Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132623a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          gJwo5m0htOVKa5A7tOGs9a68b19MmP0rGn1wZEon99g=
Subject key identifier:   6B:1C:29:46:C1:81:4E:03:D8:A7:C6:0F:B6:08:4F:D9:13:B1:2F:C5
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       58D6145BB48C5A33F01ADC3BAC59457501215A98
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 05 May 2025 15:28:32 +0000
ROA not before:           Mon 05 May 2025 15:23:32 +0000
ROA not after:            Mon 04 May 2026 15:28:32 +0000
asID:                     29802
IP address blocks:        2602:ff62:12b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 19:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d6:14:5b:b4:8c:5a:33:f0:1a:dc:3b:ac:59:45:75:01:21:5a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  5 15:23:32 2025 GMT
            Not After : May  4 15:28:32 2026 GMT
        Subject: CN=6B1C2946C1814E03D8A7C60FB6084FD913B12FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:89:cd:10:84:3e:5c:cb:a9:69:b1:12:f1:b0:
                    57:16:bd:66:41:09:74:f7:00:6d:a3:cf:22:d2:1e:
                    7d:a1:74:77:51:24:04:39:13:64:dd:e7:c7:73:40:
                    6a:bc:60:80:ce:1c:be:67:72:07:21:ef:d1:9a:40:
                    ed:03:7a:b7:4f:56:d1:2f:8b:c9:8c:63:e3:7a:d0:
                    e5:fc:0e:b4:7d:03:5a:5c:f1:13:b5:85:9b:5f:cc:
                    16:b7:5f:8c:73:ac:37:9d:52:5d:24:24:96:5c:2c:
                    76:f5:51:91:11:b3:bc:00:bf:b5:5e:ea:e9:46:87:
                    9a:10:70:52:84:dd:f6:ca:68:b5:8d:35:46:9f:b9:
                    e5:c0:ac:a9:28:22:f2:5c:2b:0e:de:2e:c0:17:fa:
                    65:5e:c9:2d:4e:32:5d:81:a8:b3:34:6b:c4:81:be:
                    67:00:43:43:21:e3:5a:8a:27:25:88:a1:4e:9b:3d:
                    a7:3e:b4:bd:4e:cf:13:4c:99:43:ce:f9:f4:4b:70:
                    eb:90:13:c1:62:20:23:65:c1:92:6b:6d:ba:25:43:
                    f1:71:ce:a7:15:12:aa:4b:12:74:8c:db:6f:b6:09:
                    7a:10:26:8f:a1:d1:69:50:29:7e:da:64:6a:c1:90:
                    19:b9:1f:97:c9:f6:78:43:92:bc:bf:a0:ed:cb:fb:
                    14:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1C:29:46:C1:81:4E:03:D8:A7:C6:0F:B6:08:4F:D9:13:B1:2F:C5
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12b::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:81:5e:a5:a3:21:97:2e:05:13:43:28:b9:17:34:2d:be:49:
         64:f3:9f:c9:61:c0:a6:1a:5c:f7:b9:8f:d3:26:77:86:6a:49:
         09:b6:d1:f8:69:c2:da:12:9d:d7:30:a3:d6:d1:2b:b4:06:fc:
         f4:9b:6a:90:ae:0f:d8:58:39:e8:04:83:d2:ea:6c:d5:a5:73:
         23:51:5f:e4:f2:0d:ed:e7:b1:a1:32:c7:a2:58:79:cc:26:60:
         fb:51:e5:9d:fb:2d:e7:fc:79:f7:d3:0e:ea:49:0f:cd:57:91:
         57:f4:5b:ab:3a:ae:d8:21:b8:64:04:3f:43:0d:d3:3c:a0:35:
         33:12:25:a7:8e:99:ed:7d:a9:d5:7c:15:56:c1:32:2b:52:dc:
         ba:6d:c4:55:e3:7d:a3:9e:c9:03:74:70:c5:02:1e:f4:13:8d:
         09:81:6b:52:7f:93:96:b9:44:9b:ae:42:82:fb:db:66:50:53:
         36:d9:bf:0e:9f:e2:eb:81:c2:02:2c:b9:8f:72:05:73:47:84:
         bf:9d:52:14:89:d3:37:51:23:d1:5e:4c:70:e8:51:ce:78:d9:
         87:2c:03:48:7b:31:e9:b2:99:26:6a:7e:ac:6e:0c:df:46:a5:
         10:13:05:ed:0b:f7:d6:67:28:ad:97:69:b0:72:c3:83:9b:81:
         f8:18:14:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:19:59 2025 by rpki-client