Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132383a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          wM22S9BoSIZ7N/QmV6u+/3XRWzCOA5kxjRLaexJ2hpw=
Subject key identifier:   D2:D5:7B:0C:16:FE:34:C8:19:A8:0E:FD:C8:94:37:BC:79:E1:24:00
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       7ECBF6B8070A29BAA63B030361326A69E3BFB375
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 03 Jul 2023 13:57:56 +0000
ROA not before:           Mon 03 Jul 2023 13:52:56 +0000
ROA not after:            Mon 01 Jul 2024 13:57:56 +0000
asID:                     29802
IP address blocks:        2602:ff62:128::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 15:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cb:f6:b8:07:0a:29:ba:a6:3b:03:03:61:32:6a:69:e3:bf:b3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul  3 13:52:56 2023 GMT
            Not After : Jul  1 13:57:56 2024 GMT
        Subject: CN=D2D57B0C16FE34C819A80EFDC89437BC79E12400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b5:ab:7a:77:f1:eb:4d:41:4e:70:65:7e:66:
                    8c:7d:cb:59:ff:2e:36:96:a1:a4:20:cc:74:f3:08:
                    18:d3:9c:d3:3a:b3:27:ee:2e:b0:fe:56:27:89:ea:
                    e1:4b:50:8d:45:c3:62:97:69:5b:06:15:c2:22:73:
                    92:e7:91:6e:93:fb:a6:dd:ba:02:07:09:28:ab:50:
                    7d:83:d9:0c:52:92:0d:52:69:be:9b:93:d4:05:72:
                    20:18:a5:ef:ce:da:5d:26:23:26:19:c1:d5:f8:f8:
                    aa:f1:46:df:47:f3:78:2e:86:34:29:85:34:db:7b:
                    83:f9:bc:4b:b1:7f:81:61:02:26:af:26:22:8d:94:
                    d8:06:2a:44:97:83:e8:ce:fe:a6:06:be:1c:70:ae:
                    10:01:e5:6f:7f:0d:7e:11:42:3a:87:a4:b9:1e:ff:
                    a5:94:23:88:d2:57:ec:f2:c8:11:7c:f2:52:b7:b2:
                    45:d1:fc:26:a8:ee:52:7b:06:d2:29:d5:6e:cf:41:
                    d8:b5:f0:44:48:9b:17:43:0d:ac:58:d6:ce:d8:9d:
                    34:4c:49:13:fb:fd:72:e7:f3:43:30:6c:08:15:50:
                    02:28:0e:4d:51:e0:f8:1a:39:4d:eb:95:1e:42:03:
                    0a:03:1b:f2:b5:1a:e7:d0:df:21:ee:9a:c7:fe:7c:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D5:7B:0C:16:FE:34:C8:19:A8:0E:FD:C8:94:37:BC:79:E1:24:00
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:128::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:d3:23:76:cb:6e:23:36:17:0d:8e:23:ba:10:58:9d:10:be:
         76:4a:51:d2:db:3c:0c:8b:d7:ba:40:2c:2a:95:33:f4:ed:88:
         10:4c:c9:5e:f8:82:e8:ec:6e:90:cc:f8:b6:c0:6a:a8:d1:eb:
         55:45:88:fc:04:44:2b:96:c5:e8:93:73:55:d4:e6:d7:05:25:
         22:22:d4:d0:9a:a3:1c:2e:47:b4:f7:1d:80:85:bd:69:76:9c:
         73:e6:c5:7b:07:fd:8f:49:48:dc:b0:0d:5d:73:04:1f:6e:61:
         1b:1e:7c:ee:70:9a:7e:bb:c4:44:ff:69:f5:fe:58:a9:03:3d:
         04:42:4d:a9:ae:9a:62:71:5f:28:85:bc:9b:15:06:98:38:fd:
         04:3b:97:82:ed:40:e7:c0:d2:6b:c8:46:09:42:42:d0:71:c4:
         9f:92:9b:72:1a:e6:49:82:ec:f3:57:47:dd:3c:11:fd:0f:25:
         e5:57:4c:bd:dc:db:1f:3e:b8:c4:b8:59:c4:c0:30:4c:a6:39:
         73:d6:2a:6d:b7:7d:ea:dd:f4:46:61:d5:7e:d5:7e:9e:56:0b:
         7d:c0:96:3f:b2:87:ec:da:b2:95:b5:1d:ba:78:52:f5:eb:0c:
         e1:01:3c:8b:0c:68:83:e4:99:aa:52:93:19:c6:89:a0:05:01:
         ee:09:55:ec
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUfsv2uAcKKbqmOwMDYTJqaeO/s3UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjMwNzAzMTM1MjU2WhcNMjQwNzAxMTM1NzU2
WjAzMTEwLwYDVQQDEyhEMkQ1N0IwQzE2RkUzNEM4MTlBODBFRkRDODk0MzdCQzc5
RTEyNDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrWrenfx601B
TnBlfmaMfctZ/y42lqGkIMx08wgY05zTOrMn7i6w/lYnierhS1CNRcNil2lbBhXC
InOS55Fuk/um3boCBwkoq1B9g9kMUpINUmm+m5PUBXIgGKXvztpdJiMmGcHV+Piq
8UbfR/N4LoY0KYU023uD+bxLsX+BYQImryYijZTYBipEl4Pozv6mBr4ccK4QAeVv
fw1+EUI6h6S5Hv+llCOI0lfs8sgRfPJSt7JF0fwmqO5SewbSKdVuz0HYtfBESJsX
Qw2sWNbO2J00TEkT+/1y5/NDMGwIFVACKA5NUeD4GjlN65UeQgMKAxvytRrn0N8h
7prH/nzqwwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFNLVewwW/jTIGagO/ciUN7x5
4SQAMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMjM4M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBKDANBgkq
hkiG9w0BAQsFAAOCAQEAHNMjdstuIzYXDY4juhBYnRC+dkpR0ts8DIvXukAsKpUz
9O2IEEzJXviC6OxukMz4tsBqqNHrVUWI/AREK5bF6JNzVdTm1wUlIiLU0JqjHC5H
tPcdgIW9aXacc+bFewf9j0lI3LANXXMEH25hGx587nCafrvERP9p9f5YqQM9BEJN
qa6aYnFfKIW8mxUGmDj9BDuXgu1A58DSa8hGCUJC0HHEn5KbchrmSYLs81dH3TwR
/Q8l5VdMvdzbHz64xLhZxMAwTKY5c9Yqbbd96t30RmHVftV+nlYLfcCWP7KH7Nqy
lbUdunhS9esM4QE8iwxog+SZqlKTGcaJoAUB7glV7A==
-----END CERTIFICATE-----
Generated at Tue Apr 30 15:51:11 2024 by rpki-client on console-fra.rpki-client.org