Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666636323a3132383a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          5tWAyGqDguMxCBlKS4fk+rIp79X6cp7C4S8rMEMMfqI=
Subject key identifier:   69:6D:16:98:8E:71:F1:84:42:C4:10:3B:0F:E7:AB:D4:36:34:94:7F
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       59F7A8E6C6BBF2A60EBCA397918B9246800ADD90
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e203133323133.roa
Signing time:             Thu 30 May 2024 12:29:07 +0000
ROA not before:           Thu 30 May 2024 12:24:07 +0000
ROA not after:            Thu 29 May 2025 12:29:07 +0000
asID:                     13213
IP address blocks:        2602:ff62:128::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f7:a8:e6:c6:bb:f2:a6:0e:bc:a3:97:91:8b:92:46:80:0a:dd:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:07 2024 GMT
            Not After : May 29 12:29:07 2025 GMT
        Subject: CN=696D16988E71F18442C4103B0FE7ABD43634947F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:39:f6:d5:f8:02:13:b8:29:10:b4:40:dc:86:
                    65:18:59:af:3e:3b:a1:7d:66:53:c8:19:1c:cd:9f:
                    e8:53:19:3d:85:88:76:ad:80:eb:99:bf:c8:04:93:
                    e7:06:a0:05:cd:10:0d:75:5f:fb:77:cc:63:f9:b9:
                    fc:65:06:52:0c:32:cc:eb:70:50:f1:78:ad:7e:7a:
                    8f:6f:a5:55:f3:4a:62:45:af:f0:16:ad:3d:42:6d:
                    5c:d2:1e:17:43:86:1f:9d:35:ec:ce:be:f6:ac:d2:
                    2f:ef:ba:70:41:c8:8c:a7:ad:63:ce:27:7f:2d:fc:
                    fd:1a:06:d4:7f:21:97:c2:65:12:f4:f6:b9:75:ed:
                    69:b3:ea:90:63:f7:b5:07:2d:c9:92:ae:11:13:c0:
                    cb:08:0a:e7:3f:b7:21:29:3d:ba:6e:83:39:6d:6d:
                    da:b9:02:20:9f:49:67:87:2e:41:0d:34:d5:ea:de:
                    bd:f3:80:cd:66:e6:d8:4c:c1:62:fa:26:6c:b6:98:
                    1e:f7:f5:aa:8c:1d:fe:e2:eb:0d:e1:99:66:1d:61:
                    30:9e:ca:44:03:c8:70:76:b7:b9:96:7f:86:ea:ff:
                    30:bc:00:84:3c:30:4b:2b:cf:1e:99:30:29:04:0d:
                    af:4d:e7:23:a1:7d:da:94:57:d6:6d:08:18:3b:76:
                    76:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6D:16:98:8E:71:F1:84:42:C4:10:3B:0F:E7:AB:D4:36:34:94:7F
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132383a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:128::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:86:6d:02:b3:01:f4:6f:45:d4:7d:f1:be:83:06:79:02:05:
         4f:df:c0:ca:0f:4e:44:1a:af:fc:0c:58:52:83:21:b8:e3:6b:
         c3:86:e1:a0:8e:68:fe:20:a7:47:e8:08:92:2d:99:6a:00:0d:
         7b:dd:41:a2:b2:1c:d4:82:ce:fa:b2:e6:00:41:8f:44:5b:84:
         60:c3:5f:4e:78:0f:87:d3:29:9c:5c:c3:43:c3:8c:f4:5d:47:
         14:d1:f4:8d:5f:57:5d:36:21:5d:f7:ac:ee:75:e3:e9:cb:d6:
         26:73:c9:63:73:39:1a:1e:41:4c:a9:6c:05:0f:26:52:b4:54:
         69:1c:ad:06:4e:41:56:5c:cf:8c:32:48:28:63:c0:d9:2f:29:
         e5:57:f0:4b:77:d2:e5:bc:09:f0:77:67:fc:fb:ac:ee:4a:4d:
         19:08:af:a4:32:cb:82:df:51:91:70:0b:e9:c6:64:21:a4:c2:
         93:a7:42:e2:3d:78:94:40:ea:f4:0b:85:33:0b:94:28:1d:dd:
         4f:3f:18:f6:da:f3:5a:27:39:17:7f:41:b8:ea:c0:af:a8:2e:
         ed:28:c1:d7:b7:61:d4:3b:7c:18:f2:8d:b9:a8:d5:d8:a9:f9:
         e6:80:33:82:52:fb:19:54:31:96:19:2f:2d:3e:e2:58:b2:63:
         5b:c0:4c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:48 2024 by rpki-client on console-fra.rpki-client.org