Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          mErhPTAXGAdzaTte4//ddOPK+09iC0s+MnmXCbCkyJc=
Subject key identifier:   05:25:35:27:A4:BF:25:FD:2A:1F:42:02:40:05:47:0B:76:8F:FA:83
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       3F66BB6E6F9147D4DB303F9426E73B59065ED7D8
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 03 Jul 2023 14:12:04 +0000
ROA not before:           Mon 03 Jul 2023 14:07:04 +0000
ROA not after:            Mon 01 Jul 2024 14:12:04 +0000
asID:                     29802
IP address blocks:        2602:ff62:184::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Apr 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:66:bb:6e:6f:91:47:d4:db:30:3f:94:26:e7:3b:59:06:5e:d7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul  3 14:07:04 2023 GMT
            Not After : Jul  1 14:12:04 2024 GMT
        Subject: CN=05253527A4BF25FD2A1F42024005470B768FFA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d4:10:b8:bb:ec:f5:aa:77:dd:63:0b:ac:ba:
                    38:8b:82:e3:e3:c7:1d:25:06:fa:2b:d5:82:67:c9:
                    fe:dc:ed:1a:7d:a9:be:15:74:b8:ae:7e:5c:c9:40:
                    a0:39:8d:ba:01:2b:8f:79:9a:d2:06:90:be:98:6d:
                    b8:94:53:3a:75:4a:b6:bb:78:13:a2:e7:1a:6a:87:
                    c5:9e:99:c9:21:c3:89:ab:a3:54:5d:38:b6:f3:ba:
                    a2:f8:14:59:16:f4:5f:59:16:c5:94:95:9a:d0:75:
                    12:a9:e0:4c:78:0c:a0:24:e7:4b:85:7f:a9:0e:f5:
                    76:6d:bc:74:24:e2:62:da:56:60:36:a2:d0:7b:5a:
                    9d:6c:7d:b3:50:e0:1e:02:70:44:45:e0:bb:24:45:
                    6b:14:d7:fb:d3:64:8c:8c:0e:54:56:c6:14:56:19:
                    df:14:17:3d:b6:fb:ea:29:73:f7:10:8a:53:ae:87:
                    40:92:10:f3:af:65:ac:93:07:0d:a3:36:33:c4:a8:
                    3d:d5:41:5e:09:d1:97:3b:f4:e5:ac:51:0b:cd:00:
                    d4:a2:17:cf:a7:f2:eb:f9:e4:81:3f:cd:c5:ae:fc:
                    5a:09:96:c3:17:10:85:75:c8:f8:95:d1:71:82:94:
                    12:b9:04:ee:ea:6e:04:1a:cc:c2:82:98:61:c7:e4:
                    21:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:25:35:27:A4:BF:25:FD:2A:1F:42:02:40:05:47:0B:76:8F:FA:83
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:184::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:29:ce:21:f6:2e:29:c3:4a:d4:c4:e7:eb:b9:32:a2:95:7e:
         bc:60:e7:5b:5c:ec:a3:19:d9:e7:50:a6:1f:f5:f5:15:5a:7c:
         9a:c4:73:57:6c:ad:61:d5:4b:a9:19:cf:d9:7f:c2:e0:76:ee:
         6e:90:d3:21:4e:64:dc:47:81:28:50:d0:83:d0:7b:23:0f:7a:
         f5:92:57:e3:ee:be:ca:48:7c:d9:1b:31:81:d3:fd:b4:58:f4:
         ef:3c:2a:c8:7e:af:76:63:98:27:a5:90:f8:5c:f5:0e:51:1a:
         84:a1:5c:42:98:59:58:99:12:a2:94:3a:b4:0b:39:d7:ac:69:
         5f:f2:91:fc:83:47:ab:18:86:97:1c:f7:96:11:91:26:e7:83:
         db:eb:8c:4b:e8:67:95:be:ed:c1:61:64:bb:cb:fe:e3:d5:bb:
         07:e0:c7:84:15:a8:04:20:85:cf:9c:c8:3d:7f:8d:85:69:dc:
         19:b8:a2:a8:3d:1f:3e:c2:b9:76:59:f3:2e:73:ce:81:5c:34:
         92:bc:27:6c:da:86:ac:07:71:33:67:93:4a:59:fa:bc:5c:4e:
         bf:1c:fe:d6:5a:fe:c8:2b:b0:97:92:bf:17:01:8e:31:3f:97:
         e0:6e:ba:98:37:dc:13:43:26:3a:de:ae:65:8a:e1:1a:2c:b7:
         d2:dd:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 20:26:03 2024 by rpki-client on console-fra.rpki-client.org