Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131303a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3131303a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          XPuREG6zZ9LXK9RAiRSgnDLwcyCqH7LBe1/DIPlLOw4=
Subject key identifier:   E0:61:B8:8D:ED:47:EC:DB:26:51:92:0A:6F:E3:C4:52:F5:9A:15:AA
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       62A1A7A0D0DC41DEA16CEAE409048CB655CF6017
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131303a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 17 Jun 2024 19:48:58 +0000
ROA not before:           Mon 17 Jun 2024 19:43:58 +0000
ROA not after:            Mon 16 Jun 2025 19:48:58 +0000
asID:                     29802
IP address blocks:        2602:ff62:110::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 00:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a1:a7:a0:d0:dc:41:de:a1:6c:ea:e4:09:04:8c:b6:55:cf:60:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 17 19:43:58 2024 GMT
            Not After : Jun 16 19:48:58 2025 GMT
        Subject: CN=E061B88DED47ECDB2651920A6FE3C452F59A15AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:f8:a6:70:5e:aa:fd:4a:27:9a:89:d5:4e:
                    7a:3f:16:7f:0a:59:83:5e:cc:6c:e5:24:54:d6:f8:
                    8c:a1:ae:ce:bc:12:88:31:7b:da:71:ef:5d:dc:e8:
                    08:dc:0d:57:17:c5:ca:7e:fd:83:72:08:40:a5:01:
                    01:f8:f5:5d:01:00:b4:c3:00:28:ff:c1:30:e3:b4:
                    d4:d4:c4:05:2d:aa:e8:13:2a:69:e7:65:74:5c:c6:
                    7a:c2:0e:f1:fd:76:88:b4:01:ca:80:de:64:fa:d2:
                    1d:0f:c3:c5:ba:2a:22:e4:ca:4d:9e:6d:3d:f3:d3:
                    db:9a:68:b2:f2:64:e0:1c:7b:b3:ee:1f:f6:be:d4:
                    47:36:89:31:fc:54:38:87:de:e3:8b:13:3d:a4:54:
                    c3:87:45:ae:4d:63:e2:1f:4f:77:7f:a8:95:35:6d:
                    3b:d0:95:8a:ec:40:70:fb:56:51:3c:33:a2:a6:fa:
                    38:6a:db:3a:58:fb:69:dd:a7:f6:c9:06:a1:f9:e0:
                    e1:61:53:ac:3c:e6:b3:5c:42:6c:23:7a:2e:1f:9f:
                    f7:86:36:89:fa:c2:87:3f:0b:3f:73:2d:24:e7:44:
                    71:72:91:c7:b3:7e:e6:11:ee:ef:33:e2:62:fa:51:
                    dd:81:4b:ed:ef:8f:f7:c9:33:4a:ea:d6:1d:32:0f:
                    6e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:61:B8:8D:ED:47:EC:DB:26:51:92:0A:6F:E3:C4:52:F5:9A:15:AA
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131303a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:110::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:a1:7e:74:d5:72:c6:4e:12:2c:2f:fe:21:64:17:c3:98:e0:
         89:3b:68:d4:2e:92:2d:a9:c7:61:d1:98:dd:5e:6c:57:e1:22:
         e8:fd:1d:6b:5c:ea:a2:e7:67:7f:6f:15:ec:fd:9f:d3:4f:86:
         c2:e7:46:88:0e:a1:d4:ce:7b:ad:89:a0:c8:b5:2f:d2:b3:57:
         d6:d1:31:e2:b5:74:f9:60:4a:4a:99:54:b9:66:3e:c8:e1:1c:
         0d:43:f2:a3:6d:e0:de:f8:29:96:01:08:cc:7b:b8:0a:c5:ba:
         e4:48:35:be:09:01:d8:e0:bb:99:ca:ae:2f:ac:6e:24:f6:73:
         16:1b:f3:a5:0f:04:ee:57:53:94:31:4a:c0:66:f7:e5:8e:36:
         bd:e6:aa:ca:77:a7:d1:48:4b:0f:ae:85:99:f0:ae:37:f0:4f:
         e2:12:99:dd:06:d6:e7:32:99:1b:51:52:16:72:d2:a1:54:a8:
         32:68:16:b4:87:65:a9:0a:9c:e0:6a:53:02:dc:17:46:aa:88:
         6e:8c:e0:30:99:30:e6:26:f1:28:1d:15:26:c3:3e:d8:42:11:
         13:e4:af:d8:88:02:b6:5b:b0:36:ed:c6:40:06:ff:e9:2e:a3:
         e2:9f:74:c6:50:6c:d2:af:2c:93:3b:cc:71:72:64:42:7a:f9:
         b5:10:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:32 2025 by rpki-client