Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131343a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3131343a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          0Zr2J0FohjyvpA6Eo5GYVl4H3tk675eQ7qUCsLBBDag=
Subject key identifier:   7C:FE:D0:5F:1E:13:4E:B2:8E:ED:4D:28:B2:E2:51:49:A2:B5:D7:02
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       539F983FE3114C8CE93D3073CFB83571DD2704F1
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131343a3a2f34382d3438203d3e203239383032.roa
Signing time:             Fri 14 Jul 2023 13:59:14 +0000
ROA not before:           Fri 14 Jul 2023 13:54:14 +0000
ROA not after:            Fri 12 Jul 2024 13:59:14 +0000
asID:                     29802
IP address blocks:        2602:ff62:114::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 15:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9f:98:3f:e3:11:4c:8c:e9:3d:30:73:cf:b8:35:71:dd:27:04:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 14 13:54:14 2023 GMT
            Not After : Jul 12 13:59:14 2024 GMT
        Subject: CN=7CFED05F1E134EB28EED4D28B2E25149A2B5D702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5f:31:a2:e8:e0:a9:e4:57:7c:50:de:fa:7a:
                    da:95:fe:55:3b:05:f6:94:0e:72:21:e9:58:29:3e:
                    85:06:e8:f6:fd:42:95:5c:54:8b:a5:c8:86:cb:5e:
                    fa:aa:65:89:3c:08:3c:97:07:5b:10:26:46:93:41:
                    39:6e:60:bd:d9:5a:b9:be:f8:01:1e:f9:64:fa:05:
                    2f:32:58:53:63:e1:29:1d:70:94:89:dd:28:de:c1:
                    4e:d5:e1:44:ac:0c:5e:34:9c:00:bf:db:d3:6d:a9:
                    3c:25:b1:8c:e9:c4:76:0a:0c:d2:89:bc:a2:74:d0:
                    3a:b9:ff:55:ab:83:4b:7a:f8:77:52:f1:7f:d1:3d:
                    38:21:2c:3d:65:4c:a2:f2:84:08:cc:1c:4b:1c:18:
                    84:04:9c:13:8a:74:26:97:1e:5b:19:db:99:cf:c2:
                    97:d0:ee:ad:62:0b:1d:c0:a3:77:93:c6:f6:f5:95:
                    c6:90:ff:d3:b4:90:09:30:b5:64:10:32:d1:fb:dd:
                    20:1b:40:d6:4e:13:7d:c0:ec:ad:26:01:b3:8c:84:
                    80:d7:e3:df:14:b8:76:37:73:25:6f:c7:d8:81:05:
                    b5:94:3d:d8:02:95:a4:cf:7b:94:af:27:22:e7:be:
                    50:ee:ad:64:7f:6b:15:48:96:5d:9b:c2:70:20:f1:
                    62:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FE:D0:5F:1E:13:4E:B2:8E:ED:4D:28:B2:E2:51:49:A2:B5:D7:02
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131343a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:114::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:94:38:d1:82:20:bd:fd:68:c7:86:ab:5d:e2:19:ef:db:15:
         cc:3d:e9:ee:cd:78:ec:c7:ff:d6:b8:f8:d6:ea:93:b7:6e:77:
         6b:29:28:37:50:46:47:0d:9d:b0:04:c0:de:7f:de:7f:63:73:
         1b:cf:21:fb:d0:4b:f9:be:e5:0e:d7:b4:ee:e2:7c:8a:b0:71:
         c4:b2:e6:c1:83:38:c4:3e:10:5f:28:28:e5:fd:ba:5b:e8:1a:
         c2:97:f8:f2:56:47:f1:2b:0a:3a:f3:de:cd:ca:e7:71:7e:f3:
         50:19:a6:e4:24:56:6d:18:ee:e1:a1:15:67:b5:7a:59:ec:81:
         a8:76:0f:42:72:c0:10:c0:72:7c:bd:e1:60:0e:bc:c4:bf:9e:
         db:d8:f1:98:b0:ed:5c:cd:9b:dd:d3:a4:a8:cf:76:c3:19:7b:
         d3:d2:da:55:1c:a5:48:44:e4:aa:ad:cb:e1:cd:21:d4:12:b3:
         af:38:a7:7a:0b:37:6b:c9:ba:a3:83:dd:ed:99:c3:1a:7f:dd:
         53:bb:37:25:fb:b3:08:83:fb:f5:06:23:14:8c:ec:0a:3d:20:
         c2:98:fa:84:89:c4:ca:a2:ac:bf:d3:f7:48:45:3b:ad:9a:e5:
         af:51:a0:c2:03:5c:f5:f0:84:3b:49:38:fc:e2:22:76:2a:30:
         e9:28:56:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 15:51:11 2024 by rpki-client on console-fra.rpki-client.org