Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131353a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3131353a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          BflOTfMOwNbnOJr2PBedMMqPzRAEczM4KC33PF1Gloo=
Subject key identifier:   37:34:52:58:13:0A:4F:5B:51:58:71:20:1F:C8:6B:DB:9C:E2:87:61
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       401510438C9B611667926A28D2B803402B7D1038
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131353a3a2f34382d3438203d3e203239383032.roa
Signing time:             Fri 14 Jun 2024 14:48:58 +0000
ROA not before:           Fri 14 Jun 2024 14:43:58 +0000
ROA not after:            Fri 13 Jun 2025 14:48:58 +0000
asID:                     29802
IP address blocks:        2602:ff62:115::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 00:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:15:10:43:8c:9b:61:16:67:92:6a:28:d2:b8:03:40:2b:7d:10:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun 14 14:43:58 2024 GMT
            Not After : Jun 13 14:48:58 2025 GMT
        Subject: CN=37345258130A4F5B515871201FC86BDB9CE28761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:d4:21:3a:90:0f:89:42:ff:ed:c2:a8:e2:
                    95:12:1e:bb:9e:b3:be:88:71:87:5d:99:b0:63:3c:
                    f1:95:77:b7:ac:33:d0:63:f5:f3:ab:45:45:5e:fa:
                    02:c1:59:5e:7e:e9:d8:27:08:46:11:fe:21:93:f2:
                    98:17:54:16:b8:a6:86:7e:92:49:d8:1c:a9:04:f5:
                    f0:2c:ce:a7:26:8b:46:55:bd:9d:eb:f9:7c:1d:74:
                    05:8f:a9:3f:6e:3a:0d:b9:ad:30:53:3f:70:e5:b3:
                    92:cb:be:2d:45:07:36:b0:71:74:72:8d:37:46:c7:
                    a6:18:19:bf:c8:85:af:50:5e:ee:8b:27:f4:21:20:
                    c1:27:9a:b1:d1:e3:97:71:27:45:fb:16:2d:d5:5b:
                    17:ec:11:cd:a1:94:75:18:53:c9:d1:b5:ce:69:23:
                    ef:3b:c2:e8:76:4a:ae:98:1f:c9:56:68:b9:50:0b:
                    87:fb:db:6b:e1:65:91:1a:df:17:af:19:25:91:25:
                    af:c1:aa:97:7a:1e:a1:ac:d1:24:d3:6f:75:0b:b1:
                    5c:90:e6:47:e2:e0:b6:5d:e4:19:dc:a4:66:fc:4b:
                    44:f8:b7:18:d6:53:5b:80:64:b5:62:3d:1d:ad:07:
                    24:ea:29:c1:f5:b3:f7:39:82:26:c0:e3:29:06:d7:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:34:52:58:13:0A:4F:5B:51:58:71:20:1F:C8:6B:DB:9C:E2:87:61
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3131353a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:115::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:db:94:7e:a9:d8:ae:26:4e:28:3d:6f:1f:f3:23:9b:41:89:
         52:43:34:91:a8:0c:9f:7b:fd:db:b8:ce:25:b4:be:2f:61:ae:
         74:00:4d:3d:3a:0e:51:35:95:95:b7:f7:14:60:d6:91:38:82:
         33:92:47:c1:0c:78:d3:81:2f:2d:7a:b2:b5:64:19:ba:0f:e7:
         03:63:8e:1e:c3:70:c7:e1:21:44:23:8f:c5:14:5a:85:6d:3b:
         19:f3:97:d7:ff:19:88:df:0a:29:2d:ea:85:55:1b:8c:ac:bb:
         a7:1e:ae:0e:a0:1d:08:d8:e7:56:2f:c4:05:eb:6f:6e:5c:da:
         13:10:02:7a:ce:fb:60:8a:cc:14:e6:3b:23:1a:39:db:25:2b:
         59:3b:16:d6:83:fa:27:cf:e6:62:10:ff:c8:24:ab:ae:1b:5d:
         f2:24:1d:52:ad:01:14:9a:87:4b:7b:18:19:ef:51:43:9a:2f:
         69:a9:70:b3:53:6f:9a:16:70:63:da:be:01:c6:29:14:ec:42:
         05:8b:d1:60:0a:9f:70:b0:11:3d:b0:e8:58:69:a1:72:3b:4c:
         32:da:67:15:b4:26:6c:9d:08:c1:ab:fa:2e:21:e0:ac:7c:ea:
         db:df:3c:68:3b:9b:be:bf:8a:2b:be:8f:0d:7a:70:04:7e:07:
         f4:cb:b7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:37 2025 by rpki-client