Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666636323a3132393a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          GbKLXrpfq37sge99qSbZN58hABN5PrEXJCbKnB1Yj+s=
Subject key identifier:   89:D9:C0:B2:6E:1D:23:17:D6:46:4C:0B:22:63:5B:FC:1B:74:D1:26
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       443AA103103C64441B0755F6FCBAEBB696301602
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e203133323133.roa
Signing time:             Thu 30 May 2024 12:29:08 +0000
ROA not before:           Thu 30 May 2024 12:24:08 +0000
ROA not after:            Thu 29 May 2025 12:29:08 +0000
asID:                     13213
IP address blocks:        2602:ff62:129::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:3a:a1:03:10:3c:64:44:1b:07:55:f6:fc:ba:eb:b6:96:30:16:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:08 2024 GMT
            Not After : May 29 12:29:08 2025 GMT
        Subject: CN=89D9C0B26E1D2317D6464C0B22635BFC1B74D126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:9d:c0:c0:33:b4:6c:7a:d6:4a:5c:0c:bf:
                    1a:3a:19:d6:38:9f:a3:9e:da:dc:cd:82:e3:6b:e5:
                    33:d6:f8:f0:fb:38:6b:60:cf:0d:8e:65:0e:a9:25:
                    8c:b9:43:8c:c8:44:59:8e:23:eb:57:e1:83:bc:70:
                    30:fd:dc:80:a1:41:9d:ef:77:8e:26:39:96:70:c1:
                    50:0f:02:30:14:2d:ff:e2:4a:1f:8a:13:b5:fa:ad:
                    be:51:e8:40:51:c1:70:61:8b:31:2a:e6:76:ad:ef:
                    47:e9:54:8f:32:50:14:a2:d9:98:e2:f8:7e:82:74:
                    52:36:6e:5c:81:31:45:94:c7:7a:93:8d:22:5b:86:
                    62:e6:28:83:b5:cd:53:b0:89:86:76:d4:bb:36:11:
                    c2:82:ed:75:4d:82:51:81:50:75:81:94:37:e4:13:
                    12:f9:39:40:43:ec:df:b8:42:89:f1:1c:d1:7b:8a:
                    76:d5:38:2a:ca:68:64:6f:96:a0:4b:e6:b8:6b:fa:
                    da:ce:cd:e3:9e:68:93:48:6b:16:c9:2d:4a:ae:02:
                    bc:40:9d:3a:42:18:aa:56:8d:ca:ce:25:93:c2:af:
                    bb:cb:da:87:e3:f8:50:c7:a1:da:28:75:06:71:03:
                    23:01:96:7a:ff:90:6e:1a:87:69:cc:60:1c:51:e2:
                    74:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D9:C0:B2:6E:1D:23:17:D6:46:4C:0B:22:63:5B:FC:1B:74:D1:26
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132393a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:129::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:1f:ed:3b:e1:9b:cb:aa:01:cb:55:ae:7c:93:c8:f1:b1:92:
         88:58:65:5b:b3:a2:32:1b:1b:21:8f:00:cb:b6:fa:5a:b0:da:
         79:ab:22:91:05:33:e4:c8:4b:7b:ab:4a:f2:3f:62:39:3c:9f:
         cb:a6:51:8b:4a:0e:ec:d3:3a:b8:7d:b7:0f:c0:68:3d:07:57:
         7b:29:e4:ea:14:28:43:80:12:03:5a:35:5f:54:11:47:de:d8:
         65:c2:f9:47:d9:ba:af:8a:32:41:fa:45:a9:95:dc:dc:d4:7f:
         5d:ac:53:09:4a:22:6b:2d:97:53:0e:9a:4f:88:9a:e2:6e:5e:
         2e:71:f6:4b:9d:ee:94:fc:82:b0:4f:33:96:e1:4d:c8:d0:35:
         43:f6:26:8b:4d:1a:63:97:f1:8d:56:38:06:2d:64:e1:60:c4:
         e3:92:d3:a8:9a:56:81:b6:af:86:18:1f:35:55:cf:47:f6:4a:
         73:aa:28:21:be:4a:63:6b:6d:01:31:79:d0:f9:7b:5e:7e:ac:
         e8:f4:57:76:ca:23:cb:8d:cf:a8:cd:dd:6f:ee:dc:57:2f:db:
         b0:17:72:84:8e:1e:f8:d0:9e:03:b8:6a:a4:a6:c3:17:45:a9:
         ee:72:21:a8:de:70:df:20:ad:96:bc:1c:d6:cc:b0:34:39:b3:
         6d:26:11:1a
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIURDqhAxA8ZEQbB1X2/LrrtpYwFgIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjQwNTMwMTIyNDA4WhcNMjUwNTI5MTIyOTA4
WjAzMTEwLwYDVQQDEyg4OUQ5QzBCMjZFMUQyMzE3RDY0NjRDMEIyMjYzNUJGQzFC
NzREMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnadwMAztGx6
1kpcDL8aOhnWOJ+jntrczYLja+Uz1vjw+zhrYM8NjmUOqSWMuUOMyERZjiPrV+GD
vHAw/dyAoUGd73eOJjmWcMFQDwIwFC3/4kofihO1+q2+UehAUcFwYYsxKuZ2re9H
6VSPMlAUotmY4vh+gnRSNm5cgTFFlMd6k40iW4Zi5iiDtc1TsImGdtS7NhHCgu11
TYJRgVB1gZQ35BMS+TlAQ+zfuEKJ8RzRe4p21Tgqymhkb5agS+a4a/razs3jnmiT
SGsWyS1KrgK8QJ06QhiqVo3KziWTwq+7y9qH4/hQx6HaKHUGcQMjAZZ6/5BuGodp
zGAcUeJ0tQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFInZwLJuHSMX1kZMCyJjW/wb
dNEmMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMjM5M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzEzMzMyMzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBKTANBgkq
hkiG9w0BAQsFAAOCAQEAfx/tO+Gby6oBy1WufJPI8bGSiFhlW7OiMhsbIY8Ay7b6
WrDaeasikQUz5MhLe6tK8j9iOTyfy6ZRi0oO7NM6uH23D8BoPQdXeynk6hQoQ4AS
A1o1X1QRR97YZcL5R9m6r4oyQfpFqZXc3NR/XaxTCUoiay2XUw6aT4ia4m5eLnH2
S53ulPyCsE8zluFNyNA1Q/Ymi00aY5fxjVY4Bi1k4WDE45LTqJpWgbavhhgfNVXP
R/ZKc6ooIb5KY2ttATF50Pl7Xn6s6PRXdsojy43PqM3db+7cVy/bsBdyhI4e+NCe
A7hqpKbDF0Wp7nIhqN5w3yCtlrwc1sywNDmzbSYRGg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:48 2024 by rpki-client on console-fra.rpki-client.org