Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a623030313a3a2f34382d3438203d3e203137313339.roa
File:                     323630373a666361383a623030313a3a2f34382d3438203d3e203137313339.roa (raw, json)
Hash identifier:          EbRbFK5l3Xnc3KMbOCsqPJgAowRK7H+zi/jadjC1MpU=
Subject key identifier:   97:EA:A1:48:C2:83:38:CC:F4:C0:7A:96:62:CE:2D:7A:00:20:67:E6
Certificate issuer:       /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
Certificate serial:       255D9D573F817CB9101CDE3C1A12D13E45EC00E9
Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a623030313a3a2f34382d3438203d3e203137313339.roa
Signing time:             Thu 16 Jan 2025 12:43:50 +0000
ROA not before:           Thu 16 Jan 2025 12:38:50 +0000
ROA not after:            Thu 15 Jan 2026 12:43:50 +0000
asID:                     17139
IP address blocks:        2607:fca8:b001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5d:9d:57:3f:81:7c:b9:10:1c:de:3c:1a:12:d1:3e:45:ec:00:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e
        Validity
            Not Before: Jan 16 12:38:50 2025 GMT
            Not After : Jan 15 12:43:50 2026 GMT
        Subject: CN=97EAA148C28338CCF4C07A9662CE2D7A002067E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2d:b0:db:36:6e:4b:43:84:b5:8e:4f:86:ee:
                    7c:55:4e:4f:13:5f:f6:29:f7:7f:45:21:81:85:ea:
                    40:f0:55:26:36:de:4e:af:07:91:98:ca:47:9a:04:
                    69:b9:4b:79:26:76:6e:35:24:d0:89:21:ff:65:2f:
                    e8:8d:e6:39:ed:75:1c:9e:49:c2:ea:89:86:e0:86:
                    f0:ba:89:58:e2:09:b0:5b:b2:0c:94:2a:58:14:ae:
                    99:07:52:0c:84:d7:30:6b:d6:6a:7b:f9:9a:b2:2f:
                    cd:a5:b0:26:93:31:67:da:cb:0f:61:46:61:5a:14:
                    f1:41:45:6c:1b:16:01:0c:28:d1:fc:38:66:95:7d:
                    ba:45:a6:76:e9:2f:70:54:15:d1:2b:de:da:f5:30:
                    22:e5:89:4d:8e:34:8c:8c:c1:db:35:25:da:82:b9:
                    59:d8:bf:e3:5d:fe:51:4c:f7:a9:43:dc:c0:a0:e2:
                    98:a5:71:24:97:cf:b2:19:eb:ec:ca:97:f0:43:ca:
                    20:50:7d:32:eb:78:9c:93:41:df:83:9f:b7:10:b3:
                    e4:ea:d6:1b:cc:68:db:8f:41:a2:46:ba:74:bd:3c:
                    f3:f2:83:a7:30:05:78:97:2d:bb:63:02:75:da:f0:
                    87:d3:de:12:2b:91:51:3d:2a:9e:b6:d8:d8:b1:c5:
                    a1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EA:A1:48:C2:83:38:CC:F4:C0:7A:96:62:CE:2D:7A:00:20:67:E6
            X509v3 Authority Key Identifier:
                keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/323630373a666361383a623030313a3a2f34382d3438203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fca8:b001::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:69:57:48:97:c3:d3:cd:24:43:a2:81:1a:3b:f7:80:ce:e1:
         58:35:37:cf:9b:41:9f:21:e8:40:24:ad:fe:a9:8e:dd:e6:3d:
         59:a2:8d:f4:8b:f3:d7:9e:74:e3:82:30:98:c0:31:f9:e2:60:
         7d:f6:57:51:9b:4c:42:20:27:2a:a9:18:58:53:f5:24:46:2e:
         af:6f:82:94:28:11:b0:73:59:76:5d:de:83:7c:ed:ce:d5:fe:
         ff:ce:fe:4e:58:fb:bd:82:de:fb:82:45:41:f5:8b:86:5f:20:
         f3:6a:4d:3a:99:4e:6c:a9:3b:e0:ee:50:14:1b:7c:2f:96:60:
         35:e5:e3:88:45:f0:5f:56:fb:b2:93:fa:5b:08:d6:5c:a1:0e:
         ec:1f:de:7c:cc:6a:6b:cb:d4:0d:22:61:be:90:0a:38:3c:7a:
         5f:ee:51:21:06:8c:32:c6:0d:88:28:e1:9b:8d:05:74:fe:50:
         f6:2d:4b:3e:7b:df:3c:07:53:29:a0:58:87:29:c7:b6:5c:ca:
         d3:bc:15:de:07:5f:f3:60:0e:fb:4b:65:e5:44:90:0b:79:50:
         7f:e3:6d:58:65:99:fe:a4:54:81:6e:2f:1f:3c:7f:f0:9a:8e:
         86:f9:36:0b:1b:01:ed:ac:31:a5:ba:c3:63:59:54:43:e6:c4:
         2f:27:c2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:07:39 2025 by rpki-client