Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130623a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          GXns/Hcr9oh4MOIjDmLT9yLxL1/HB+891E68fqaPpAg=
Subject key identifier:   80:27:E7:B1:9B:44:06:20:D6:43:CD:0B:AA:1F:4E:7A:09:6B:8A:6C
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       60E93A94EA93CBEC9EB7F3140758C4D407005199
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 17 Jun 2024 19:48:58 +0000
ROA not before:           Mon 17 Jun 2024 19:43:58 +0000
ROA not after:            Mon 16 Jun 2025 19:48:58 +0000
asID:                     29802
IP address blocks:        2602:ff62:10b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e9:3a:94:ea:93:cb:ec:9e:b7:f3:14:07:58:c4:d4:07:00:51:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 17 19:43:58 2024 GMT
            Not After : Jun 16 19:48:58 2025 GMT
        Subject: CN=8027E7B19B440620D643CD0BAA1F4E7A096B8A6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0c:4a:c0:05:b7:cc:68:d3:ee:cb:d1:5b:bc:
                    0f:29:a6:79:89:58:4b:0b:bb:aa:1b:d6:6e:97:cf:
                    6f:5d:12:be:4c:da:62:62:85:21:98:12:8f:44:bc:
                    27:8b:a0:dc:15:be:99:ad:77:ee:9e:0f:81:53:86:
                    f8:27:a8:48:46:85:32:56:4e:d1:95:1d:7d:a7:9b:
                    28:6d:4e:82:3d:a3:4e:c2:e7:a0:b5:6c:7b:57:f6:
                    68:5d:1f:b9:1c:93:da:fb:68:2a:2d:1a:2a:c1:5a:
                    ed:b6:d0:7a:3f:3a:ef:3c:a3:78:84:fa:be:a7:a5:
                    99:e4:52:c1:10:1f:bb:42:3d:0d:96:18:b8:42:4e:
                    b5:d9:f5:56:0d:d1:fb:d9:db:15:c3:6c:36:95:c9:
                    f6:2b:ea:2c:a6:d9:36:5a:de:82:fd:b2:4f:bb:74:
                    4d:69:36:69:14:ca:0c:05:cc:6e:b4:36:12:09:22:
                    b1:e5:0b:61:0e:8d:8a:24:21:11:1e:1b:f1:b6:92:
                    e3:cb:13:7c:0f:31:02:74:5a:35:7e:8e:f3:f5:03:
                    54:df:b1:c8:1d:7f:a4:c2:fc:52:ee:93:65:2c:3f:
                    06:16:04:11:0f:fc:49:e2:f7:ec:dc:79:53:26:00:
                    e4:fc:d1:c3:14:5c:8d:83:58:91:f9:ba:ad:f8:e6:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:27:E7:B1:9B:44:06:20:D6:43:CD:0B:AA:1F:4E:7A:09:6B:8A:6C
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10b::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:5a:c0:b0:40:6c:17:fe:b5:2d:55:5a:8a:dc:ee:40:a5:b4:
         b6:4e:6c:2c:52:d6:4c:69:ae:99:b1:9f:a3:00:6c:9a:6c:93:
         6f:94:6a:61:33:9e:52:a4:82:a8:49:4e:5a:ae:18:e0:13:60:
         6b:06:ed:1a:01:44:ea:d8:90:67:2b:5d:5b:55:46:7e:31:98:
         c6:f9:57:91:22:df:54:90:2e:9f:fd:76:67:06:ba:7a:f6:fb:
         82:e0:6f:8f:ce:1c:9d:5b:bc:48:8b:af:4a:93:91:a7:43:20:
         14:7d:a2:d7:ff:a9:6e:4e:44:e9:47:8f:61:64:c6:c4:17:de:
         78:48:2e:00:dd:0a:5d:67:a9:c3:ef:3f:08:e5:6b:0f:4d:85:
         fb:45:b7:a4:5a:3c:e0:11:84:ca:1f:b9:c4:2f:0a:cc:b7:eb:
         3d:f6:57:8d:cc:ab:29:71:16:b9:91:14:1f:db:03:cb:6a:dc:
         8f:9e:9b:9a:e1:45:6d:ff:ae:0d:30:cb:5d:0d:cc:fe:49:68:
         fa:88:a2:8f:a2:17:9b:a8:01:c8:63:5b:79:e7:3f:62:b4:49:
         8b:4e:8e:35:eb:fa:1f:a1:47:03:02:20:54:f0:c1:51:b9:11:
         03:eb:2c:3f:bf:84:e0:1f:97:2b:35:2a:2c:d5:05:41:16:c2:
         56:d2:da:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:13 2024 by rpki-client on console-fra.rpki-client.org