Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130633a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130633a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          Dw64Xch0rrYH1JIq8vegHmLjZkB9LY7JCSxYuX69hvY=
Subject key identifier:   81:35:EA:8A:6C:AE:E0:9E:16:B2:D8:47:B4:A7:75:C8:8E:E0:63:52
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       31396D8B8402AB5E6E226E34B052856BC3BDEF5F
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130633a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 17 Jul 2023 19:07:12 +0000
ROA not before:           Mon 17 Jul 2023 19:02:12 +0000
ROA not after:            Mon 15 Jul 2024 19:07:12 +0000
asID:                     29802
IP address blocks:        2602:ff62:10c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:39:6d:8b:84:02:ab:5e:6e:22:6e:34:b0:52:85:6b:c3:bd:ef:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 17 19:02:12 2023 GMT
            Not After : Jul 15 19:07:12 2024 GMT
        Subject: CN=8135EA8A6CAEE09E16B2D847B4A775C88EE06352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cf:ba:59:4e:0d:af:d2:25:f7:3f:25:03:66:
                    53:9f:2b:d3:7f:15:33:28:63:10:32:f6:e6:30:15:
                    3a:6f:7d:85:d4:46:53:ec:17:a0:8f:6f:e1:1d:55:
                    1d:2f:c4:93:89:ea:67:88:cc:72:aa:63:30:29:03:
                    28:7d:fb:c8:40:83:79:1f:fb:c4:bd:1e:52:1e:16:
                    9f:f8:08:46:67:57:0e:a1:31:c5:b1:40:91:c0:30:
                    c8:fb:0a:8d:fb:c2:b6:87:cc:ea:3f:e0:32:46:ec:
                    f0:03:f3:ea:83:1c:6d:66:56:3b:fe:52:43:d1:1c:
                    26:82:ed:54:0b:4a:46:9a:21:7b:cd:27:a2:31:99:
                    73:ee:7e:47:b0:9e:68:9d:c0:0f:76:6a:64:5c:13:
                    8a:27:55:66:c3:9f:9a:05:63:7c:ce:3d:56:26:ac:
                    35:1e:7e:5c:87:0d:cb:45:ab:16:95:be:37:78:2a:
                    d6:39:8b:49:5b:e4:b7:c1:e9:32:5d:45:cc:e1:30:
                    67:08:86:7a:aa:ec:02:4a:a5:32:6b:6b:aa:0b:5f:
                    9d:b0:63:56:2b:1c:95:e3:2d:8c:73:8f:8b:ee:7b:
                    28:08:04:92:23:92:53:3a:1a:66:61:ce:bd:a9:6d:
                    6b:ad:74:34:65:7e:ad:15:f2:11:a9:14:16:fa:52:
                    2e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:35:EA:8A:6C:AE:E0:9E:16:B2:D8:47:B4:A7:75:C8:8E:E0:63:52
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130633a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10c::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:52:35:88:c2:74:fb:fe:b9:ed:7a:99:96:a8:0e:f3:0c:7e:
         73:84:f9:56:2e:17:eb:99:1a:5d:64:d2:25:75:d3:18:5d:70:
         59:ad:49:ba:45:25:c3:9b:20:e3:b0:dc:d4:9b:17:c8:72:5e:
         a4:9a:48:0e:b9:fc:7b:51:2d:14:ec:97:2f:9e:f6:da:74:41:
         7d:e3:e8:d1:e5:39:aa:8d:00:31:bd:c3:f8:21:6d:0a:75:91:
         e7:f6:41:70:25:7b:8b:d1:52:30:e4:ac:cb:69:a6:24:eb:1b:
         2e:ad:75:81:51:5c:d4:d1:90:7b:96:d7:47:e6:66:96:e7:a3:
         50:d3:fb:ea:59:bb:3f:c2:ff:34:cb:b8:99:6e:04:8b:7b:10:
         2a:e6:6b:aa:90:90:3f:91:59:a8:a3:f4:26:dd:07:78:0b:2c:
         78:8a:ae:52:3b:0e:65:6e:f6:9a:ab:9a:7b:cf:f6:2f:96:86:
         9c:7a:30:22:91:76:3d:8a:c5:d4:65:0b:51:5d:cd:97:f6:e8:
         39:32:dd:fe:9a:06:6b:01:6b:54:13:f8:57:2e:d7:ba:d8:51:
         77:48:0a:1d:46:29:01:b4:33:1c:09:c6:74:dd:d5:47:24:ed:
         64:14:fe:2d:55:89:48:25:b4:12:58:0a:e9:21:fe:b3:6d:ca:
         24:09:05:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 20:26:02 2024 by rpki-client on console-fra.rpki-client.org