Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          uN9ZCOh8k4tVnhTf48VdaLHWIkWaYh4DEa50nNyUmB8=
Subject key identifier:   E6:10:E1:23:2B:11:32:CE:F5:0D:31:B3:65:61:C2:46:33:6D:62:68
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       680E8CBC3A8EECE2A9A1FDEE9E6565712244542C
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 17 Jun 2024 19:48:58 +0000
ROA not before:           Mon 17 Jun 2024 19:43:58 +0000
ROA not after:            Mon 16 Jun 2025 19:48:58 +0000
asID:                     29802
IP address blocks:        2602:ff62:108::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0e:8c:bc:3a:8e:ec:e2:a9:a1:fd:ee:9e:65:65:71:22:44:54:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 17 19:43:58 2024 GMT
            Not After : Jun 16 19:48:58 2025 GMT
        Subject: CN=E610E1232B1132CEF50D31B36561C246336D6268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:9a:e3:ce:c2:73:0f:0d:cc:9f:f8:f8:e3:
                    6c:ed:d5:11:56:56:66:af:cf:18:9a:e4:12:f1:70:
                    f4:4a:e3:0e:0b:be:96:50:81:87:97:26:3c:64:0d:
                    c2:18:c7:3b:6f:6d:e7:cd:1e:10:e3:c7:ed:7b:39:
                    ce:6d:11:c0:72:7d:4d:49:56:bc:22:56:b7:6a:99:
                    25:50:55:bf:39:32:6a:3d:f6:aa:91:38:f5:c7:d6:
                    1d:f6:da:50:9a:c3:6c:7e:d0:00:1d:da:45:d9:df:
                    1d:cc:d1:03:02:bd:d9:8e:63:e7:ff:a1:7f:84:a5:
                    4f:00:ff:35:8c:6e:03:de:7a:b2:bf:7d:8d:ce:1b:
                    33:6e:d2:fb:63:45:e4:c0:58:e6:a6:a4:1a:20:c5:
                    3c:92:9f:8c:be:3c:93:29:df:1d:b7:ef:be:d5:53:
                    17:3c:4b:6b:9a:be:33:24:8a:6b:7c:7f:86:ee:5d:
                    ec:10:0d:92:2e:8e:fd:44:33:40:2c:40:83:70:ec:
                    65:5c:73:78:07:a4:c2:75:04:32:0a:f3:e0:18:25:
                    4c:86:2c:6d:96:a2:88:65:5d:96:92:9d:5e:74:04:
                    78:cc:78:10:7e:46:7d:17:77:48:8d:83:fe:c1:2a:
                    37:89:b0:5e:16:1e:21:0c:ee:b0:ad:6a:48:45:ab:
                    de:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:10:E1:23:2B:11:32:CE:F5:0D:31:B3:65:61:C2:46:33:6D:62:68
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:108::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:ca:ab:8d:61:e2:c9:53:92:4f:ab:03:03:6e:ba:49:80:85:
         14:dd:3e:6a:39:88:38:4d:72:33:22:ae:83:1e:6e:0e:8f:14:
         3a:5c:28:4d:f7:1a:2e:65:b0:e9:45:ff:6c:3f:5f:c2:fc:65:
         e8:ce:d6:68:b8:ba:4f:dd:51:c0:17:01:17:b7:c0:43:4b:0a:
         b6:b6:14:b5:cf:1c:47:b0:c7:eb:bf:7a:19:02:c0:42:65:8f:
         a3:30:84:66:13:b4:65:d4:e3:8f:3f:cc:92:ef:4c:29:7b:7c:
         8a:c9:23:e8:a1:d9:7a:b3:ca:c1:e3:ea:7c:3a:ca:37:9d:82:
         1b:ca:fe:03:6e:c7:2e:ac:6d:98:7f:cd:6f:7d:a5:b2:71:81:
         bd:55:93:98:5e:90:bb:e4:a9:4f:5d:fd:c9:83:e3:35:c3:80:
         dc:12:50:4c:3d:0e:e6:73:a5:b1:a8:0f:54:e8:11:1d:46:5c:
         0e:51:72:f7:93:f4:01:76:e4:7a:9b:75:ea:4a:f4:bc:b4:e2:
         64:78:e9:6f:c2:a4:98:85:0c:17:c3:0f:16:a3:41:6a:d8:74:
         83:73:29:2a:f8:5e:6a:1e:8e:33:c8:9b:6a:60:4a:a7:2d:c5:
         68:72:f3:48:5f:e5:4d:70:8d:b0:f7:d5:92:69:a0:5f:bf:cf:
         2d:5d:46:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:55 2024 by rpki-client on console-ams.rpki-client.org