Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132343a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          gPVF5t8oqwn1WLRyof/+F4i4kb9wIOEiAMU3iJdC+Vg=
Subject key identifier:   E5:0E:FD:56:16:DB:7F:94:4A:03:B1:A8:50:0D:F7:FE:FE:80:7C:4D
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       173131DFE02F31CC9105F060DB9DD60B003FE36A
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e203239383032.roa
Signing time:             Fri 14 Jul 2023 14:00:22 +0000
ROA not before:           Fri 14 Jul 2023 13:55:22 +0000
ROA not after:            Fri 12 Jul 2024 14:00:22 +0000
asID:                     29802
IP address blocks:        2602:ff62:124::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:31:31:df:e0:2f:31:cc:91:05:f0:60:db:9d:d6:0b:00:3f:e3:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 14 13:55:22 2023 GMT
            Not After : Jul 12 14:00:22 2024 GMT
        Subject: CN=E50EFD5616DB7F944A03B1A8500DF7FEFE807C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:36:df:15:94:10:e7:93:fe:52:d1:b6:60:9b:
                    e7:87:39:dd:0e:af:88:a2:ed:b9:e9:b3:5d:aa:fc:
                    d4:7e:0f:3d:fa:fc:99:0f:0e:3c:49:c4:09:09:7e:
                    8f:18:e5:5e:f9:85:cc:aa:69:5a:c5:90:49:9e:bc:
                    7c:6e:d3:73:b4:87:99:b5:7a:02:82:d1:0d:c5:c7:
                    b5:81:a7:9b:83:54:4b:7f:8d:64:b0:74:f8:64:78:
                    d5:0e:0e:41:62:da:11:55:e8:f1:87:1a:d0:a7:13:
                    f8:4b:bf:dc:f2:db:43:be:7f:88:61:ba:fb:95:19:
                    48:86:db:30:9d:5f:e1:e2:68:11:0e:03:72:fd:64:
                    67:8d:2a:ee:e3:fe:19:ea:7c:2c:fb:c0:83:e6:6d:
                    34:f5:6b:ec:bd:42:f9:70:49:3c:39:62:26:8c:ae:
                    88:85:94:fa:e9:0d:f4:e5:c0:ed:6a:cd:9a:6b:a7:
                    8f:be:a0:88:e3:63:16:77:3f:fd:ba:2d:fe:9a:cd:
                    3c:b6:50:ad:3e:99:ae:e7:9d:e0:42:80:24:6d:46:
                    ea:0c:09:14:0a:d2:f3:91:27:57:76:ca:5c:72:02:
                    01:3b:79:f4:60:b1:2c:9e:ec:75:70:34:62:67:9e:
                    e7:31:8e:aa:71:69:44:f0:84:d6:b8:d8:a9:e2:03:
                    52:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0E:FD:56:16:DB:7F:94:4A:03:B1:A8:50:0D:F7:FE:FE:80:7C:4D
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:124::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:f4:3b:ab:06:76:28:73:6b:1e:6e:84:87:68:9d:8f:a9:f3:
         90:ab:c8:c9:a8:36:74:72:5c:26:30:ac:e7:cc:68:2e:da:03:
         49:21:eb:0f:1b:3f:f9:1d:16:88:17:2a:3a:5d:90:4b:32:31:
         90:a5:6b:82:9f:51:b1:06:76:f3:11:46:6c:98:fe:3c:99:12:
         74:52:ac:58:eb:d9:ee:41:f7:b0:35:76:de:bb:02:7e:19:44:
         a2:4f:e5:ce:91:13:d6:e1:53:d5:42:fb:62:a1:a6:8d:1c:1d:
         45:52:0b:ed:fa:08:ac:62:dc:c8:9c:85:3c:0e:56:1c:9c:01:
         e1:c5:29:83:86:f7:15:6c:8d:b5:03:2a:de:61:75:71:3b:40:
         21:83:78:41:63:d9:15:10:fc:d5:24:88:42:2f:0b:bb:df:28:
         9d:0a:0d:89:3e:46:16:f2:4e:32:24:9d:1a:87:e2:f3:d0:18:
         ae:61:bb:1b:1c:89:d7:0a:15:57:0f:d0:5e:4f:2e:fa:c5:d2:
         7d:6b:c0:3c:dc:7f:7e:80:f7:f9:b0:61:46:03:fd:de:1f:18:
         04:1e:79:58:ad:28:46:63:bf:e1:28:94:bc:cb:ff:5a:b0:2a:
         ab:11:26:a7:d4:f0:90:c0:4e:79:5a:d5:7a:28:58:e5:3f:a6:
         cf:98:f8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 20:26:03 2024 by rpki-client on console-fra.rpki-client.org