Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132643a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666636323a3132643a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          TzNuFfFEtZRbw/e3l0EVd+NnHz3jSpmWX7h4qiq7Lk0=
Subject key identifier:   8B:D8:83:50:57:3C:2F:7E:71:11:03:1B:1B:99:8E:22:A5:68:5B:1E
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       52481DBF2DB2B1760E6A6A52DE28C71827400F1B
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132643a3a2f34382d3438203d3e203133323133.roa
Signing time:             Thu 30 May 2024 12:29:11 +0000
ROA not before:           Thu 30 May 2024 12:24:11 +0000
ROA not after:            Thu 29 May 2025 12:29:11 +0000
asID:                     13213
IP address blocks:        2602:ff62:12d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:48:1d:bf:2d:b2:b1:76:0e:6a:6a:52:de:28:c7:18:27:40:0f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:11 2024 GMT
            Not After : May 29 12:29:11 2025 GMT
        Subject: CN=8BD88350573C2F7E7111031B1B998E22A5685B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:e8:f0:ea:52:06:ee:74:57:15:b1:4f:61:
                    70:e7:92:f8:30:c9:46:2e:d8:52:b3:3d:a7:ed:0b:
                    6c:ee:a7:a7:5c:d0:f8:78:e4:e0:56:6a:30:e7:b0:
                    23:55:28:85:2d:5f:0b:74:86:59:cb:00:8f:36:22:
                    ff:f2:f1:c1:f8:aa:4c:05:fe:64:6e:57:6c:82:be:
                    c6:b4:91:04:41:19:2c:2a:c4:82:ac:b4:49:45:f8:
                    5f:cb:b3:87:98:8b:c5:e9:8c:da:84:81:32:74:08:
                    0e:a6:e0:78:24:82:f4:56:57:87:d0:33:30:7d:22:
                    02:d4:f3:ef:ba:12:ea:2a:6d:b6:ba:85:44:59:e3:
                    71:16:94:bf:29:8b:03:a1:2b:4c:c4:53:cd:5e:ed:
                    e5:2a:93:68:a1:b7:4d:fc:fb:3a:83:c0:fa:11:42:
                    cc:18:d9:f3:96:96:5c:53:61:24:09:fb:6b:dd:6a:
                    32:d3:98:22:13:c7:81:18:46:13:96:35:a1:c0:15:
                    c6:69:07:01:29:a3:76:d7:82:a8:7d:e0:01:6e:30:
                    8c:52:73:f6:e6:64:85:79:d5:17:be:46:6b:ae:60:
                    1c:70:6c:56:f3:42:a9:30:99:66:fb:b8:62:76:c0:
                    6d:55:ed:40:58:36:6f:7a:bc:4d:8c:5c:d3:40:22:
                    ed:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D8:83:50:57:3C:2F:7E:71:11:03:1B:1B:99:8E:22:A5:68:5B:1E
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132643a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12d::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:d9:ea:93:4f:30:63:30:3d:5f:f9:a6:e7:91:fa:7a:f2:ad:
         99:5b:1c:ab:be:a0:c4:69:05:97:69:6a:5d:36:f4:38:8d:93:
         b1:fb:42:e7:bd:45:22:94:7a:89:cc:56:13:ab:cc:93:1b:15:
         f6:99:cb:11:b2:9a:39:2b:fa:6c:23:19:4f:84:02:b9:b7:0d:
         fb:2f:a8:c0:d8:ba:72:18:95:56:93:c7:e2:e9:13:c2:90:a6:
         eb:f4:d6:a2:3d:b5:0f:cb:4e:b0:22:97:8e:53:12:9a:6b:eb:
         26:c9:8a:13:5a:3a:f3:51:45:9a:36:ea:de:ab:66:fc:b4:89:
         df:c8:63:df:be:70:33:74:5b:65:00:61:48:08:d1:90:e1:5e:
         29:32:73:53:12:91:f9:99:a4:30:21:fb:ea:56:c6:18:b0:2c:
         3f:5d:32:c0:1c:d4:06:21:ab:b8:2a:b8:ee:14:5e:b9:03:8f:
         07:a6:d1:f6:6f:51:82:bb:1f:0d:e9:fc:43:05:26:ff:e1:4a:
         02:6a:61:c4:83:47:4e:d7:99:34:b3:89:d6:83:c2:19:b7:51:
         bd:11:57:20:ca:7f:e4:a4:be:ac:40:d3:35:07:cf:7a:d3:41:
         2b:63:e3:e5:ef:9f:25:f4:26:f2:8c:8e:22:3d:ec:39:0c:5c:
         a9:cf:fe:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:48 2024 by rpki-client on console-fra.rpki-client.org