Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132373a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3132373a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          1dCOGc5ae72G0BKX5WjRqiePWaDJ5e9XuYhVdAFWzlg=
Subject key identifier:   09:76:31:1B:47:C0:61:FF:3B:E7:6A:4C:B4:DB:C4:91:92:F3:7C:CC
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       5A46657DD41BB62F7C70D3EE425FA46691F23068
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132373a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 30 May 2024 12:29:20 +0000
ROA not before:           Thu 30 May 2024 12:24:20 +0000
ROA not after:            Thu 29 May 2025 12:29:20 +0000
asID:                     9009
IP address blocks:        2602:ff62:127::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:46:65:7d:d4:1b:b6:2f:7c:70:d3:ee:42:5f:a4:66:91:f2:30:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:20 2024 GMT
            Not After : May 29 12:29:20 2025 GMT
        Subject: CN=0976311B47C061FF3BE76A4CB4DBC49192F37CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5b:c3:a6:14:ea:e3:ba:a9:52:c4:5f:d9:59:
                    24:ca:0d:24:97:48:ee:2a:b6:d9:e7:a1:14:99:3f:
                    1b:10:5c:1a:af:64:b7:3c:dd:71:64:6b:60:96:fb:
                    72:c0:67:99:5c:b2:15:35:77:62:e8:cb:57:69:d4:
                    23:54:5f:47:3c:fa:b9:5f:72:c4:53:19:59:78:0d:
                    17:ea:8f:06:52:98:13:3d:74:0f:a8:af:fc:ae:28:
                    68:69:a3:72:2f:19:2f:a7:42:20:18:47:b4:85:32:
                    bd:30:19:e7:1c:f6:6b:db:9a:01:20:4a:05:2e:89:
                    9a:01:99:e0:61:81:d3:4e:10:46:12:34:13:e4:0b:
                    e8:91:d9:6f:21:5d:aa:84:43:75:62:2a:84:f7:a5:
                    e8:32:bb:2e:07:62:9b:34:25:ab:e5:b8:9f:ae:7f:
                    2d:92:95:7c:3a:b1:f3:08:1c:e5:85:03:70:ac:53:
                    36:71:64:91:90:b2:20:d1:f5:ea:6c:a4:f7:98:17:
                    8a:4d:5e:05:b8:48:9b:d9:01:1e:60:b2:0d:1b:40:
                    f7:cd:a4:26:e6:89:f4:4a:b3:ca:60:8b:73:5e:bb:
                    9a:0c:5f:04:14:62:c7:4c:b8:72:45:66:53:6b:63:
                    47:f0:0f:4d:e8:8d:1d:bb:e0:2f:4a:ca:18:f2:f5:
                    b1:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:76:31:1B:47:C0:61:FF:3B:E7:6A:4C:B4:DB:C4:91:92:F3:7C:CC
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132373a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:127::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:d9:e9:09:a9:3d:4d:d4:c0:57:56:35:a7:50:9b:59:c9:15:
         e7:01:fe:6c:9a:d1:98:92:98:c5:ab:b5:bc:f2:f2:2c:33:85:
         7d:49:ad:61:43:69:10:bc:5b:fc:ad:a7:bb:28:26:ba:29:42:
         92:f1:36:33:50:b2:13:0a:80:24:60:2a:71:97:ff:9f:4d:8d:
         e5:5e:36:e6:a2:5b:a5:f0:3b:b4:f6:6c:98:00:72:67:7e:d4:
         09:10:50:69:ff:4c:36:1f:86:2a:67:8f:9f:a5:df:2b:31:4c:
         75:24:33:e3:1d:c9:bf:90:a6:77:be:ae:1f:c3:be:da:7b:eb:
         12:26:a8:1d:c4:e4:73:df:8f:67:a9:35:09:8c:cb:69:8c:a1:
         b3:5f:00:bc:3a:fc:81:04:4e:22:64:73:93:a3:43:81:e0:ee:
         63:49:c5:65:6a:bc:1f:65:e6:e3:dd:93:81:54:2d:56:ba:72:
         71:db:c6:e3:bc:e3:e9:9c:27:97:74:43:c8:71:e1:61:87:47:
         14:16:be:31:b6:f5:f6:ad:12:e2:6e:14:58:04:e0:05:3f:92:
         1e:36:58:f8:43:67:c4:14:27:15:e3:c9:67:0a:f1:ed:60:87:
         ec:ce:a7:60:23:6a:ae:13:71:4d:6e:15:dc:df:92:89:39:39:
         12:75:da:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:13 2024 by rpki-client on console-fra.rpki-client.org