Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131333a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3131333a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          X7RgpXX7r7bFMqM10frgDy8atHineYtgUb+DMty6U1I=
Subject key identifier:   A7:50:5D:5C:09:67:8E:4B:DC:A4:0A:81:8D:92:A0:A2:B6:90:19:60
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       5E53FAF63868AF2E79C3835DB9987730035B51A1
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131333a3a2f34382d3438203d3e203239383032.roa
Signing time:             Fri 14 Jul 2023 13:58:39 +0000
ROA not before:           Fri 14 Jul 2023 13:53:39 +0000
ROA not after:            Fri 12 Jul 2024 13:58:39 +0000
asID:                     29802
IP address blocks:        2602:ff62:113::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:53:fa:f6:38:68:af:2e:79:c3:83:5d:b9:98:77:30:03:5b:51:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 14 13:53:39 2023 GMT
            Not After : Jul 12 13:58:39 2024 GMT
        Subject: CN=A7505D5C09678E4BDCA40A818D92A0A2B6901960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:42:3b:40:28:38:76:4a:8a:f1:12:33:80:c7:
                    99:8b:33:57:88:a0:1c:83:f6:a6:f9:17:a2:bd:8e:
                    21:3f:f2:04:a1:92:1a:7e:46:6c:7d:d7:fd:90:ce:
                    06:b4:af:ba:5a:b5:d8:8f:ed:2b:99:58:ff:71:14:
                    4e:d6:d4:53:d7:36:67:46:3a:35:3c:3f:86:0c:52:
                    e3:ce:f3:2a:fc:2d:2b:51:0a:b7:84:de:9a:30:e9:
                    5d:d7:86:28:0c:90:01:48:65:ca:b0:8b:ac:5c:f6:
                    67:bc:ee:da:3a:01:1b:20:13:83:34:8e:2a:39:0b:
                    72:c6:a3:bd:ce:e5:ab:6a:62:cf:11:b4:ee:9a:6b:
                    11:7d:95:4b:78:f1:01:4c:0a:03:20:67:56:64:b7:
                    1e:fb:0a:7c:f3:d8:0f:29:0e:5d:23:ad:c6:75:9c:
                    44:81:00:41:b6:f0:14:12:ed:ec:3a:fa:55:2a:99:
                    a3:f6:7e:27:56:76:ab:9d:0d:83:58:bc:63:89:79:
                    b5:81:ad:d7:1b:2a:db:ab:c0:57:5e:7a:39:dc:d8:
                    9d:61:1b:c7:8e:47:09:65:1a:c2:6e:63:35:4c:b7:
                    e4:f9:64:0a:c3:70:0a:f1:4a:69:f4:7e:a8:33:37:
                    cc:c7:3d:1f:81:88:c6:37:e0:37:9a:0a:e3:aa:5e:
                    7d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:50:5D:5C:09:67:8E:4B:DC:A4:0A:81:8D:92:A0:A2:B6:90:19:60
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131333a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:113::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:4e:0b:4f:aa:06:5b:82:c5:7e:7b:88:2f:2e:f7:3e:aa:db:
         34:c0:aa:4b:01:51:b4:cd:c3:21:df:cc:d6:56:7e:dd:9a:e0:
         f8:15:92:93:14:e9:54:96:19:24:bb:b3:f0:84:80:71:9d:3e:
         03:e9:9a:3b:4a:0d:74:7c:a0:28:f8:b2:00:44:63:2d:fc:0b:
         70:e6:4d:a8:e2:63:05:d5:16:ec:48:0a:0d:e4:b8:44:3f:35:
         e0:7a:8c:4a:e2:cd:77:3c:19:b1:40:ab:9e:ef:17:98:90:e8:
         e6:2b:af:42:b9:88:2a:2e:25:fa:1d:c0:88:2a:cd:8a:d4:75:
         e9:25:d1:a7:6a:c0:80:31:d6:86:c4:08:01:b7:e2:c0:b8:09:
         d7:4a:16:7e:57:8e:1f:40:b8:dc:4d:01:e7:b0:bf:ea:d4:6f:
         fa:da:cd:e8:f2:ab:ec:a4:0a:97:0a:f4:ef:60:0a:69:f4:48:
         b2:bd:1c:b4:a7:1f:98:7a:3c:b4:6d:ff:75:5e:69:f9:a6:77:
         e8:43:5d:5b:26:68:d3:cf:86:67:22:95:7b:4d:d2:7c:1b:37:
         88:8e:5b:17:5f:19:cb:a5:87:5d:78:99:6e:a1:73:76:e7:fe:
         44:9e:46:bf:f4:e0:fc:73:1a:86:50:0a:5a:64:7c:60:d0:92:
         c8:29:45:75
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUXlP69jhory55w4NduZh3MANbUaEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjMwNzE0MTM1MzM5WhcNMjQwNzEyMTM1ODM5
WjAzMTEwLwYDVQQDEyhBNzUwNUQ1QzA5Njc4RTRCRENBNDBBODE4RDkyQTBBMkI2
OTAxOTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EI7QCg4dkqK
8RIzgMeZizNXiKAcg/am+ReivY4hP/IEoZIafkZsfdf9kM4GtK+6WrXYj+0rmVj/
cRRO1tRT1zZnRjo1PD+GDFLjzvMq/C0rUQq3hN6aMOld14YoDJABSGXKsIusXPZn
vO7aOgEbIBODNI4qOQtyxqO9zuWramLPEbTummsRfZVLePEBTAoDIGdWZLce+wp8
89gPKQ5dI63GdZxEgQBBtvAUEu3sOvpVKpmj9n4nVnarnQ2DWLxjiXm1ga3XGyrb
q8BXXno53NidYRvHjkcJZRrCbmM1TLfk+WQKw3AK8Upp9H6oMzfMxz0fgYjGN+A3
mgrjql59ywIDAQABo4ICuzCCArcwHQYDVR0OBBYEFKdQXVwJZ45L3KQKgY2SoKK2
kBlgMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMTMzM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBEzANBgkq
hkiG9w0BAQsFAAOCAQEAE04LT6oGW4LFfnuILy73PqrbNMCqSwFRtM3DId/M1lZ+
3Zrg+BWSkxTpVJYZJLuz8ISAcZ0+A+maO0oNdHygKPiyAERjLfwLcOZNqOJjBdUW
7EgKDeS4RD814HqMSuLNdzwZsUCrnu8XmJDo5iuvQrmIKi4l+h3AiCrNitR16SXR
p2rAgDHWhsQIAbfiwLgJ10oWfleOH0C43E0B57C/6tRv+trN6PKr7KQKlwr072AK
afRIsr0ctKcfmHo8tG3/dV5p+aZ36ENdWyZo08+GZyKVe03SfBs3iI5bF18Zy6WH
XXiZbqFzduf+RJ5Gv/Tg/HMahlAKWmR8YNCSyClFdQ==
-----END CERTIFICATE-----
Generated at Mon Apr 29 20:26:03 2024 by rpki-client on console-fra.rpki-client.org