Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131323a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3131323a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          NGrB1q7ed/RKIjgAVq8yLQoxM2EdrhyUDD/akEpRMJU=
Subject key identifier:   AA:A8:4C:CF:EE:A5:8C:07:1B:CE:24:19:75:50:A4:B4:E6:7F:66:A5
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       3661A585BD175F52C4158222D8001B336395EC9E
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131323a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 30 May 2024 12:29:15 +0000
ROA not before:           Thu 30 May 2024 12:24:15 +0000
ROA not after:            Thu 29 May 2025 12:29:15 +0000
asID:                     9009
IP address blocks:        2602:ff62:112::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:61:a5:85:bd:17:5f:52:c4:15:82:22:d8:00:1b:33:63:95:ec:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:15 2024 GMT
            Not After : May 29 12:29:15 2025 GMT
        Subject: CN=AAA84CCFEEA58C071BCE24197550A4B4E67F66A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:b3:8e:2d:d9:d4:b2:9b:af:a3:fb:6c:d7:
                    ad:c3:de:20:99:90:11:fc:f0:94:7f:41:6a:41:7a:
                    16:60:f4:bc:59:1d:91:f3:34:fe:da:cb:cb:7a:3d:
                    1e:a1:80:60:76:ce:2c:28:1a:4a:05:d5:16:5e:a0:
                    3b:aa:82:b7:62:98:c4:67:c4:62:a3:80:8b:dc:8b:
                    64:1b:d2:09:f0:10:09:21:a1:da:fe:76:36:7a:e8:
                    a1:c0:9b:59:17:c6:1f:84:f2:d8:d8:8f:6e:b0:76:
                    47:e1:ec:58:d5:ab:fe:d3:e5:8a:4c:d7:44:b8:a1:
                    47:22:2f:7a:90:de:d5:f4:5d:d5:e5:8c:b0:96:87:
                    58:2a:b8:81:7a:a3:d1:27:64:41:f3:15:d5:21:d2:
                    3e:1a:c5:46:7e:ae:ea:75:da:4e:29:7f:9e:b7:e0:
                    39:4e:9d:54:46:03:7f:30:20:9e:2f:29:97:cf:a0:
                    f8:34:04:63:6a:d1:5e:5c:f8:60:ce:ae:5a:78:36:
                    13:66:84:73:d5:70:d7:5a:91:9a:1d:12:49:b8:61:
                    4f:a7:1b:ab:78:5f:8f:c8:11:e2:79:5e:2e:ea:fa:
                    4e:32:6d:d4:a6:82:d7:e2:ab:3d:6d:51:13:24:4b:
                    01:cf:b3:42:c4:99:6d:60:bd:80:95:1d:0f:73:f9:
                    e3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A8:4C:CF:EE:A5:8C:07:1B:CE:24:19:75:50:A4:B4:E6:7F:66:A5
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131323a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:112::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:e9:cc:f6:f6:c4:c0:16:1c:cd:25:43:c6:cf:20:80:18:67:
         ed:4e:eb:c9:f8:1b:52:d1:c8:3c:6a:8e:5b:75:d4:cb:fe:1c:
         b3:76:56:f5:05:d5:0d:4c:e0:e2:7a:de:8a:21:30:79:f6:13:
         2b:07:d9:44:79:19:30:fa:51:32:56:75:04:eb:a6:4c:52:57:
         7a:b2:8b:4a:f3:c3:67:80:3d:7a:ef:9b:f8:66:8c:be:93:03:
         af:f3:de:4b:08:58:9a:dc:8f:db:6a:66:18:4d:25:d6:80:96:
         1c:42:05:78:ea:16:4d:84:53:5a:93:23:6c:90:82:24:d7:cf:
         a2:48:42:11:a4:16:f2:4f:4e:54:4f:ca:47:09:06:ad:d7:46:
         7c:a7:57:a6:a7:d0:b8:bc:31:bb:20:14:9d:2a:9d:87:aa:5c:
         68:80:51:11:20:70:f3:90:50:c6:1a:21:08:19:84:55:bf:9f:
         26:b4:0c:ef:66:a5:50:c3:13:eb:4d:36:c3:57:26:ec:d2:47:
         f4:88:a2:55:0f:2d:03:67:8d:26:61:5b:8d:36:24:43:83:63:
         82:19:d9:bf:26:2e:d2:df:78:c4:e0:75:7b:28:f8:1d:dd:8a:
         2d:a3:fa:d2:ca:12:f0:0d:72:82:58:2e:b4:7e:e5:9c:44:3b:
         59:ca:7d:d9
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUNmGlhb0XX1LEFYIi2AAbM2OV7J4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjQwNTMwMTIyNDE1WhcNMjUwNTI5MTIyOTE1
WjAzMTEwLwYDVQQDEyhBQUE4NENDRkVFQTU4QzA3MUJDRTI0MTk3NTUwQTRCNEU2
N0Y2NkE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX6zji3Z1LKb
r6P7bNetw94gmZAR/PCUf0FqQXoWYPS8WR2R8zT+2svLej0eoYBgds4sKBpKBdUW
XqA7qoK3YpjEZ8Rio4CL3ItkG9IJ8BAJIaHa/nY2euihwJtZF8YfhPLY2I9usHZH
4exY1av+0+WKTNdEuKFHIi96kN7V9F3V5YywlodYKriBeqPRJ2RB8xXVIdI+GsVG
fq7qddpOKX+et+A5Tp1URgN/MCCeLymXz6D4NARjatFeXPhgzq5aeDYTZoRz1XDX
WpGaHRJJuGFPpxureF+PyBHieV4u6vpOMm3UpoLX4qs9bVETJEsBz7NCxJltYL2A
lR0Pc/njIQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFKqoTM/upYwHG84kGXVQpLTm
f2alMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMTMyM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv9iARIwDQYJKoZI
hvcNAQELBQADggEBALrpzPb2xMAWHM0lQ8bPIIAYZ+1O68n4G1LRyDxqjlt11Mv+
HLN2VvUF1Q1M4OJ63oohMHn2EysH2UR5GTD6UTJWdQTrpkxSV3qyi0rzw2eAPXrv
m/hmjL6TA6/z3ksIWJrcj9tqZhhNJdaAlhxCBXjqFk2EU1qTI2yQgiTXz6JIQhGk
FvJPTlRPykcJBq3XRnynV6an0Li8MbsgFJ0qnYeqXGiAUREgcPOQUMYaIQgZhFW/
nya0DO9mpVDDE+tNNsNXJuzSR/SIolUPLQNnjSZhW402JEODY4IZ2b8mLtLfeMTg
dXso+B3dii2j+tLKEvANcoJYLrR+5ZxEO1nKfdk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:13 2024 by rpki-client on console-fra.rpki-client.org