Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132363a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132363a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          LnnenjA06r4U1usDWda8c62x74ggfSxAynDloCOsUmE=
Subject key identifier:   97:86:CA:95:2B:82:10:E2:A9:E8:7E:C9:DF:B8:DC:12:25:6B:AD:2E
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       4994AB9F8FF863330E77385DE6E83D087854831D
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132363a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 30 May 2024 12:29:19 +0000
ROA not before:           Thu 30 May 2024 12:24:19 +0000
ROA not after:            Thu 29 May 2025 12:29:19 +0000
asID:                     9009
IP address blocks:        2602:ff62:126::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:94:ab:9f:8f:f8:63:33:0e:77:38:5d:e6:e8:3d:08:78:54:83:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:19 2024 GMT
            Not After : May 29 12:29:19 2025 GMT
        Subject: CN=9786CA952B8210E2A9E87EC9DFB8DC12256BAD2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:5a:4d:1b:16:d9:c6:06:e7:41:f1:19:91:
                    29:38:34:bc:1e:8b:c8:87:a8:35:ba:5f:13:74:74:
                    88:d9:40:4d:d9:2c:c2:0a:45:e3:45:c2:38:25:ed:
                    54:a6:53:62:d8:34:ee:8c:33:70:47:47:a1:1c:cb:
                    88:7f:87:c9:61:fa:d1:9a:7d:84:45:a2:74:8b:7b:
                    59:26:30:a0:93:ee:97:07:67:57:6d:a0:30:c3:c4:
                    14:b6:d0:de:6d:15:ef:18:cc:9e:86:39:83:c6:f7:
                    6e:04:8d:77:57:ac:a2:21:8b:92:0c:1a:f9:80:87:
                    a1:d4:09:0a:d7:e2:cd:b6:db:23:bc:31:be:32:73:
                    c3:e7:d1:95:07:fd:f1:d3:93:d0:46:16:3a:8e:09:
                    47:f8:a4:46:07:22:bb:f1:f1:fe:44:fb:0c:5f:48:
                    5a:cc:7d:07:09:da:ae:70:92:65:20:58:67:86:86:
                    87:2d:cc:94:12:d3:48:79:d0:30:cd:55:82:87:c5:
                    63:71:50:31:60:f3:87:26:51:aa:52:4c:ae:a5:d7:
                    e1:9f:b0:62:5b:01:94:d3:2c:4e:b6:70:73:78:8b:
                    d2:e6:e6:60:51:4a:94:c8:5e:40:3c:c5:94:b0:da:
                    fa:2a:cf:fc:41:8a:6d:88:1c:6e:e3:76:b1:f6:07:
                    c7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:86:CA:95:2B:82:10:E2:A9:E8:7E:C9:DF:B8:DC:12:25:6B:AD:2E
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132363a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:126::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:58:de:ec:77:d7:cc:23:0d:77:a9:e5:cf:04:af:1c:c7:a5:
         93:17:69:d0:8e:1c:49:67:88:0b:10:00:88:4f:91:e9:57:90:
         cd:73:01:db:c6:b2:d0:91:7f:1b:d7:fa:09:c0:c6:61:50:dd:
         ea:c8:d9:66:7a:48:d7:1b:8b:52:a5:6f:22:ec:c1:ac:29:c6:
         02:55:14:ff:d7:5a:e4:a6:14:b1:a9:7f:b6:f3:d4:11:5e:98:
         77:59:12:f9:fb:4b:cb:31:8a:a3:f1:89:b4:fd:4b:7d:12:dc:
         ee:76:a4:e7:4e:7f:ba:b7:ca:2b:dc:ec:77:d5:f6:1a:ba:80:
         df:b0:65:b3:4e:9c:1c:dd:99:e2:76:0d:82:aa:eb:8b:96:7e:
         85:00:0a:a2:c1:ca:de:98:71:5c:c1:03:07:c4:b6:a3:5e:c1:
         f0:65:61:0a:d9:53:ad:2e:ac:98:d4:5f:1b:94:58:ee:f1:6d:
         49:81:b9:8e:31:5f:d4:dc:95:2f:ec:66:8d:68:55:81:24:ed:
         b4:30:37:e2:73:54:38:e2:18:bf:0e:0e:9d:f3:ec:34:0b:ac:
         7e:2b:bd:59:df:85:eb:b5:ed:48:c8:aa:c6:95:42:e7:8f:10:
         67:b0:c0:41:e3:ab:9e:48:bd:ef:b2:8b:ab:98:c2:f4:d4:56:
         8e:b0:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:13 2024 by rpki-client on console-fra.rpki-client.org