Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131303a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3131303a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          4Ilyu4ueEvdy1hnxyjTANPZGhlX8TR0eJeNMFCm3U0o=
Subject key identifier:   71:A4:70:BA:30:1E:F8:CB:92:83:82:28:88:21:3C:AE:45:1C:52:BD
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       44732D7C7B9B70BF71CCD90F05818E3B21026672
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131303a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 17 Jul 2023 19:07:59 +0000
ROA not before:           Mon 17 Jul 2023 19:02:59 +0000
ROA not after:            Mon 15 Jul 2024 19:07:59 +0000
asID:                     29802
IP address blocks:        2602:ff62:110::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 15:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:73:2d:7c:7b:9b:70:bf:71:cc:d9:0f:05:81:8e:3b:21:02:66:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 17 19:02:59 2023 GMT
            Not After : Jul 15 19:07:59 2024 GMT
        Subject: CN=71A470BA301EF8CB9283822888213CAE451C52BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:98:81:52:76:92:94:29:b1:bf:63:41:2b:98:
                    57:f1:f4:42:62:16:bf:99:4f:de:ab:27:e9:a5:ef:
                    79:c1:5c:2c:86:8a:d7:c5:d9:14:22:da:e1:80:11:
                    d1:1a:6e:2d:99:4b:fa:9d:50:c4:a5:75:92:73:a8:
                    01:d9:f8:83:ee:85:f0:ac:d1:b1:fd:b2:9c:e4:bd:
                    41:f0:37:8e:4a:e0:aa:f1:a9:7f:a1:06:3b:b6:52:
                    4b:ef:b9:9a:6d:12:3b:0b:7d:87:3a:46:03:f5:88:
                    37:b5:ac:7c:d3:60:b1:89:4c:72:c7:51:37:61:e1:
                    2a:32:07:63:71:73:3c:a7:85:87:4e:9c:07:e0:f7:
                    93:0e:f0:3c:6c:1b:e2:ca:c1:13:38:60:d8:e6:54:
                    a6:14:17:39:60:3d:5b:2e:cc:30:13:79:eb:43:81:
                    a1:85:0c:98:8d:90:87:3b:a2:11:5f:89:1d:09:69:
                    bd:ca:1f:fd:12:a6:a9:55:50:7a:06:69:95:d3:6f:
                    14:11:91:e1:7f:3b:ef:9e:8a:5b:ea:00:2e:e8:09:
                    86:d8:b9:d4:74:86:ac:79:0b:d6:8f:a5:90:b5:54:
                    96:67:d6:60:9c:1b:85:36:4c:4d:ab:f8:7f:09:ef:
                    84:88:17:85:d8:f3:ee:22:d5:51:3d:f5:10:e1:08:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A4:70:BA:30:1E:F8:CB:92:83:82:28:88:21:3C:AE:45:1C:52:BD
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131303a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:42:e1:dc:2e:75:b8:c8:3b:57:e4:a9:50:2d:08:16:88:32:
         ca:3a:ee:50:fd:66:02:22:e5:3a:e4:e3:cb:81:22:94:d2:8c:
         c3:61:4a:21:e9:d9:20:47:da:a4:7a:40:63:02:06:57:48:34:
         43:c2:f5:10:df:cd:a5:c5:1c:a1:49:71:17:10:a8:74:9a:56:
         a8:bf:50:a9:43:60:5e:64:e0:48:e2:4a:22:da:2e:ba:60:e7:
         d2:cb:cc:11:21:14:de:43:95:53:c8:77:7c:16:0c:00:81:0a:
         e8:e4:38:82:85:08:0d:e0:d8:ee:19:b4:45:02:17:ac:57:cd:
         26:46:69:bc:e4:fc:29:82:b7:00:fd:d8:b1:42:3d:4e:ba:b7:
         db:12:3b:df:e9:72:2d:ff:aa:71:dd:13:f0:cf:5a:d1:db:1b:
         92:7c:3f:0d:ca:21:e5:38:34:32:79:e1:08:b8:f3:5e:95:cb:
         4c:66:dd:2c:da:0f:91:de:d1:38:bf:ef:b2:10:81:04:62:f2:
         6c:cc:42:c2:de:8f:a2:a7:c7:d8:a9:6a:73:9f:ba:b0:8c:4e:
         d6:a2:f0:03:4e:06:c1:21:72:73:99:0f:9f:61:55:ed:c6:03:
         cf:4d:ee:9f:0e:01:d3:56:84:2e:82:41:42:fe:05:df:37:41:
         88:a3:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 15:51:11 2024 by rpki-client on console-fra.rpki-client.org