Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6530303a3a2f34302d3430203d3e2033323830.roa
File:                     323630323a666336383a6530303a3a2f34302d3430203d3e2033323830.roa (raw, json)
Hash identifier:          MvvDcgStkwuFy2i3PfxChipANE7lTzQKAgXCJ+bbuRA=
Subject key identifier:   47:4E:E1:BB:2A:85:64:83:57:12:DD:6E:1E:3E:02:4C:F8:2B:0D:58
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       6E1625FA079E56167713B4995D226667F6F170C5
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6530303a3a2f34302d3430203d3e2033323830.roa
Signing time:             Fri 19 Apr 2024 21:16:21 +0000
ROA not before:           Fri 19 Apr 2024 21:11:21 +0000
ROA not after:            Fri 18 Apr 2025 21:16:21 +0000
asID:                     3280
IP address blocks:        2602:fc68:e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Jun 2024 10:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:16:25:fa:07:9e:56:16:77:13:b4:99:5d:22:66:67:f6:f1:70:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Apr 19 21:11:21 2024 GMT
            Not After : Apr 18 21:16:21 2025 GMT
        Subject: CN=474EE1BB2A8564835712DD6E1E3E024CF82B0D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:76:0b:5a:0e:16:b1:83:fc:e8:2d:bb:4b:
                    35:2d:05:bb:f2:6b:1e:83:6b:30:85:91:d0:ed:9c:
                    29:fa:d7:d7:d8:42:38:d7:04:1d:04:b3:12:f2:99:
                    58:3c:06:8f:98:10:c9:bd:52:4a:79:f1:c7:68:1c:
                    94:74:1c:9f:54:69:d5:0b:cb:07:03:88:b4:0a:68:
                    ad:70:d2:5f:2a:f4:85:e2:52:32:4f:d5:0d:8b:19:
                    51:b7:61:dd:69:0c:38:e3:2b:4d:79:5f:01:00:64:
                    e0:93:fa:9e:d7:c6:ea:d8:fc:5a:5e:13:07:0e:6c:
                    8a:58:1f:50:c2:04:0b:01:c3:29:12:85:36:8b:3f:
                    1e:83:23:f8:4e:b2:b0:11:46:65:5a:de:31:e9:c3:
                    17:1d:31:52:a2:6f:cf:a4:e1:fb:7c:71:97:73:88:
                    64:1e:b1:fa:b8:6c:bd:3f:db:1a:63:cb:cc:9a:90:
                    58:08:12:26:b6:52:40:4a:07:dc:74:91:b5:14:ed:
                    32:3d:48:41:47:fc:8b:0c:a4:27:e3:44:1d:ba:7e:
                    c9:4d:34:3f:7a:ad:64:d2:c9:ea:2c:08:01:c2:b9:
                    23:91:5c:1d:cb:f4:8d:fb:0d:e9:01:1f:f8:08:f4:
                    1d:4a:16:0e:9d:98:cf:48:f2:65:f0:3a:a8:47:b8:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4E:E1:BB:2A:85:64:83:57:12:DD:6E:1E:3E:02:4C:F8:2B:0D:58
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/323630323a666336383a6530303a3a2f34302d3430203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc68:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:b5:75:2d:65:73:09:84:9f:4f:7d:98:e9:ae:3a:64:c3:
         4f:55:88:2c:ee:a0:02:9f:70:b6:2f:d9:a8:0e:b9:57:75:cb:
         12:0d:b7:61:92:01:b6:e4:77:c8:d0:25:a3:d2:49:62:0a:a7:
         71:08:bd:97:ff:2b:e4:53:b2:72:cc:d1:9f:64:c0:8b:65:6f:
         69:d1:d3:92:2f:93:48:61:e1:41:56:58:a4:e5:07:78:53:ff:
         e8:13:88:4b:8c:64:13:e3:9a:b4:d4:9d:17:03:84:ff:fb:f0:
         43:cc:ed:1f:b5:f0:4b:fb:bb:1d:9a:50:2d:83:98:f1:7f:51:
         9d:a2:f8:eb:d4:37:33:e8:11:5f:08:82:29:ba:a6:a8:f4:07:
         16:c9:2f:79:f5:16:e2:ff:ce:2f:50:b5:0f:28:3a:d4:7c:c2:
         5a:4d:c2:d8:94:e7:47:03:88:b0:e6:7f:e3:83:4d:b2:b5:a7:
         a2:11:f1:9b:2e:ac:e8:0a:cd:0e:d4:45:f7:b9:79:8a:76:34:
         b4:37:36:77:50:1f:75:b5:25:ca:4a:e9:1a:04:52:34:b3:97:
         fa:47:b0:fb:b1:93:1f:0e:a7:8e:4c:3e:56:9b:de:b9:86:37:
         0d:39:0e:ee:6f:7c:6a:57:ac:82:e3:02:6a:37:e0:f8:30:c5:
         a5:c5:ca:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 08:53:21 2024 by rpki-client on console-fra.rpki-client.org