Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131313a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3131313a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          fWDuK/tgjBZ0ouW2DH2J1acMaxnPNGXlEg//0o2fKP0=
Subject key identifier:   32:EC:26:86:FD:FC:B1:AE:9B:A2:71:11:63:A7:E3:A9:95:B8:51:4A
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       1D5844ABF904DEED97610FFA7AB5770054932226
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131313a3a2f34382d3438203d3e203239383032.roa
Signing time:             Fri 14 Jun 2024 14:48:58 +0000
ROA not before:           Fri 14 Jun 2024 14:43:58 +0000
ROA not after:            Fri 13 Jun 2025 14:48:58 +0000
asID:                     29802
IP address blocks:        2602:ff62:111::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:58:44:ab:f9:04:de:ed:97:61:0f:fa:7a:b5:77:00:54:93:22:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 14 14:43:58 2024 GMT
            Not After : Jun 13 14:48:58 2025 GMT
        Subject: CN=32EC2686FDFCB1AE9BA2711163A7E3A995B8514A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4b:83:5e:61:8a:3f:e7:60:b6:f2:c9:ed:76:
                    97:a9:6a:99:ff:53:a0:43:f2:3f:37:95:96:ec:ff:
                    02:ca:6e:74:4c:d2:92:ca:45:87:d9:1a:80:cb:80:
                    1c:b6:6c:f6:b0:bc:fa:08:3b:77:21:bb:22:8d:ee:
                    6c:e8:30:bf:a8:5f:b2:f8:6c:4b:a4:dc:da:35:4b:
                    ff:39:2c:ad:b7:54:f6:0b:07:a8:79:b0:02:cf:7b:
                    82:46:3b:6b:c9:37:54:7f:d1:89:cb:5d:80:ee:c8:
                    2b:c6:f8:b2:f3:df:85:c4:48:40:74:d8:19:09:96:
                    b9:71:53:0b:5d:2b:47:de:3e:cf:4f:6e:c2:f2:64:
                    c5:e2:62:6a:52:40:96:26:55:c9:0c:7b:09:63:9b:
                    1c:d3:bb:de:c4:6b:8b:8e:41:9d:9b:55:a7:ac:75:
                    b7:c8:c1:bd:c1:31:24:12:14:4d:a7:c9:8e:51:2d:
                    e5:6a:11:b7:96:f1:6d:8c:bc:7e:04:7f:68:2e:f4:
                    c0:9a:fa:f0:82:65:cc:e6:ac:b4:1f:e4:0e:02:1c:
                    4c:81:d7:ae:57:21:2b:a1:33:68:a0:4d:27:e2:8f:
                    3b:74:9f:b7:a6:04:a0:24:9f:41:10:d6:1d:95:44:
                    5d:6e:d8:38:5b:0c:1c:14:91:2a:a2:0b:22:33:5b:
                    e3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EC:26:86:FD:FC:B1:AE:9B:A2:71:11:63:A7:E3:A9:95:B8:51:4A
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131313a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:111::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:57:37:4e:df:22:c8:73:dc:b9:73:04:d6:28:b0:4b:c7:
         49:1e:20:6f:55:30:c1:f4:54:76:4d:a8:86:7d:b2:a5:ed:85:
         a8:cf:47:f1:6b:a5:a5:76:98:82:53:3e:e0:a4:58:cf:23:68:
         1e:41:4c:6a:bc:2e:e5:e7:5f:60:f6:b4:cf:12:6d:31:9f:7a:
         7f:0b:34:a6:43:c5:6e:80:c9:2b:64:4f:ac:dc:5e:ac:d7:f6:
         20:0a:f9:ef:ec:43:a2:0e:1e:3f:ba:a1:db:37:c3:ea:aa:ae:
         c1:00:8b:a8:bf:b0:b8:4f:2d:0c:08:b1:86:40:db:df:7f:e2:
         de:7f:1c:0c:e7:c8:f6:58:ae:c0:de:e9:83:6b:d2:d6:0e:e3:
         03:b5:04:1e:7c:90:71:59:33:71:b6:ff:78:77:ce:5c:98:d4:
         42:c8:74:b8:eb:39:b1:91:fd:7c:99:94:76:29:ba:42:1a:34:
         82:d0:e3:53:af:f0:a9:78:91:f3:1f:03:9e:a5:a9:ca:59:bb:
         04:d3:20:6e:94:85:d0:d3:8e:06:da:ed:e5:1b:f4:59:cb:f8:
         34:bd:c5:04:c8:fc:1d:02:c6:0e:92:5b:42:db:fc:30:a4:fe:
         87:6f:da:1f:d7:19:98:2a:80:0a:e8:25:f1:b7:f9:1c:44:49:
         16:de:19:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:55 2024 by rpki-client on console-ams.rpki-client.org