Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132393a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          rmrlI6P5pPOG1TWiMFaIgoWry4GOTDSB9joqSVPgYTc=
Subject key identifier:   BC:AC:49:ED:9F:3D:32:BC:C1:2E:92:F2:58:70:C5:2A:80:8C:41:FD
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       297DED1A793B8CE1DBFE1473A1851DDC8F30755D
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 03 Jul 2023 14:02:19 +0000
ROA not before:           Mon 03 Jul 2023 13:57:19 +0000
ROA not after:            Mon 01 Jul 2024 14:02:19 +0000
asID:                     29802
IP address blocks:        2602:ff62:129::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 May 2024 15:47:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7d:ed:1a:79:3b:8c:e1:db:fe:14:73:a1:85:1d:dc:8f:30:75:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul  3 13:57:19 2023 GMT
            Not After : Jul  1 14:02:19 2024 GMT
        Subject: CN=BCAC49ED9F3D32BCC12E92F25870C52A808C41FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:38:1d:a5:bf:86:ec:fb:99:0e:e6:3e:d1:fd:
                    af:cf:5b:f1:e9:3f:8a:f8:c1:f4:24:cf:c9:b0:9b:
                    24:ba:73:a2:c6:26:28:86:fc:f3:15:d4:d6:fa:a6:
                    84:18:dd:fd:c7:1b:2c:08:66:57:97:e8:d0:d9:c1:
                    22:b6:f7:82:76:66:95:36:12:30:d3:56:30:2a:dd:
                    e4:a5:3c:52:a0:52:17:36:fe:84:b4:3e:b9:aa:b3:
                    ed:5e:f3:0a:4b:5a:c3:33:c7:c6:c2:55:2e:86:48:
                    59:c6:fd:04:71:2d:19:50:36:84:8b:71:02:bf:6a:
                    13:44:c1:7a:8d:04:8d:e1:6b:55:31:b2:a0:08:a0:
                    cb:c1:80:57:5e:f8:81:97:93:ce:81:93:da:73:cd:
                    0c:97:37:a4:f0:2e:3b:cb:30:e5:b1:ca:82:ae:2c:
                    9a:09:e9:0c:95:cf:87:a4:0d:b4:47:67:88:4e:c0:
                    db:b2:86:f2:4d:46:ee:06:e3:cb:c4:45:08:a3:4d:
                    c9:5e:47:ea:e1:ee:ed:a9:37:fa:34:0a:4d:70:40:
                    32:84:78:e1:cd:60:78:ca:99:0e:47:1d:7d:f8:b8:
                    cf:b4:0a:01:aa:9b:76:7b:6b:91:26:75:7e:83:e2:
                    39:66:84:f6:70:1d:44:42:0e:07:72:be:cc:1f:5d:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AC:49:ED:9F:3D:32:BC:C1:2E:92:F2:58:70:C5:2A:80:8C:41:FD
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:129::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:6a:17:5b:f5:7d:00:35:2e:01:dc:1f:4f:57:2a:04:37:6d:
         d5:dc:c4:7e:b3:bb:87:38:72:46:aa:3e:1b:7a:74:e0:e5:42:
         26:09:a6:d7:5d:ec:fc:5e:00:19:05:c2:31:a2:12:6b:5e:1d:
         3e:f2:4f:f0:f0:e8:61:d6:ed:5a:7c:40:f5:98:e7:3a:d5:ad:
         de:90:82:95:63:9d:09:b0:45:5a:c2:9d:f6:f5:83:44:77:7d:
         55:7c:1f:9b:e5:a1:9f:41:5e:8a:5e:07:58:b5:7f:8e:e2:f3:
         98:16:92:ba:56:d6:9b:ae:18:d5:d4:d0:98:92:02:2c:37:5e:
         ac:a6:9e:e0:6b:a2:2c:8e:be:4c:72:71:76:d6:1a:74:5f:de:
         7e:05:46:20:26:5a:26:3e:02:bc:65:5d:96:87:5c:cc:85:dd:
         6d:06:ca:22:75:91:c0:4e:d9:35:0f:cb:99:cd:f5:59:c6:70:
         78:a0:d5:15:db:94:82:3c:40:03:4a:e5:65:2e:a9:80:ba:22:
         73:04:bb:c3:c7:ac:b8:c3:8a:4b:6e:8c:0f:3c:45:f3:8f:86:
         ab:31:a9:44:5e:1c:81:40:0e:1d:86:b1:f9:88:45:da:5d:a5:
         b5:19:b8:dd:42:57:98:03:03:48:a8:05:cc:40:93:9e:2d:93:
         a6:cb:6a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 15:51:11 2024 by rpki-client on console-fra.rpki-client.org