Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130613a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130613a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          ZEXbBIK6QC0YFj4pSZfSz7UkM6rtPdHpm0q6c7VXvXk=
Subject key identifier:   24:32:B1:73:35:97:7B:9C:2D:C8:CA:D2:DB:CB:A6:61:8C:13:7E:26
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       0B44EB7299E4C318DB565650AA516B32E027E13B
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130613a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 17 Jul 2023 19:06:53 +0000
ROA not before:           Mon 17 Jul 2023 19:01:53 +0000
ROA not after:            Mon 15 Jul 2024 19:06:53 +0000
asID:                     29802
IP address blocks:        2602:ff62:10a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 15:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:44:eb:72:99:e4:c3:18:db:56:56:50:aa:51:6b:32:e0:27:e1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 17 19:01:53 2023 GMT
            Not After : Jul 15 19:06:53 2024 GMT
        Subject: CN=2432B17335977B9C2DC8CAD2DBCBA6618C137E26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:b5:91:6b:00:e9:39:df:37:04:bc:8a:9e:
                    ba:d7:2d:ce:48:42:43:cf:55:45:52:2d:1b:dd:c5:
                    39:30:7a:c9:49:5c:6c:47:f6:26:d0:5d:98:e1:83:
                    5b:03:ec:c6:9b:55:f8:72:b4:91:25:01:09:9b:a5:
                    27:20:06:fc:81:35:15:cf:fc:9b:0f:0f:39:71:3c:
                    47:a1:3b:b0:8a:d6:4c:2f:84:d7:91:68:f6:b2:3e:
                    34:cd:fd:e9:40:19:41:26:c3:20:91:3c:a9:6a:2d:
                    d3:9c:ef:d3:c2:ab:a3:40:99:ac:6c:7a:69:e8:c8:
                    ae:80:54:00:bf:1e:3f:d0:ed:77:c6:a5:fd:35:a4:
                    bc:74:44:0b:e2:4d:10:7b:ab:48:2e:a9:74:34:ef:
                    b6:d4:5f:3d:d0:56:81:56:72:aa:64:57:67:33:b1:
                    77:86:78:38:93:63:2b:b2:0e:ef:71:cc:28:ae:1d:
                    10:a9:27:68:21:65:2f:85:31:10:fd:73:fb:cb:61:
                    ff:fc:61:88:e2:df:99:7b:2e:68:73:1b:51:c2:41:
                    59:a8:84:e3:15:34:ec:1d:ad:05:8d:ff:6a:5a:a0:
                    05:04:f2:3d:36:ba:ca:07:e2:ef:78:87:2c:8d:e3:
                    09:5f:9c:04:0f:49:2a:e1:18:8a:5c:a3:c7:c8:53:
                    c6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:32:B1:73:35:97:7B:9C:2D:C8:CA:D2:DB:CB:A6:61:8C:13:7E:26
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130613a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10a::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:2b:ec:ac:2d:f8:fb:17:89:9b:6b:7e:9e:43:7a:8e:eb:1b:
         8b:ff:8c:c4:9e:39:2c:2c:60:6c:a5:47:ec:33:f8:4b:87:cf:
         8b:1f:f5:a9:d4:b2:22:bc:e2:ce:8b:08:dc:b5:4c:a1:e1:d3:
         56:1b:ad:43:62:b4:bf:34:2e:12:ff:39:eb:bb:f7:c3:6f:93:
         05:90:a7:29:e8:de:e0:cb:e3:5f:e0:38:a8:b4:1e:23:7c:67:
         74:a1:2a:da:f4:88:49:45:5d:77:c1:75:9a:72:63:7c:29:db:
         a2:fd:e5:bd:04:03:dd:0f:fa:5a:2c:5b:c0:39:52:52:95:d9:
         a9:1e:86:0a:ee:03:4c:33:6d:d0:48:b4:cd:42:48:60:cf:fb:
         c0:25:c5:0f:8f:48:d6:8c:82:e7:8b:be:d7:ea:21:b5:2d:61:
         02:ab:7f:6b:c5:c1:57:43:d2:05:e8:3a:22:3c:9d:d3:92:70:
         83:20:06:e9:21:82:4f:04:4f:dd:a1:6f:33:af:3a:36:58:a7:
         85:3c:33:d2:6b:26:f0:d4:eb:56:43:8b:fd:2f:5d:a8:69:1e:
         14:c3:ae:96:05:d3:f2:b8:60:db:d1:b3:11:0a:1e:e8:d8:3d:
         1b:4b:f2:bb:0f:61:23:6b:a1:28:e7:6d:c0:97:2f:48:49:51:
         c6:01:4b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 15:51:11 2024 by rpki-client on console-fra.rpki-client.org