Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132653a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3132653a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          3bEIqwhMQ9RdKsxZW1OUrP7mg+m2PhiPlh3fXAvWZ40=
Subject key identifier:   B0:8C:69:33:01:98:D4:48:D4:15:52:80:75:4D:92:4C:74:AC:80:02
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       4D972F86128A019BA62CB40798D96A2215C35E84
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132653a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 05 May 2025 15:28:32 +0000
ROA not before:           Mon 05 May 2025 15:23:32 +0000
ROA not after:            Mon 04 May 2026 15:28:32 +0000
asID:                     29802
IP address blocks:        2602:ff62:12e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 12:56:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:97:2f:86:12:8a:01:9b:a6:2c:b4:07:98:d9:6a:22:15:c3:5e:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  5 15:23:32 2025 GMT
            Not After : May  4 15:28:32 2026 GMT
        Subject: CN=B08C69330198D448D4155280754D924C74AC8002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1a:26:a7:9f:51:e8:b3:96:86:3d:9d:2e:c7:
                    b4:99:70:31:a2:cb:ec:07:da:26:c2:e9:be:b5:51:
                    38:77:65:92:7c:14:53:f1:71:02:c2:53:d8:ae:37:
                    90:2f:57:fe:87:b3:ea:1d:9c:97:d1:c1:99:fa:33:
                    43:ca:6c:a3:2b:59:06:3c:35:4d:4f:a6:54:cd:67:
                    a2:14:c2:47:fb:38:52:46:8d:54:b4:3c:27:03:4b:
                    74:5c:31:ed:35:b0:e8:df:aa:5c:b7:fa:fd:96:59:
                    af:23:2a:b1:31:72:45:09:e4:78:e2:74:7f:8a:2b:
                    bf:10:c4:70:58:b2:6d:9c:de:a1:e5:31:7c:5e:f6:
                    96:94:38:94:7c:f4:86:64:2e:ca:4d:d5:d5:b9:1e:
                    4c:76:b1:ad:29:00:46:b7:d9:d2:23:5d:41:55:78:
                    39:b3:f3:9a:5d:07:a4:b1:5f:b0:b7:18:71:d6:9d:
                    46:6c:69:ce:c9:72:f1:50:81:37:37:8e:1a:11:49:
                    28:19:ba:65:56:c9:b8:83:7a:2b:8d:2f:c6:33:86:
                    84:88:82:6e:9b:17:02:2d:c8:a0:9e:bb:1a:7a:6a:
                    83:97:46:0b:b8:86:49:b8:27:b6:a7:3e:db:7a:88:
                    67:1d:21:e0:b2:fd:f0:af:98:90:ed:3d:7a:59:b2:
                    e6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8C:69:33:01:98:D4:48:D4:15:52:80:75:4D:92:4C:74:AC:80:02
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3132653a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:12e::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:ea:e2:18:d7:85:e4:4e:77:f2:e3:f4:d5:e4:10:4e:60:
         54:ce:00:1c:ac:a3:85:5b:2d:31:26:84:83:48:3d:00:f7:fe:
         69:8a:5a:b2:6a:cb:b4:c9:01:03:ca:e4:26:05:0b:8a:d6:29:
         c6:dc:00:07:5f:f7:ae:cf:0d:92:40:b3:4c:07:5b:5a:f8:d2:
         4f:76:d1:4a:eb:e4:2e:1b:79:29:9a:55:77:a7:d1:27:23:d6:
         79:bb:2b:58:21:b4:23:20:49:fc:60:0b:fd:93:19:15:4e:49:
         cf:86:9a:56:be:dd:9e:7c:c7:31:db:8e:e2:68:a4:fb:6a:08:
         a6:aa:ab:2c:2a:19:82:42:2c:71:d1:b8:53:f3:92:d8:c7:8d:
         0a:44:c4:72:7c:f4:e4:eb:4d:d0:b8:f0:b1:06:42:b2:73:ed:
         6b:39:13:86:c1:db:33:fc:d8:a8:ef:cb:de:2a:a5:c2:1a:7d:
         d1:e0:04:75:1d:93:b5:3e:77:a8:1d:78:a3:26:e1:34:70:9b:
         8c:99:11:65:d2:8d:4f:76:60:cf:a4:f1:6b:89:fe:5d:be:22:
         30:c9:ac:31:8e:fc:80:0e:bd:67:07:bd:17:0f:9b:2c:13:e0:
         ff:e1:03:fd:ed:a3:98:20:2d:e5:4d:b4:53:d7:60:a1:fa:9c:
         ef:22:42:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 21:28:32 2025 by rpki-client