Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131323a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3131323a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          6geqTvVtoUTOTLFIhhrR31gE0Jpq/JTucLy8qvJ2Aqo=
Subject key identifier:   44:17:9E:FB:55:0C:B4:B9:AA:DE:6D:87:66:23:B6:95:6C:85:0A:76
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       3CA7F53F7CC2C05BA71903E9EA9D6E4E2AA292BF
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131323a3a2f34382d3438203d3e203239383032.roa
Signing time:             Fri 14 Jul 2023 13:58:12 +0000
ROA not before:           Fri 14 Jul 2023 13:53:12 +0000
ROA not after:            Fri 12 Jul 2024 13:58:12 +0000
asID:                     29802
IP address blocks:        2602:ff62:112::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:a7:f5:3f:7c:c2:c0:5b:a7:19:03:e9:ea:9d:6e:4e:2a:a2:92:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 14 13:53:12 2023 GMT
            Not After : Jul 12 13:58:12 2024 GMT
        Subject: CN=44179EFB550CB4B9AADE6D876623B6956C850A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:10:6d:f5:74:44:0a:aa:5e:08:e1:12:62:e1:
                    3a:e7:97:d8:ca:d9:01:b6:52:da:a4:ab:c2:39:ba:
                    7c:fc:bf:7a:42:be:23:6e:34:9e:69:4a:8f:7b:b6:
                    5b:48:64:1c:88:92:3d:3b:16:9f:3f:41:76:80:a4:
                    43:d7:59:72:f6:bb:42:c2:28:e2:0c:a5:59:42:a9:
                    a6:9f:eb:a5:af:8a:82:d5:c1:e5:59:ce:12:a8:2d:
                    8c:ef:03:a8:56:84:17:7e:34:3a:2b:00:d8:98:44:
                    db:96:ac:91:70:57:3f:18:26:98:82:bf:a6:42:5b:
                    2a:3e:ce:ff:5e:80:d7:ff:37:0a:5d:e1:3b:2a:66:
                    6b:74:be:27:24:1c:33:2f:ac:84:7a:a6:d2:af:df:
                    9d:3d:c7:26:f7:7a:c5:2c:5f:bb:7c:d3:fa:7d:b6:
                    05:aa:74:78:26:a6:b8:b6:61:52:d2:e8:75:7d:b7:
                    d4:89:55:ba:08:26:27:bc:dd:79:f8:d9:74:8f:32:
                    43:da:7e:9e:e5:1e:fe:a4:dd:92:a9:4b:4b:e7:b0:
                    2f:bf:a8:ca:fd:89:89:01:d4:e8:6f:51:80:13:ad:
                    ca:ee:e9:72:ac:8a:10:7f:fa:c9:cc:78:74:88:8e:
                    bb:e7:2a:c1:8b:a0:e6:0c:24:59:9b:17:04:65:aa:
                    45:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:17:9E:FB:55:0C:B4:B9:AA:DE:6D:87:66:23:B6:95:6C:85:0A:76
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131323a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:112::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:82:c1:d8:42:e6:bf:5f:66:cd:dc:e3:32:60:8f:8f:1e:c7:
         44:3b:d0:17:3b:58:85:51:54:2e:92:6f:59:5b:a0:ae:d9:3f:
         3d:a1:c1:a3:3f:04:16:af:69:6a:1e:6a:76:9f:82:be:d4:a1:
         b8:ca:27:01:3d:ae:6a:5a:47:f9:04:47:2e:8a:33:14:a2:05:
         00:9d:01:c4:b1:11:1e:e5:fb:ad:71:d9:4f:96:40:e9:bc:3c:
         be:43:1b:19:b9:74:a1:af:f4:fb:ae:8b:9c:cd:cd:53:67:e5:
         5b:dc:d2:93:d6:22:43:72:84:65:e1:2c:ab:39:ed:e5:b3:c4:
         2a:92:94:ba:c7:2f:f7:fe:5e:ff:70:24:43:f5:94:d8:99:85:
         1d:69:cf:ad:2a:c1:a3:69:7d:ce:cb:4c:20:74:07:ab:ec:8f:
         93:ea:b9:9e:5f:d9:fd:66:cb:7b:1e:1f:af:65:73:7c:10:01:
         08:33:f7:3c:67:af:18:a5:f2:0e:4d:b2:c5:8c:9f:25:41:38:
         15:39:dc:42:d7:0a:3a:2f:ad:3b:ae:b9:5f:48:a9:c4:bd:9c:
         80:ac:bc:c5:76:3b:a4:f3:f1:31:f2:b3:59:be:d9:56:eb:ae:
         67:28:7e:12:5c:e1:47:e1:0d:54:5a:74:7a:a5:07:1b:2f:1a:
         27:42:77:3b
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUPKf1P3zCwFunGQPp6p1uTiqikr8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjMwNzE0MTM1MzEyWhcNMjQwNzEyMTM1ODEy
WjAzMTEwLwYDVQQDEyg0NDE3OUVGQjU1MENCNEI5QUFERTZEODc2NjIzQjY5NTZD
ODUwQTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BBt9XRECqpe
COESYuE655fYytkBtlLapKvCObp8/L96Qr4jbjSeaUqPe7ZbSGQciJI9OxafP0F2
gKRD11ly9rtCwijiDKVZQqmmn+ulr4qC1cHlWc4SqC2M7wOoVoQXfjQ6KwDYmETb
lqyRcFc/GCaYgr+mQlsqPs7/XoDX/zcKXeE7KmZrdL4nJBwzL6yEeqbSr9+dPccm
93rFLF+7fNP6fbYFqnR4Jqa4tmFS0uh1fbfUiVW6CCYnvN15+Nl0jzJD2n6e5R7+
pN2SqUtL57Avv6jK/YmJAdTob1GAE63K7ulyrIoQf/rJzHh0iI675yrBi6DmDCRZ
mxcEZapF5wIDAQABo4ICuzCCArcwHQYDVR0OBBYEFEQXnvtVDLS5qt5th2YjtpVs
hQp2MB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMTMyM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBEjANBgkq
hkiG9w0BAQsFAAOCAQEASoLB2ELmv19mzdzjMmCPjx7HRDvQFztYhVFULpJvWVug
rtk/PaHBoz8EFq9pah5qdp+CvtShuMonAT2ualpH+QRHLoozFKIFAJ0BxLERHuX7
rXHZT5ZA6bw8vkMbGbl0oa/0+66LnM3NU2flW9zSk9YiQ3KEZeEsqznt5bPEKpKU
uscv9/5e/3AkQ/WU2JmFHWnPrSrBo2l9zstMIHQHq+yPk+q5nl/Z/WbLex4fr2Vz
fBABCDP3PGevGKXyDk2yxYyfJUE4FTncQtcKOi+tO665X0ipxL2cgKy8xXY7pPPx
MfKzWb7ZVuuuZyh+ElzhR+ENVFp0eqUHGy8aJ0J3Ow==
-----END CERTIFICATE-----
Generated at Mon Apr 29 20:26:03 2024 by rpki-client on console-fra.rpki-client.org