Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132623a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          al+fpCUmjDlq3TAhQEXEEcIZSMPCJOzduqSUE2/92Ec=
Subject key identifier:   15:01:AD:DC:0F:2D:88:F2:B6:98:8C:20:BF:D6:A1:7E:48:40:89:67
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       528A347DCEB795BBC7E3ECCAADC469BBDC9E624F
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 03 Jun 2024 15:01:15 +0000
ROA not before:           Mon 03 Jun 2024 14:56:15 +0000
ROA not after:            Mon 02 Jun 2025 15:01:15 +0000
asID:                     29802
IP address blocks:        2602:ff62:12b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 00:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8a:34:7d:ce:b7:95:bb:c7:e3:ec:ca:ad:c4:69:bb:dc:9e:62:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun  3 14:56:15 2024 GMT
            Not After : Jun  2 15:01:15 2025 GMT
        Subject: CN=1501ADDC0F2D88F2B6988C20BFD6A17E48408967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9e:f2:1e:2b:f4:4c:e2:93:c9:3d:4b:65:05:
                    4e:bf:f2:2b:94:56:28:c3:b0:1a:8c:df:56:3d:b2:
                    75:03:2d:bf:b1:27:ca:6f:a4:03:e4:9f:98:60:21:
                    93:24:07:36:f4:1a:81:4d:fa:ee:b6:56:4d:86:2f:
                    7a:67:85:b8:3d:9f:b6:c6:15:45:e6:fc:32:20:69:
                    a7:d9:39:99:23:bd:9f:cc:10:66:7c:dc:ff:ff:d9:
                    d3:26:6d:f1:c9:9b:75:99:5e:b8:ce:eb:80:e2:25:
                    43:7c:ea:55:04:bb:0e:d9:d6:a1:e7:f4:c9:9b:40:
                    9f:33:46:dd:0e:48:35:4a:55:2c:d7:25:ad:a7:cd:
                    89:83:56:19:8e:00:7b:d6:93:eb:c0:c6:f1:54:ec:
                    de:46:b3:6e:04:96:d1:5b:80:04:65:c8:76:d2:d8:
                    1e:40:9b:5e:6e:f8:97:a8:74:cd:84:dc:5f:b5:4d:
                    32:07:6a:bf:3b:64:51:1e:64:79:db:f4:d5:00:27:
                    eb:e4:f2:92:97:27:c3:25:65:b4:f2:7f:c8:8a:48:
                    e7:1c:26:bf:09:7f:4e:06:c3:57:33:4b:e4:ef:1c:
                    c7:33:32:ad:5d:db:1d:ba:4f:c4:35:d1:00:3d:8f:
                    e5:32:7c:9c:e0:f0:f3:b1:a3:54:27:79:8d:0c:57:
                    55:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:01:AD:DC:0F:2D:88:F2:B6:98:8C:20:BF:D6:A1:7E:48:40:89:67
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132623a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12b::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:30:ca:94:ea:74:40:45:37:78:27:79:0a:f3:3f:93:56:8a:
         10:94:9e:6b:d1:38:62:54:34:ee:af:e2:61:0d:d2:3d:cd:94:
         1c:15:c4:01:8b:ad:81:9c:9f:2f:bb:8e:c8:84:4d:97:bb:9e:
         55:bc:9b:77:81:89:43:a7:1f:b8:05:36:1a:57:a9:c1:2c:ef:
         03:de:bc:bc:0a:22:62:55:07:f3:c3:d1:06:c8:1e:3d:d4:b1:
         c6:c0:07:2e:67:2b:6a:a0:a8:26:5c:5a:66:23:a9:9a:10:a2:
         bf:f7:07:64:5c:68:fa:56:dc:e5:f1:a6:62:11:91:d2:42:76:
         ce:91:bb:38:e2:e0:a0:68:8b:29:ff:c4:07:7e:f8:38:f6:90:
         1e:b4:5d:4a:3c:7a:7f:63:ca:b8:2d:b6:d5:bc:68:75:ce:fc:
         13:80:34:0b:69:5f:63:77:42:84:e6:a7:72:b2:fa:79:e3:db:
         0c:13:c5:80:14:5b:eb:98:80:3d:ca:ba:98:3a:e1:32:36:15:
         50:9e:db:9a:3e:90:95:58:3c:10:76:a5:ff:b3:af:de:2a:39:
         9d:36:82:50:28:8d:86:6a:82:d9:a4:38:60:e2:bf:ef:68:bc:
         70:18:8b:8a:78:92:a1:41:3f:7a:d1:94:69:6d:03:e2:32:51:
         81:3d:5a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:01 2025 by rpki-client