Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130333a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130333a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          P7Fw5oQ2CufxtprXkUYkOOKHPBU7bbn24w1CtmdAR/w=
Subject key identifier:   6B:FD:FC:8B:FF:C7:99:36:F3:98:67:69:AB:9C:EA:1D:5E:98:83:33
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       14CE9A144073F1AF04601FADADA66BEA9518C68C
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130333a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 17 Jul 2023 19:06:03 +0000
ROA not before:           Mon 17 Jul 2023 19:01:03 +0000
ROA not after:            Mon 15 Jul 2024 19:06:03 +0000
asID:                     29802
IP address blocks:        2602:ff62:103::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 15:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ce:9a:14:40:73:f1:af:04:60:1f:ad:ad:a6:6b:ea:95:18:c6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 17 19:01:03 2023 GMT
            Not After : Jul 15 19:06:03 2024 GMT
        Subject: CN=6BFDFC8BFFC79936F3986769AB9CEA1D5E988333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:fb:a8:34:f9:9a:f9:6e:4c:29:63:2b:9c:
                    5f:79:92:ad:15:9a:e6:ca:db:46:5f:f3:a2:3c:af:
                    47:59:b1:33:1c:08:e3:01:9d:ad:61:84:14:02:57:
                    da:a8:d4:5d:d8:51:3b:93:07:9f:76:d0:2b:09:17:
                    80:6c:4f:da:bb:41:5f:35:ab:f8:3f:07:c0:05:b9:
                    1b:c8:c2:74:c8:62:48:84:a0:0a:a8:5c:c2:2f:fa:
                    3d:e5:4b:60:eb:bc:64:0c:ee:f2:b6:d2:5e:ce:e3:
                    ef:66:0c:a8:d5:b9:0c:82:8f:a5:01:51:2d:e8:83:
                    24:c2:99:22:05:5a:46:ce:7e:ab:3c:96:69:43:1b:
                    bf:01:f1:9b:89:2c:28:de:f5:bd:f4:5c:df:3f:cf:
                    40:b2:3d:18:96:10:e3:95:8a:d3:87:2c:99:af:48:
                    65:d9:37:f6:22:a7:ed:0a:44:cf:8a:3b:67:cc:7b:
                    0a:7e:2f:d5:07:93:8e:a2:43:50:fa:5a:cf:70:13:
                    9f:29:3d:af:1e:7c:ed:af:cb:2a:73:02:eb:93:8b:
                    50:3e:6e:d8:0b:8e:2f:c3:c4:d5:c8:2d:22:f0:1a:
                    f5:47:c9:7e:1c:c8:42:30:1f:d6:a4:c0:a3:1f:49:
                    14:51:d4:57:e3:b3:09:cc:32:f5:4f:ef:ba:2c:39:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FD:FC:8B:FF:C7:99:36:F3:98:67:69:AB:9C:EA:1D:5E:98:83:33
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130333a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:103::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:08:10:6b:97:1f:7f:62:f0:7a:97:5e:aa:28:d6:5f:b8:65:
         15:ef:89:3e:d0:ea:05:bb:7b:06:3f:af:04:5f:be:dd:a8:5e:
         25:3c:18:c7:5c:29:14:21:3c:88:4b:a8:a9:ae:90:f8:95:a3:
         e8:68:c7:b0:34:a9:23:de:56:74:8b:58:3b:ef:15:5a:7e:52:
         bb:92:18:9c:1c:ae:a0:bd:6b:7f:be:0b:18:fe:8c:8c:68:c7:
         d1:ee:cc:cd:9b:9b:84:bb:1b:2a:1a:d4:8e:d7:fe:4b:7e:bc:
         1c:a7:c5:ed:50:19:ad:45:1e:4a:d7:9f:08:3d:34:b1:32:ea:
         3b:ac:e9:c2:7a:98:ab:3c:72:e7:62:21:8a:7c:09:fd:67:9f:
         e6:aa:81:d2:53:3c:dc:df:4d:5f:c4:b0:24:03:49:ed:05:df:
         ee:c4:f9:c0:88:75:75:4b:5e:ec:d0:67:61:1f:78:6e:a2:86:
         91:c2:0d:30:49:f0:6d:1e:5a:e6:ce:95:fe:70:86:24:14:cb:
         1f:74:a1:51:51:b9:58:db:ab:14:01:88:fd:ef:24:0d:68:4e:
         c1:1a:21:bb:c0:53:f6:fa:23:b8:f6:ba:38:62:cd:4c:3e:57:
         8a:89:ae:33:b4:99:e8:82:36:94:bb:58:eb:5f:dc:c8:95:ee:
         85:48:46:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 15:51:11 2024 by rpki-client on console-fra.rpki-client.org