Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132353a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          1Rt+7aCec5YWJJoiafH4DvPgykC0lG8GWcOHnX0aHwc=
Subject key identifier:   07:B7:86:D3:B9:BA:DC:85:32:96:72:81:7A:19:FC:E3:C1:B4:2F:57
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       15DC52DC99FE664B91C9D3B510ABE812DE602F60
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 30 May 2024 12:29:19 +0000
ROA not before:           Thu 30 May 2024 12:24:19 +0000
ROA not after:            Thu 29 May 2025 12:29:19 +0000
asID:                     9009
IP address blocks:        2602:ff62:125::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:dc:52:dc:99:fe:66:4b:91:c9:d3:b5:10:ab:e8:12:de:60:2f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:19 2024 GMT
            Not After : May 29 12:29:19 2025 GMT
        Subject: CN=07B786D3B9BADC85329672817A19FCE3C1B42F57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:9d:1b:cf:8d:73:d0:90:5e:f7:41:f5:bc:
                    8b:70:79:89:8f:5d:ad:43:00:fc:f2:3b:39:e1:51:
                    4f:dc:84:06:72:7a:52:4e:96:11:50:02:08:87:9b:
                    59:14:a8:a8:67:f7:f9:0c:1f:21:15:cd:84:d4:64:
                    46:33:c9:82:e3:9a:66:84:f1:c9:ae:87:f7:2a:91:
                    8f:63:07:7e:fe:64:a0:9c:ff:e9:02:b3:6a:eb:1a:
                    23:22:ef:0b:04:1c:20:b2:59:74:d2:a2:2f:e8:a9:
                    46:8a:86:12:85:d6:c9:5e:01:37:f0:6b:1a:84:4e:
                    41:7b:08:e0:ad:e3:f8:71:db:6c:66:90:ba:c8:ce:
                    28:86:65:6b:eb:c4:ee:83:7a:c2:91:66:9b:71:c3:
                    35:6d:d4:f4:ff:d9:f9:c6:8a:7f:2b:37:9b:dd:27:
                    e6:3e:b3:a4:72:79:d0:40:75:14:09:f2:ff:c7:bf:
                    b3:9c:c8:4b:89:6c:2d:65:2a:6f:17:f0:7e:17:bf:
                    ff:5b:88:b2:cb:02:f2:d5:03:df:13:d5:ee:d5:e0:
                    22:db:14:4c:42:bf:2d:aa:88:99:8a:b3:4f:9f:c5:
                    03:83:23:a6:9a:8a:f3:e7:8a:0a:d9:bb:cb:00:d8:
                    b3:61:7c:be:a4:d4:2f:49:9c:23:77:6e:0b:3a:01:
                    66:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B7:86:D3:B9:BA:DC:85:32:96:72:81:7A:19:FC:E3:C1:B4:2F:57
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132353a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:125::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:64:2f:db:37:d2:a7:12:95:02:99:cf:3a:84:17:24:8d:b9:
         76:6b:ce:f2:24:25:0c:bb:68:76:98:91:b1:fc:5b:1f:4d:c3:
         7d:16:0b:12:2d:37:bc:cf:ab:af:82:4c:1f:86:f0:43:ea:8a:
         af:dd:c0:72:1c:d7:20:28:9c:4c:22:84:78:98:1b:eb:22:6a:
         2d:34:81:cb:96:d0:22:68:98:1c:ac:93:1c:7b:13:a7:ed:87:
         3d:97:88:9b:c2:b4:cf:14:b6:e2:41:92:38:53:bc:5c:b6:63:
         03:65:cb:6b:15:18:a8:57:e2:d6:df:ac:d1:68:74:7f:ff:db:
         b4:3d:5a:12:a3:96:00:69:f7:be:fa:fe:03:ba:9c:c6:13:78:
         e9:b3:7a:73:bf:41:4d:35:c1:f2:4a:4c:7c:2d:f3:4b:7b:0b:
         76:12:52:f3:40:7c:5a:12:e7:c4:88:58:e8:3e:52:50:79:0c:
         5b:f1:a6:fb:25:42:a4:e8:ef:f8:08:c3:f2:38:b5:2e:11:96:
         9a:b7:25:40:79:84:84:f6:25:e4:d5:de:64:ee:55:05:fb:a8:
         38:ae:43:46:0f:80:e8:7e:7d:db:fc:f5:d2:8c:78:d2:2c:2a:
         fa:79:72:e7:b4:a1:c2:53:16:89:1e:ac:1c:c2:09:48:ab:29:
         10:17:22:1f
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUFdxS3Jn+ZkuRydO1EKvoEt5gL2AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjQwNTMwMTIyNDE5WhcNMjUwNTI5MTIyOTE5
WjAzMTEwLwYDVQQDEygwN0I3ODZEM0I5QkFEQzg1MzI5NjcyODE3QTE5RkNFM0Mx
QjQyRjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre2dG8+Nc9CQ
XvdB9byLcHmJj12tQwD88js54VFP3IQGcnpSTpYRUAIIh5tZFKioZ/f5DB8hFc2E
1GRGM8mC45pmhPHJrof3KpGPYwd+/mSgnP/pArNq6xojIu8LBBwgsll00qIv6KlG
ioYShdbJXgE38GsahE5BewjgreP4cdtsZpC6yM4ohmVr68Tug3rCkWabccM1bdT0
/9n5xop/Kzeb3SfmPrOkcnnQQHUUCfL/x7+znMhLiWwtZSpvF/B+F7//W4iyywLy
1QPfE9Xu1eAi2xRMQr8tqoiZirNPn8UDgyOmmorz54oK2bvLANizYXy+pNQvSZwj
d24LOgFmqQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFAe3htO5utyFMpZygXoZ/OPB
tC9XMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMjM1M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv9iASUwDQYJKoZI
hvcNAQELBQADggEBABJkL9s30qcSlQKZzzqEFySNuXZrzvIkJQy7aHaYkbH8Wx9N
w30WCxItN7zPq6+CTB+G8EPqiq/dwHIc1yAonEwihHiYG+siai00gcuW0CJomBys
kxx7E6fthz2XiJvCtM8UtuJBkjhTvFy2YwNly2sVGKhX4tbfrNFodH//27Q9WhKj
lgBp9776/gO6nMYTeOmzenO/QU01wfJKTHwt80t7C3YSUvNAfFoS58SIWOg+UlB5
DFvxpvslQqTo7/gIw/I4tS4Rlpq3JUB5hIT2JeTV3mTuVQX7qDiuQ0YPgOh+fdv8
9dKMeNIsKvp5cue0ocJTFokerBzCCUirKRAXIh8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:55 2024 by rpki-client on console-ams.rpki-client.org