Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130653a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          D9xp6NFac8BKfDvMqpKKy+h0EdsYHyzKb1rK9c2hzd8=
Subject key identifier:   31:1C:4E:D8:AF:CB:18:13:EA:EF:A1:ED:52:37:05:6C:75:8E:F5:EF
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       5ECFA0F13A72751080BB5CBB2EDAD7F332CFB9FA
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 17 Jun 2024 19:48:58 +0000
ROA not before:           Mon 17 Jun 2024 19:43:58 +0000
ROA not after:            Mon 16 Jun 2025 19:48:58 +0000
asID:                     29802
IP address blocks:        2602:ff62:10e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cf:a0:f1:3a:72:75:10:80:bb:5c:bb:2e:da:d7:f3:32:cf:b9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 17 19:43:58 2024 GMT
            Not After : Jun 16 19:48:58 2025 GMT
        Subject: CN=311C4ED8AFCB1813EAEFA1ED5237056C758EF5EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ae:c8:9c:a2:50:63:de:77:ab:64:04:ce:93:
                    fd:a3:8d:9d:23:ba:b8:c7:fd:e7:4b:73:ec:5b:e3:
                    4c:1b:ee:47:3c:f4:b6:c8:a1:95:5e:00:6b:9d:62:
                    7f:48:95:36:7a:4c:03:56:19:b9:17:dc:b4:64:93:
                    fb:86:ec:64:8c:1f:2b:f1:7b:16:fc:77:26:8c:f6:
                    f3:02:0c:96:b5:2f:15:b0:0c:c3:12:f0:59:d9:ef:
                    d6:67:3e:a7:82:2b:e5:93:cb:53:10:80:af:5d:db:
                    45:cf:fb:5f:87:b8:60:8e:cc:86:3e:e9:8b:5b:01:
                    ca:9f:7d:fd:0e:fd:f6:04:38:82:1b:96:3a:c7:c3:
                    67:7e:d8:a0:e3:e8:b2:4f:67:b0:aa:81:f9:45:03:
                    f5:e1:6f:dc:ca:3f:3e:67:f4:d8:08:de:e2:3e:95:
                    d6:90:4a:3f:96:12:ee:af:36:5e:58:59:6c:8a:7a:
                    fe:ba:ef:af:f9:cf:cd:61:87:98:bf:e4:6a:c2:1a:
                    51:ea:5e:e7:8d:c0:4e:0b:d4:da:40:c9:4e:c8:a4:
                    7d:69:cc:dd:c9:37:e1:d0:7c:e9:9b:cb:ea:0a:c0:
                    39:4f:fe:eb:60:3d:00:fd:c7:cf:c1:ae:20:1a:f9:
                    9a:7a:dd:38:2b:29:18:ef:e3:a5:f9:52:99:9e:ae:
                    1d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1C:4E:D8:AF:CB:18:13:EA:EF:A1:ED:52:37:05:6C:75:8E:F5:EF
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10e::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:12:0a:bc:de:41:b6:ef:40:8a:02:68:93:a7:4e:de:e8:
         62:60:a3:d1:34:f4:bf:81:1a:c5:52:c9:6e:59:d6:40:b9:4c:
         8a:52:47:ac:96:8c:0c:76:ab:70:e5:56:51:51:50:ea:c8:f0:
         c2:25:34:d0:5f:73:82:82:ff:c9:01:8c:55:e7:e2:c3:86:da:
         e2:c0:fb:c4:ac:7c:36:76:1a:d3:3b:54:98:c8:78:f1:e3:fc:
         78:a5:c9:3b:da:d0:8d:ba:6c:e0:12:d8:bf:5d:22:95:43:3c:
         39:cf:66:f2:91:ba:8c:de:e6:c2:ba:de:db:39:b8:0f:81:69:
         50:45:dc:9f:13:17:09:3c:24:cb:17:a2:a7:bc:05:8b:7b:51:
         c2:9b:eb:bd:6c:36:98:0e:de:80:fd:09:d9:22:0b:3d:d7:fe:
         39:90:68:95:f3:8f:e2:38:ef:0d:f4:fc:ec:1a:47:b2:1a:59:
         c1:47:75:85:2b:8c:8b:d5:7c:c3:88:30:c6:af:04:ef:23:bf:
         dd:76:0b:44:ca:53:97:8f:99:16:cd:34:a2:ef:d9:b7:44:2a:
         63:5c:54:6b:92:7a:34:4f:4c:dc:15:64:15:99:12:a1:c3:31:
         48:a0:a6:63:c8:6a:ec:9b:af:65:33:9c:43:c8:4b:c2:33:52:
         ba:bc:65:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:55 2024 by rpki-client on console-ams.rpki-client.org