Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131353a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3131353a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          AvX33FNd+QdqZE3ZQ4t14iYAfJ5YPAgO4ouVybV8hGA=
Subject key identifier:   70:68:03:32:AE:76:FD:C2:D5:12:9F:8A:27:09:6A:03:AD:4B:8E:EF
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       6AE64209EE468C25FF0045DF20AC38911505848E
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131353a3a2f34382d3438203d3e203239383032.roa
Signing time:             Fri 14 Jul 2023 13:59:36 +0000
ROA not before:           Fri 14 Jul 2023 13:54:36 +0000
ROA not after:            Fri 12 Jul 2024 13:59:36 +0000
asID:                     29802
IP address blocks:        2602:ff62:115::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e6:42:09:ee:46:8c:25:ff:00:45:df:20:ac:38:91:15:05:84:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 14 13:54:36 2023 GMT
            Not After : Jul 12 13:59:36 2024 GMT
        Subject: CN=70680332AE76FDC2D5129F8A27096A03AD4B8EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dc:a4:3f:2a:fe:e1:a1:73:83:c0:1e:db:50:
                    d9:9a:a5:9d:4d:94:2e:9c:f3:74:4d:83:2e:d0:43:
                    08:85:83:0b:f2:3e:52:38:16:c3:c7:6c:c9:fe:fd:
                    d5:6a:ef:07:57:2c:e3:b6:6a:dc:80:d3:47:4f:f7:
                    a2:68:fc:63:c3:8b:3e:f8:00:af:18:d5:20:94:ae:
                    95:8e:c2:f5:3c:b4:6e:25:1e:af:b5:54:ff:0e:67:
                    a8:b5:b6:da:57:90:a3:b9:09:dd:5b:63:33:10:88:
                    59:e2:3b:d0:ff:1f:bb:73:6c:fa:df:52:ff:67:3a:
                    5e:ed:37:35:02:48:cd:d8:b3:fd:ca:e5:41:52:21:
                    c1:00:55:99:2c:d6:33:6c:9b:0e:24:ba:bc:99:78:
                    75:64:81:6a:67:df:f6:d7:f7:1e:b2:78:56:0b:bc:
                    e7:ef:53:e8:60:61:01:6b:5f:34:d0:d2:d6:f3:6e:
                    58:8f:bf:fc:4a:91:5f:57:22:60:75:da:a5:43:bd:
                    a5:06:91:64:85:dc:47:29:bc:94:e9:e8:55:7a:c5:
                    f9:8a:d1:d7:04:27:21:f4:b6:f5:fc:a0:f0:76:fb:
                    98:44:d6:6a:f1:a5:e6:8a:e0:f3:8e:6e:52:21:94:
                    9b:e9:18:61:43:69:c4:6d:61:8f:48:27:f8:96:b8:
                    78:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:68:03:32:AE:76:FD:C2:D5:12:9F:8A:27:09:6A:03:AD:4B:8E:EF
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131353a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:115::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:a0:94:43:19:36:9c:08:b2:25:7c:6c:af:69:f4:dd:e2:cf:
         3d:dc:2e:da:1b:7d:3a:47:b0:e2:68:0e:b2:68:87:0e:41:23:
         8f:57:89:1f:6b:24:cc:b7:40:ba:f3:16:db:d0:48:12:e2:f4:
         61:0a:18:68:f7:a6:ae:64:09:98:5d:4e:f8:9e:bc:1e:71:eb:
         01:22:0c:28:b2:f5:75:e9:33:ff:3c:da:02:57:8a:c1:b9:9d:
         b4:48:77:9a:1c:b3:94:e0:e8:92:a7:16:c8:94:77:04:61:ee:
         b1:78:c7:cf:c1:c0:b6:d3:d4:4c:bb:f9:f1:42:cd:08:56:1c:
         3a:bc:9e:5e:12:af:4f:fb:b7:47:14:9a:3b:62:14:af:84:4c:
         16:dd:73:ef:07:bf:d5:eb:e0:ae:3d:15:01:52:a6:3f:4a:9f:
         66:b6:72:cd:da:dd:61:39:c1:0c:48:4b:ae:ea:27:04:b3:e5:
         29:80:7a:bd:b6:ba:e3:af:28:15:0d:f0:3e:36:b4:29:38:ec:
         45:69:ea:e3:0a:c3:19:2a:c2:ed:9c:10:2d:c4:25:29:07:19:
         db:ca:74:c8:b3:f1:72:4e:50:f6:4c:80:ca:16:75:a7:d1:e6:
         63:16:2b:67:12:fd:13:55:b8:27:66:7c:88:e6:a8:fa:dc:12:
         00:53:ed:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 20:26:03 2024 by rpki-client on console-fra.rpki-client.org