzALhlVyc3luYzovL3Jz
eW5jLnJwLmtpL3JlcG8vYWNpLzEvMzIzNjMwMzIzYTY2NjIzNTM1M2EzYTJmMzMz
NjJkMzQzODIwM2QzZTIwMzEzMDMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQmAvtVADANBgkqhkiG
9w0BAQsFAAOCAQEADo5mBT5brSn7StSObnBrttUfz4rWp5v6u8MXAoB2jFnYVIrY
2TJDQDwqkUfocbqvV/1PstgO3hZ+R0fc4s3hAwBYPCrEqpveFXxUMgD3c1vLpKEK
9xxNto1enbvYu9Hmx28CJSPy34K4LW5ZlU2v7njT+e4uuPuwkY4+wOjISn7U7C2c
hyQTmsA08ZwYAT7S8WcWWrUnHfniWvENmjeTPB2UWpDRceEI34Fa2n0RkYyHDsg7
8dxbnx84s54iNIht1XOOV2iFYB2RzSCQUvQ2aNCDe1Ryoes9YahMJ84ylA72nVrY
vp0qpcvHhwYRCG6XkkCsNuDieEyE21DHBiDVPA==
Generated at Mon Nov 25 04:49:05 2024 by rpki-client on console-ams.rpki-client.org