Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132663a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          ZKL4orM2Q2r8qhQUm5ZMSsp3Ilt+gqHPVSapkzIIjCI=
Subject key identifier:   1D:D3:3D:AA:1E:44:F6:51:88:EA:02:36:DD:A5:42:D1:A0:94:E5:9A
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       04D9FD41FA180EF627CB5D1FF279840961D16533
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 03 Jul 2023 14:11:54 +0000
ROA not before:           Mon 03 Jul 2023 14:06:54 +0000
ROA not after:            Mon 01 Jul 2024 14:11:54 +0000
asID:                     29802
IP address blocks:        2602:ff62:12f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d9:fd:41:fa:18:0e:f6:27:cb:5d:1f:f2:79:84:09:61:d1:65:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul  3 14:06:54 2023 GMT
            Not After : Jul  1 14:11:54 2024 GMT
        Subject: CN=1DD33DAA1E44F65188EA0236DDA542D1A094E59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c7:70:8f:72:bf:5a:93:96:ce:5c:aa:71:4e:
                    26:36:04:2a:44:48:c8:41:28:4e:15:f2:ec:c6:8d:
                    f5:77:72:f7:cb:de:58:98:75:92:b6:99:92:04:ad:
                    16:70:ec:cf:fe:11:1c:d8:a0:c6:9d:87:aa:2f:80:
                    90:c7:82:82:97:9f:5e:72:39:43:cf:0d:ae:c8:62:
                    8b:d1:2e:79:71:b6:26:d8:66:66:ba:9c:a1:4f:f2:
                    a1:ef:9a:3e:a9:4d:62:29:a4:9d:03:84:7c:67:4b:
                    0d:dd:a8:2f:44:30:e7:ad:2e:3b:de:ee:66:7e:dd:
                    e5:36:7a:20:7e:9f:82:7f:df:64:96:ac:72:78:93:
                    e6:95:1d:7b:aa:03:9b:5c:d8:c1:28:31:87:19:0d:
                    78:7e:2c:dc:97:72:14:0c:38:54:63:dd:0a:b7:6f:
                    a4:7a:dd:de:2e:77:73:38:1f:13:1b:ac:8c:b1:e0:
                    a6:1e:08:ce:54:ba:93:18:70:fa:3c:38:03:54:8b:
                    2d:9d:0c:9e:84:05:52:24:22:58:39:01:1e:e1:e9:
                    e3:f2:e1:35:6f:71:2b:cd:ac:bd:df:bc:75:61:68:
                    b3:b4:0a:38:b0:5c:c9:e0:da:3f:6d:ca:89:84:16:
                    62:d9:6d:e3:9a:ad:c6:ec:88:a0:d5:5f:90:2f:0c:
                    f6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D3:3D:AA:1E:44:F6:51:88:EA:02:36:DD:A5:42:D1:A0:94:E5:9A
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132663a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12f::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:41:73:31:d1:ad:3f:34:5b:86:3c:04:11:82:38:8f:cf:81:
         71:4b:3a:2d:3a:ff:47:e1:e7:0e:87:f2:b1:02:c5:a5:2b:93:
         4d:6e:85:92:64:fe:d8:74:4f:a1:30:59:c9:ea:a4:be:7a:df:
         e6:72:3e:52:c0:53:9e:53:4d:8f:ee:80:33:21:d1:e3:7c:b7:
         5e:fe:bc:ee:5c:bc:d9:0f:83:83:04:93:30:9b:22:ee:9a:7b:
         bf:7d:cc:fc:10:45:48:56:d0:b0:96:ef:17:b0:34:f1:a5:e7:
         6c:b1:b8:fe:57:eb:ae:2a:a0:68:34:e5:74:2d:9b:5c:ed:e0:
         b6:92:8f:88:4a:42:9f:9e:37:03:75:b3:40:a3:34:ec:be:d1:
         2b:8a:93:ce:4d:d8:6b:9a:fd:1d:b8:b4:e0:26:89:a2:ac:8f:
         de:47:ba:52:d6:14:1d:90:92:bf:cc:ca:6a:a3:5d:d6:6d:8e:
         44:68:8b:d5:68:99:03:d8:38:58:0e:ca:1b:97:e4:f7:2d:d7:
         be:90:17:2e:c9:57:7a:1a:a5:9c:5f:5d:42:eb:cc:2f:d8:2e:
         19:bc:61:1f:8a:89:2c:68:16:db:df:c7:83:d8:7b:c7:c9:b4:
         6e:4a:86:fb:df:28:00:44:17:92:7c:2d:70:d0:d3:d1:0c:6a:
         66:56:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 20:26:03 2024 by rpki-client on console-fra.rpki-client.org