Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132653a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132653a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          46lBaOY+pyiG9V2wYqG9PRiOwVqBwy/vLFc0y1yBD3c=
Subject key identifier:   FA:2E:1D:04:0D:85:C5:33:A5:58:EB:B0:08:D1:EB:57:8B:DC:24:4F
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       3F1EFA832B2726A7E9F79DE287109B03B8A5F430
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132653a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 03 Jul 2023 14:11:35 +0000
ROA not before:           Mon 03 Jul 2023 14:06:35 +0000
ROA not after:            Mon 01 Jul 2024 14:11:35 +0000
asID:                     29802
IP address blocks:        2602:ff62:12e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 01:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1e:fa:83:2b:27:26:a7:e9:f7:9d:e2:87:10:9b:03:b8:a5:f4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul  3 14:06:35 2023 GMT
            Not After : Jul  1 14:11:35 2024 GMT
        Subject: CN=FA2E1D040D85C533A558EBB008D1EB578BDC244F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:af:a2:64:5d:62:2f:af:82:79:6e:ae:56:a8:
                    dd:4d:14:fb:87:63:f2:f1:1c:7d:90:aa:94:b9:06:
                    79:67:c3:85:be:88:f0:8e:74:f1:97:f4:a4:5a:52:
                    31:a7:a0:17:c6:13:5e:41:97:eb:97:3c:ac:a1:b2:
                    c7:ae:ee:07:fa:c1:c2:df:d8:a6:66:0f:48:87:50:
                    eb:84:27:40:83:ad:12:13:b5:9d:43:90:55:72:4c:
                    27:21:7a:0d:a6:48:b6:20:37:88:09:d5:b4:2e:41:
                    24:6b:3f:a3:58:77:ac:2e:e7:3d:2b:87:14:9b:cc:
                    58:d8:31:1e:77:c9:70:10:f5:0e:17:c7:a9:e1:ea:
                    41:46:52:de:19:b6:5e:7c:b8:43:bd:44:6e:5f:d8:
                    3b:6a:2c:3d:4b:4a:fb:75:2a:f8:44:7e:ac:40:18:
                    fd:65:a3:c0:82:03:d0:16:f7:d8:7c:9d:0f:85:0e:
                    86:e6:67:d2:09:2f:0d:15:98:f3:c5:0c:3c:2b:9b:
                    5e:10:ac:6d:0a:6a:29:8a:31:b9:ae:3c:ac:7f:ba:
                    dc:81:7e:5b:b5:54:93:1a:c8:99:65:80:e3:27:22:
                    fd:8c:2b:0d:64:1c:f1:d8:1f:c3:33:a9:c9:11:46:
                    5b:f9:f9:43:cc:e1:ca:35:2c:54:56:01:3b:5c:47:
                    a1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2E:1D:04:0D:85:C5:33:A5:58:EB:B0:08:D1:EB:57:8B:DC:24:4F
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132653a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12e::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:b7:8b:4e:f7:72:ec:9e:36:65:a1:8e:1b:bb:a9:3f:24:53:
         5b:99:e2:38:0d:39:e0:12:2a:cd:01:15:c2:6d:8d:0f:f2:06:
         a3:72:4d:8f:8a:31:b9:55:be:6a:40:b0:95:2f:bb:bf:3c:6a:
         5a:7b:65:13:83:82:57:6a:92:1f:49:31:1a:14:29:c7:2d:96:
         14:7c:8c:30:89:28:5b:5c:37:a9:79:9f:8c:ac:52:84:b2:1f:
         f9:cf:fa:02:02:87:68:d0:91:3f:f0:24:d3:c2:27:b7:61:fb:
         78:93:bb:dd:02:8f:9b:59:94:ac:85:c4:63:d1:f8:ef:a1:f7:
         0e:f7:4b:2a:95:02:a0:e5:cc:58:a5:6f:9f:73:07:db:aa:a6:
         b9:1b:d9:e5:b3:77:5c:1b:68:9e:e8:d6:4d:15:2a:ae:6a:11:
         6b:98:d6:46:1c:a2:e7:52:d5:d6:af:0d:b1:1f:fc:6b:a8:05:
         55:61:ca:f3:86:35:cb:de:1b:ad:54:a8:22:98:40:82:eb:6e:
         8f:f3:11:68:a2:eb:85:92:f5:ba:be:b8:ad:2c:d5:eb:87:c8:
         4f:b1:7a:4e:4c:db:6f:8d:a5:49:fc:82:53:76:c0:04:f1:3a:
         5c:e5:cf:d4:41:da:1d:6a:a8:eb:35:d5:ed:84:00:d5:05:45:
         7b:9f:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 12:48:45 2024 by rpki-client on console-ams.rpki-client.org