Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e20333936333536.roa
File:                     323630323a666636323a3130623a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier:          nsbIMGMMFJ0dVL0RCgIIrHMXB4gK9OwNZWEiHWZOapc=
Subject key identifier:   88:F2:CA:75:6F:F3:D2:95:62:B1:1A:89:9E:5D:F2:9B:5A:D7:A6:4F
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       07F6990A668D13E17CFBFCA269DAF93975894FC8
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e20333936333536.roa
Signing time:             Tue 11 Jun 2024 10:04:01 +0000
ROA not before:           Tue 11 Jun 2024 09:59:01 +0000
ROA not after:            Tue 10 Jun 2025 10:04:01 +0000
asID:                     396356
IP address blocks:        2602:ff62:10b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f6:99:0a:66:8d:13:e1:7c:fb:fc:a2:69:da:f9:39:75:89:4f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 11 09:59:01 2024 GMT
            Not After : Jun 10 10:04:01 2025 GMT
        Subject: CN=88F2CA756FF3D29562B11A899E5DF29B5AD7A64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:c5:db:4d:8f:26:bc:9a:03:dd:43:73:cd:
                    1b:2e:19:09:f0:1a:c9:e2:b7:0b:a4:01:96:06:d9:
                    3a:5a:bc:12:c2:d5:35:fa:d2:4b:74:b1:63:e8:11:
                    4d:6b:01:70:36:7b:83:f6:04:00:77:af:54:00:0e:
                    d5:c3:dd:44:b5:f4:7e:7e:79:20:c8:b2:71:4a:3d:
                    55:d9:a9:90:d1:18:d9:1d:10:b8:82:87:b3:46:0f:
                    e5:0c:53:07:db:57:f4:d1:70:cb:a4:6e:3b:18:79:
                    2f:59:e8:22:5e:60:11:22:9d:3b:d6:f9:11:49:fe:
                    8c:95:f9:7c:01:34:c1:48:4b:9b:df:06:e3:e7:b5:
                    6a:21:35:af:19:c7:56:a8:1a:06:4e:8e:39:48:f0:
                    be:11:53:0c:60:b6:e5:22:9e:3a:67:f9:f5:66:05:
                    a0:75:0c:47:22:3c:5e:2b:90:c1:18:e8:38:bf:d1:
                    45:f6:09:58:ee:b1:fc:e8:34:25:cb:24:aa:2f:96:
                    e5:4a:26:01:70:2e:6f:4f:99:dc:b7:29:e8:11:40:
                    aa:fa:a0:1e:e8:8a:3a:65:b2:fd:e8:34:4c:83:62:
                    27:5c:73:5b:0f:8d:34:c7:c9:af:80:e2:b6:13:33:
                    6e:a8:d2:76:ee:e8:e8:d5:7b:75:4e:1a:47:70:ea:
                    ac:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F2:CA:75:6F:F3:D2:95:62:B1:1A:89:9E:5D:F2:9B:5A:D7:A6:4F
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10b::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:08:8a:80:6c:51:39:d1:dd:92:e0:f2:f8:f8:4a:7a:b1:fb:
         a7:83:fd:f8:d6:4c:f6:90:71:e7:e0:a1:49:05:8f:d6:29:77:
         d1:29:ef:fc:8f:d5:13:0b:e3:e1:b2:38:8a:61:68:c1:ba:66:
         a7:fb:b0:7c:02:53:1d:1f:85:de:80:7e:59:ea:1d:45:53:2c:
         7d:54:c4:30:97:ce:ee:ef:5b:5b:11:50:48:26:61:d1:3b:2b:
         1f:1e:93:0f:f5:13:44:26:a5:5d:c8:40:b4:aa:b8:53:85:81:
         56:0c:1b:cf:56:8d:d7:9d:69:97:b4:28:15:74:80:7c:3f:1b:
         e7:87:92:34:ab:14:28:98:0d:e0:02:51:8a:3d:e8:66:fe:6b:
         52:80:8a:8c:fa:b9:2e:29:6e:9b:81:c3:fe:36:9e:73:19:f1:
         62:ba:a4:a6:14:98:a5:5b:71:f2:f4:52:e3:1d:a7:9b:37:92:
         ac:f0:1a:71:d4:60:06:6f:12:e0:3a:b0:e2:d6:96:86:1c:7f:
         50:9b:c2:e9:83:39:fd:95:46:da:b7:d7:9f:86:2e:24:6a:c2:
         7c:5f:ae:f7:1e:23:74:b4:fe:75:fc:1f:a9:48:39:58:51:6e:
         74:e7:49:4b:c0:fd:7b:63:05:a0:b0:ba:c0:33:65:ce:00:26:
         dc:ba:2d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:13 2024 by rpki-client on console-fra.rpki-client.org