Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e20333936333536.roa
File:                     323630323a666636323a3130383a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier:          NngFynN7bidj+AoM5yZ/4w6uKIf8TGjgVwu3r1mqO9E=
Subject key identifier:   3F:27:90:A7:70:AE:CB:E6:C5:7A:91:52:39:21:2F:5F:51:B2:70:AE
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       633AF07060A780FA4959B792C86942526CCDED74
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e20333936333536.roa
Signing time:             Tue 11 Jun 2024 10:04:02 +0000
ROA not before:           Tue 11 Jun 2024 09:59:02 +0000
ROA not after:            Tue 10 Jun 2025 10:04:02 +0000
asID:                     396356
IP address blocks:        2602:ff62:108::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 00:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3a:f0:70:60:a7:80:fa:49:59:b7:92:c8:69:42:52:6c:cd:ed:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 11 09:59:02 2024 GMT
            Not After : Jun 10 10:04:02 2025 GMT
        Subject: CN=3F2790A770AECBE6C57A915239212F5F51B270AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:7c:f6:2c:63:25:31:bb:87:72:81:b8:4e:
                    9b:a5:45:40:f1:97:26:fc:df:72:97:53:4b:4a:de:
                    7f:4e:19:79:fd:14:4d:90:17:90:4e:dc:be:ed:02:
                    7b:f5:50:55:97:16:00:14:04:eb:af:55:bd:7e:c0:
                    35:91:94:32:8f:76:ab:2c:51:7b:14:14:c7:a0:21:
                    77:82:ef:7c:32:41:59:0a:ab:1a:a5:7c:3f:97:58:
                    1d:4a:e3:98:3f:89:51:75:8d:fa:1b:4c:0e:d3:44:
                    eb:da:24:2f:f6:b3:ff:6d:67:5d:27:fd:03:9e:ca:
                    d9:60:ed:4f:c5:89:7b:54:99:ca:de:e3:84:61:4a:
                    2c:d5:29:b0:79:89:5b:a4:61:7a:e1:c9:61:2c:92:
                    db:e7:fa:cf:a4:12:ee:4b:8f:92:39:fa:ae:fb:8e:
                    07:86:84:04:65:d0:16:d3:f4:34:fb:ca:7d:a2:2d:
                    f8:3b:a1:4a:c7:67:2d:f5:47:da:14:91:dc:1a:0a:
                    5a:77:0d:cb:9c:72:1a:9b:a8:6d:a4:3d:1a:39:0f:
                    21:bd:d8:fd:d5:b8:46:9e:2b:1d:5d:4a:d7:b6:52:
                    14:e0:89:79:9a:1d:6e:17:e6:30:5d:4b:9f:7b:25:
                    1c:30:dc:21:a2:cd:d4:59:6d:6d:15:ab:fc:e1:1c:
                    19:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:90:A7:70:AE:CB:E6:C5:7A:91:52:39:21:2F:5F:51:B2:70:AE
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:108::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:9f:fc:70:7c:9a:5c:cd:17:66:1e:59:db:56:f1:84:04:6c:
         80:39:fd:4c:50:52:f8:02:23:05:6e:5d:7c:82:b4:4c:e8:8f:
         90:25:5a:a9:25:b2:bc:0c:8c:df:1a:29:7a:28:ea:37:80:77:
         e4:dc:b9:e3:19:27:4d:d9:5b:9e:d9:90:8f:e8:45:66:0a:eb:
         c5:1e:bc:24:9a:6f:31:2c:0a:8f:e7:68:43:c1:3e:48:88:98:
         74:b3:c1:18:8e:dc:db:bd:a1:e7:f2:6d:56:2d:13:b3:f0:9c:
         c7:32:32:50:7a:5c:b2:15:8c:72:78:f8:02:2e:7b:a7:5e:26:
         8b:48:a3:5f:a1:af:0c:dc:87:6e:da:1f:58:29:69:d1:4a:9c:
         c5:93:aa:4e:1c:3c:24:46:70:a9:6f:5a:57:5d:8e:55:b7:9b:
         28:c9:14:91:8c:ef:7e:a6:32:e1:b0:56:f5:48:60:e3:b6:9d:
         07:07:73:9b:f0:cb:61:89:cc:6e:78:99:31:65:24:12:16:85:
         47:2f:72:73:4d:c4:45:92:6a:22:41:6b:d8:b1:bb:01:cb:2c:
         5c:88:c5:dd:50:4e:0a:ba:a9:e1:05:e0:5d:76:9f:52:89:a3:
         fe:ec:a8:49:06:4d:d6:0f:ab:f6:68:e3:28:bc:1a:7e:5d:69:
         03:ba:4a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:23 2025 by rpki-client