Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132343a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          49zhgYmVFmGzxINonutjCS3N6m+uKGC6AcqZakVZ5nI=
Subject key identifier:   98:D1:FA:86:5B:BC:13:8C:54:B2:A1:97:3C:84:6B:D1:A2:98:67:7D
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       14B3B400D5655DB6F58B44342A51F0268E3933B9
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 30 May 2024 12:29:18 +0000
ROA not before:           Thu 30 May 2024 12:24:18 +0000
ROA not after:            Thu 29 May 2025 12:29:18 +0000
asID:                     9009
IP address blocks:        2602:ff62:124::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b3:b4:00:d5:65:5d:b6:f5:8b:44:34:2a:51:f0:26:8e:39:33:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:18 2024 GMT
            Not After : May 29 12:29:18 2025 GMT
        Subject: CN=98D1FA865BBC138C54B2A1973C846BD1A298677D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:75:d0:fa:e9:cc:a7:50:04:20:ca:08:d0:
                    1b:74:a0:c7:1e:72:61:d2:15:12:85:fa:be:6c:4d:
                    86:8a:cc:f7:8d:4c:4d:14:70:4a:82:bb:cf:9a:e0:
                    a9:b8:84:5b:a3:73:db:97:10:b2:5b:66:5c:e8:2e:
                    59:4f:ba:43:f7:17:ef:10:c5:c2:a3:00:64:e1:cf:
                    f2:7c:f9:f2:8f:41:0f:b8:31:1e:ce:46:3c:ba:56:
                    c3:d4:da:44:bc:20:e2:b7:9d:b1:8a:31:53:51:be:
                    b8:f6:a6:4f:3d:37:82:a0:80:fe:83:a5:34:49:a9:
                    d9:d5:0c:43:90:4a:23:93:23:3c:5e:b3:0a:23:a2:
                    e4:6b:1a:50:7f:27:a5:de:5e:06:b0:f2:26:80:6f:
                    62:eb:cd:79:14:27:41:05:1d:e4:38:91:2e:98:b4:
                    41:c4:e4:32:cb:48:7e:a1:80:ea:83:4c:26:24:84:
                    9d:96:08:89:de:1f:c6:d0:47:8a:de:39:ca:ce:6f:
                    de:da:2d:34:93:cc:44:78:2c:6e:9a:65:79:d5:ee:
                    9d:cf:f5:4a:f3:72:4b:05:f4:be:84:20:36:8a:25:
                    88:94:00:5b:8f:f2:e9:76:12:95:eb:90:3e:08:4f:
                    cc:e2:85:80:7c:00:2b:09:9e:d6:20:bd:03:77:81:
                    35:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D1:FA:86:5B:BC:13:8C:54:B2:A1:97:3C:84:6B:D1:A2:98:67:7D
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132343a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:124::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:e9:6e:28:e4:b0:16:45:72:68:57:59:db:52:9c:33:96:f4:
         2e:af:a3:50:92:61:d8:7c:ca:15:74:21:19:e6:72:a5:fd:48:
         8f:e3:c7:fc:da:d2:3d:f3:7d:7d:06:65:5f:c2:25:6b:98:72:
         f8:8e:d2:81:59:fc:fd:b9:9d:6b:ba:31:ca:89:8a:11:fd:e0:
         1b:61:3f:dc:64:05:ab:80:bd:9b:93:96:96:99:53:c7:41:71:
         a5:0e:7e:71:ae:21:8a:54:26:23:b6:54:e4:9d:ce:7c:fd:8f:
         c5:1f:d2:4a:82:5a:c8:e5:1b:e8:f0:56:05:eb:e5:cf:3d:6f:
         d2:e5:e2:9a:d6:7a:76:80:3a:4d:fa:1e:a4:93:85:99:ec:70:
         fd:a1:b1:ed:01:7a:17:9b:90:f6:83:9c:cc:32:7f:de:88:75:
         e9:50:a8:5b:64:ad:4a:16:ee:0c:0b:df:90:ed:4b:d5:ec:23:
         85:01:c5:ae:fd:ac:af:9f:19:e4:fa:f8:70:3f:df:4d:f3:61:
         fa:a2:92:9c:da:d8:b1:d9:9b:1d:c5:a3:da:54:37:ff:13:79:
         97:f9:c0:14:d1:e7:63:f5:12:9a:01:ab:6b:9a:07:c4:9f:ca:
         1d:cc:26:70:4f:f7:14:87:4f:76:a7:88:be:a1:c1:43:44:4b:
         d2:c5:4a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:55 2024 by rpki-client on console-ams.rpki-client.org