Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e20333936333536.roa
File:                     323630323a666636323a3130653a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier:          eJYEqJNrSJCpBzGsyedrx71choj72aRCTgtP1zPepdI=
Subject key identifier:   CE:B2:08:9D:BE:A4:7E:76:23:9F:4B:4D:AA:D0:54:46:97:8A:7B:E2
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       05525FDB846908F9A659DE2DE049A3DC6DDAFC5A
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e20333936333536.roa
Signing time:             Tue 11 Jun 2024 10:04:00 +0000
ROA not before:           Tue 11 Jun 2024 09:59:00 +0000
ROA not after:            Tue 10 Jun 2025 10:04:00 +0000
asID:                     396356
IP address blocks:        2602:ff62:10e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:52:5f:db:84:69:08:f9:a6:59:de:2d:e0:49:a3:dc:6d:da:fc:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 11 09:59:00 2024 GMT
            Not After : Jun 10 10:04:00 2025 GMT
        Subject: CN=CEB2089DBEA47E76239F4B4DAAD05446978A7BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:73:eb:ad:45:be:7f:92:35:3e:87:0e:ab:
                    c3:d5:1c:8b:d0:4d:fd:0b:96:62:30:70:e8:dd:fa:
                    19:ad:74:3e:a9:c9:80:94:97:6c:20:e6:c6:0b:65:
                    18:70:5a:be:71:22:98:7f:d2:af:a4:64:d4:c8:7f:
                    ad:71:04:0e:dd:b6:d8:b6:89:c5:96:55:e1:d4:31:
                    83:94:b1:d4:ad:1b:ee:72:7c:a2:52:25:f5:58:0e:
                    ba:4d:30:93:df:cd:6c:54:2e:4a:3e:f5:b0:49:9b:
                    d3:57:f8:06:45:ba:f4:89:32:ca:5f:a6:76:c9:68:
                    9a:04:32:41:43:19:82:a0:99:10:62:7b:89:69:f2:
                    b3:38:1d:64:b6:18:d6:53:56:8c:91:da:34:7f:d4:
                    4e:26:33:06:f6:d6:6c:74:8f:68:c7:c6:f4:41:6c:
                    95:cc:e9:68:a4:13:4e:a3:6c:04:10:b6:2d:bc:cd:
                    bc:c9:90:af:be:93:11:74:4d:58:3e:6b:50:5d:bf:
                    4a:cb:21:1d:65:13:49:bb:78:ad:70:bf:c7:9d:b4:
                    18:48:1b:b7:f9:54:35:ea:78:f9:ca:96:f8:8b:37:
                    9f:4e:8c:42:2d:fd:e2:f1:c1:09:8c:af:ee:7b:ec:
                    ec:aa:ce:65:7f:c6:bd:6d:94:30:96:f3:17:d3:a7:
                    e8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B2:08:9D:BE:A4:7E:76:23:9F:4B:4D:AA:D0:54:46:97:8A:7B:E2
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10e::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:37:27:82:75:9f:47:9e:98:b2:67:ff:7c:41:68:f4:d9:b4:
         82:ba:26:c5:a1:51:9c:d0:62:60:52:2c:a9:0a:cc:73:a9:e0:
         c5:a5:09:e8:bc:a9:a9:1d:39:74:44:77:a4:ad:38:37:7b:ee:
         eb:03:38:6c:80:d5:41:9c:48:43:c3:c3:a1:65:c0:af:6b:45:
         48:1f:f7:38:44:e3:88:d8:4a:ba:17:29:e5:5f:29:6d:07:cf:
         53:a5:6e:50:e9:22:b7:62:db:db:71:af:c6:ce:d0:b6:d9:2d:
         66:cf:c2:74:75:65:58:8c:d9:a8:bb:ad:9f:7b:c2:69:1d:76:
         6c:61:c5:1d:21:34:be:eb:5e:f8:5b:fd:fa:4c:9a:9f:28:08:
         e4:c3:f7:4d:6b:23:66:3e:00:11:7d:a5:96:a0:bd:d0:89:01:
         43:23:df:c7:17:e1:99:ce:7d:e2:9e:d5:de:a2:e0:04:1b:11:
         c6:a2:ae:9e:c1:cc:ec:f5:77:fd:f9:b2:d6:ff:76:f8:b7:85:
         22:41:e5:2e:b7:b7:aa:8c:1e:aa:4e:44:63:04:a6:fe:72:a2:
         93:b3:3c:cd:95:d0:82:3b:b1:34:54:22:8a:95:38:b8:9b:99:
         f4:d8:d8:c5:b0:1f:37:fb:b3:32:b0:6e:55:ea:49:e0:25:ae:
         55:38:73:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:13 2024 by rpki-client on console-fra.rpki-client.org