Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132363a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132363a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          rUksIvf+0ZoJBMwap5kWGBh8Q8Selq5ibC8fqIcy8QU=
Subject key identifier:   79:41:78:9E:09:9C:5C:2A:7F:E5:07:0B:57:7A:7B:B9:A8:E8:DF:04
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       7C4DFB3DE6BD34828A6C5C424BEB4A7B044CDE16
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132363a3a2f34382d3438203d3e203239383032.roa
Signing time:             Fri 14 Jul 2023 14:01:10 +0000
ROA not before:           Fri 14 Jul 2023 13:56:10 +0000
ROA not after:            Fri 12 Jul 2024 14:01:10 +0000
asID:                     29802
IP address blocks:        2602:ff62:126::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4d:fb:3d:e6:bd:34:82:8a:6c:5c:42:4b:eb:4a:7b:04:4c:de:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 14 13:56:10 2023 GMT
            Not After : Jul 12 14:01:10 2024 GMT
        Subject: CN=7941789E099C5C2A7FE5070B577A7BB9A8E8DF04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f1:7f:41:e4:84:28:be:0a:d9:c3:d9:83:fe:
                    df:9f:23:dc:5d:ec:83:22:73:7a:5e:d5:11:aa:be:
                    35:0b:c3:98:0f:5a:2c:d9:81:87:73:d9:46:ab:1a:
                    da:d1:0d:8c:d4:17:67:1e:93:3c:80:01:c3:3a:52:
                    1d:76:6b:94:e7:1d:17:e0:c5:2f:e3:a0:84:70:b2:
                    6f:a6:96:93:54:ef:51:85:32:b2:82:13:3a:25:76:
                    05:54:a4:23:26:06:4f:bc:7c:99:3f:98:08:9f:63:
                    56:6c:48:fa:14:66:73:19:03:b1:4b:9b:bb:4f:1d:
                    56:42:2c:69:ae:db:6e:a2:b3:44:49:31:ac:28:ca:
                    0f:6e:d9:3c:0f:3b:6d:46:9f:1d:26:41:b5:40:47:
                    07:92:db:ca:4c:77:d7:50:11:87:6d:c0:78:0a:6d:
                    d5:0c:d4:bc:f7:09:38:2f:ae:07:b4:c1:c2:d1:64:
                    97:14:37:e2:48:80:cd:2f:95:fb:69:1b:52:ff:d0:
                    e7:f7:c8:92:37:61:30:1c:ec:4a:33:a5:5b:17:01:
                    d6:35:f1:e7:0a:85:47:b4:0e:43:b1:cf:64:48:36:
                    65:89:8d:0a:42:66:a8:ea:8a:3d:c7:ce:18:8d:8e:
                    48:ee:ab:8b:fb:fd:41:29:a2:a7:c3:cd:41:f5:90:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:41:78:9E:09:9C:5C:2A:7F:E5:07:0B:57:7A:7B:B9:A8:E8:DF:04
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132363a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:126::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:23:4c:b1:51:e9:1f:b1:56:74:6f:2c:a0:7a:55:f0:34:97:
         ac:28:81:35:d2:96:b5:be:be:b1:a1:74:a7:85:4e:ff:ce:b2:
         54:c1:84:a9:5f:1f:a8:f1:3b:2e:45:84:44:aa:01:c5:4d:9f:
         ff:0c:58:38:93:a7:7c:c2:78:c8:af:55:93:9a:14:32:7e:53:
         10:e4:5a:86:e8:d1:f4:b1:61:dc:73:04:a8:e3:88:58:32:e2:
         38:9b:af:57:c5:a9:81:36:5e:97:5b:e4:2b:19:f5:d2:05:14:
         9a:40:84:94:17:9a:d0:df:ad:e7:4d:ea:7a:76:55:48:7a:c8:
         d3:5d:52:a3:d1:8e:46:0d:94:d7:3f:4b:8f:5c:8c:2a:13:6b:
         e1:2d:65:75:b1:84:05:f9:ac:ea:7c:30:80:aa:b9:1d:e2:f0:
         d7:62:96:a4:7b:8f:5b:7d:e0:ee:90:07:39:bb:4b:bb:6b:1c:
         21:2a:72:99:ab:75:10:39:5f:de:f2:8f:a9:8e:16:0a:5d:df:
         c1:e2:7c:a2:83:b2:3e:8f:38:10:0f:48:20:2a:88:13:3e:4b:
         88:c1:00:b5:e1:ab:d7:c5:09:a6:19:f6:ea:f2:06:70:fe:91:
         6d:4d:d0:9c:46:c4:37:72:5b:d8:1b:cf:b8:ca:f5:a0:81:3f:
         63:b5:b3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 20:26:03 2024 by rpki-client on console-fra.rpki-client.org