Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          P7Th/5uB/qKuZjfRvwxpCw2X/CNbidHcWIda/KWGo1c=
Subject key identifier:   E7:18:59:0D:E3:70:A3:86:15:7F:FF:62:5F:D7:AE:2E:EB:45:7A:5C
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       228F548F93A7670B37656A54812D715458A4031A
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 17 Jul 2023 19:06:23 +0000
ROA not before:           Mon 17 Jul 2023 19:01:23 +0000
ROA not after:            Mon 15 Jul 2024 19:06:23 +0000
asID:                     29802
IP address blocks:        2602:ff62:108::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8f:54:8f:93:a7:67:0b:37:65:6a:54:81:2d:71:54:58:a4:03:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 17 19:01:23 2023 GMT
            Not After : Jul 15 19:06:23 2024 GMT
        Subject: CN=E718590DE370A386157FFF625FD7AE2EEB457A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:04:f3:3f:0d:2f:31:9f:2f:20:5f:b5:9c:33:
                    e2:c0:4b:d4:39:f3:23:7d:15:f8:ec:bb:b5:9f:a9:
                    85:a0:2d:bd:dc:e4:68:c7:a1:cb:8d:10:cc:9f:f5:
                    66:d0:dc:39:f3:1a:6a:78:eb:0f:d9:3d:da:ac:d4:
                    5e:08:25:20:26:cd:25:96:e1:ec:f4:bb:70:a2:a2:
                    59:b6:04:77:d8:fe:a2:08:d0:d1:80:8c:16:f2:f6:
                    d5:6e:3c:e0:b4:28:87:05:4c:07:41:bb:0f:27:c8:
                    80:bd:ba:a3:96:69:4d:bc:f0:5e:a7:2f:8a:6e:7d:
                    f4:5d:31:7c:7b:ab:04:ab:3c:ce:57:89:53:68:e5:
                    0b:e4:1a:2c:6c:72:8f:d2:9f:69:4a:89:09:bb:d3:
                    7f:93:79:b2:d4:42:02:7e:e0:2b:d6:ad:a9:49:28:
                    e6:6a:9d:c9:6f:d1:fb:0c:cc:20:36:3b:57:f6:c5:
                    ef:9f:fd:16:59:af:10:6f:db:3c:ee:09:d1:21:49:
                    c8:9f:20:0e:09:ca:e7:36:a5:fc:90:b8:7b:a9:df:
                    ac:1e:40:db:26:b0:0f:a9:c5:2d:fd:39:d8:04:7a:
                    da:44:f6:84:6d:c1:f0:77:6b:dd:af:1d:16:86:fb:
                    fb:a4:7b:dc:60:c5:d6:36:1a:48:01:fd:be:38:68:
                    bf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:18:59:0D:E3:70:A3:86:15:7F:FF:62:5F:D7:AE:2E:EB:45:7A:5C
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:108::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:39:b0:eb:10:b6:df:15:c5:d8:7c:2b:f1:ec:31:aa:2f:39:
         6e:66:0a:7b:18:ad:c2:57:10:af:42:d8:22:38:e6:c5:2f:cc:
         14:db:74:a1:75:35:c7:33:3b:ec:82:6e:e5:20:08:0f:dd:20:
         57:4a:5b:3c:44:da:38:0f:c7:44:a4:4f:ba:0a:6e:87:86:21:
         cb:c7:b3:a0:ea:a8:05:80:0c:c6:68:0f:46:46:2a:4e:f7:57:
         14:1b:cc:af:1b:97:ef:a2:23:85:a7:63:9e:7e:fd:6d:0a:be:
         9e:6d:05:8c:d2:ec:14:ab:ff:24:87:ac:b8:23:a7:9a:dd:ca:
         79:be:05:d9:fe:5a:0c:f9:c4:51:0e:9b:b5:fd:47:53:68:a5:
         85:4d:c3:a5:2a:ba:96:ed:62:8a:a1:58:7c:86:48:17:e6:26:
         f6:4e:6a:dc:65:ca:09:e6:7b:f1:a0:ee:e9:7f:11:14:89:90:
         07:25:f3:b6:1d:05:22:6f:d7:a6:b2:7a:33:99:e4:0b:11:d6:
         63:30:be:e0:68:ad:35:a3:4f:28:18:e1:b8:e1:03:3b:d7:6f:
         09:1f:56:db:bd:d2:6d:c4:17:b8:e4:cf:1a:fd:50:55:78:ea:
         30:59:50:15:7e:01:f5:43:e5:fb:43:2c:35:56:f9:ba:3c:5e:
         4d:9b:05:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 20:26:02 2024 by rpki-client on console-fra.rpki-client.org