Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130613a3a2f34382d3438203d3e20333936333536.roa
File:                     323630323a666636323a3130613a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier:          5s35T1+9x7cW4vBsmaiOzAdcDOJ8NC1zJHMBsd+aejw=
Subject key identifier:   B2:D5:7F:E1:9C:BD:57:4A:1B:68:95:8C:A9:36:BD:49:6C:46:C2:A5
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       64018ACDC4084EB52B559675AA7B22C2EA44A885
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130613a3a2f34382d3438203d3e20333936333536.roa
Signing time:             Tue 11 Jun 2024 10:04:02 +0000
ROA not before:           Tue 11 Jun 2024 09:59:02 +0000
ROA not after:            Tue 10 Jun 2025 10:04:02 +0000
asID:                     396356
IP address blocks:        2602:ff62:10a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:01:8a:cd:c4:08:4e:b5:2b:55:96:75:aa:7b:22:c2:ea:44:a8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 11 09:59:02 2024 GMT
            Not After : Jun 10 10:04:02 2025 GMT
        Subject: CN=B2D57FE19CBD574A1B68958CA936BD496C46C2A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:be:30:ef:13:a6:be:b8:55:a8:03:02:c5:
                    26:f3:22:75:97:c1:a5:7c:46:7d:ac:3b:5f:08:d6:
                    20:db:24:b1:fa:17:07:a9:b9:0a:70:f5:e2:a8:31:
                    50:09:76:af:41:af:34:ce:84:1d:a4:2a:fa:36:66:
                    ef:04:a3:5c:4d:4e:7a:80:d2:dc:a9:d6:22:67:69:
                    9b:ca:99:66:5b:6c:45:4f:bd:5e:a7:34:ac:cb:3c:
                    78:41:75:6b:75:45:b3:46:8c:c7:2e:66:d4:eb:70:
                    07:ff:52:0c:12:fc:22:9d:9c:a0:27:0f:ab:2d:2c:
                    aa:79:3e:8e:48:0a:02:5d:8a:9f:70:d5:a2:70:e7:
                    03:aa:4f:8c:3e:e4:cc:00:69:ed:0d:af:5c:8e:b9:
                    5c:56:1d:91:e8:b7:ec:90:dc:1c:73:c5:99:f5:20:
                    65:66:7e:62:15:3a:25:3e:aa:10:7b:be:24:0c:7e:
                    30:c0:1e:5a:8e:de:4a:f1:69:4a:5d:92:82:ef:01:
                    20:fd:53:07:74:36:08:be:c2:66:9d:a3:45:f3:11:
                    81:65:6d:2b:3d:5a:83:f8:60:26:15:d7:8c:96:de:
                    1e:df:fa:48:f2:bd:d4:5e:50:b5:08:8e:e5:d5:d2:
                    95:87:38:44:84:53:6e:e9:01:d4:91:24:60:6d:18:
                    bd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D5:7F:E1:9C:BD:57:4A:1B:68:95:8C:A9:36:BD:49:6C:46:C2:A5
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130613a3a2f34382d3438203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10a::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:6a:71:ba:08:a6:02:42:79:53:c6:29:cf:be:c2:c3:90:f6:
         18:ca:7b:d6:55:a0:20:fe:ac:c0:3d:90:06:d5:cf:c1:19:f5:
         72:dd:1b:fb:7d:be:95:5e:89:7b:4d:7b:ce:b6:97:f3:ab:09:
         fc:41:21:a5:70:4f:6f:b1:68:bd:c3:0a:b5:87:03:42:aa:0b:
         4f:54:4a:56:ab:4f:6b:6c:eb:4a:1c:39:3b:7d:5e:55:c5:72:
         a6:b9:98:59:ab:41:d1:52:9f:c2:5a:d5:59:07:5e:49:83:a8:
         51:ba:47:c7:d1:54:c3:76:8f:1e:34:84:85:d7:1e:89:83:04:
         20:42:a5:ef:eb:f4:ce:e4:fc:c2:59:5c:6e:aa:3a:8b:c4:57:
         fe:90:0d:fd:c3:04:15:a1:97:2c:bb:79:6e:3e:fe:14:01:d5:
         ee:a3:2d:d7:ff:8d:ec:9b:1a:bd:96:01:03:e1:19:af:94:87:
         cb:4c:79:28:38:e9:2b:d4:3f:d4:1b:aa:41:63:d3:0a:cb:96:
         18:3d:54:47:15:52:f1:6c:ba:d9:2f:98:6c:77:b7:73:88:0c:
         22:79:87:52:ad:89:f4:aa:39:40:59:6f:13:be:f6:5f:38:2f:
         94:61:00:49:2d:8a:5e:8d:c3:28:5f:be:1f:bf:05:05:26:4b:
         d6:1d:5e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:13 2024 by rpki-client on console-fra.rpki-client.org