Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203133323133.roa
File:                     323630323a666636323a3138343a3a2f34382d3438203d3e203133323133.roa (raw, json)
Hash identifier:          tLK83zEjWAhfH0AROJAg907w09FO8M+w90SHwrG920Y=
Subject key identifier:   C7:34:2D:AA:9B:9A:A5:DE:F7:91:D6:E7:30:BA:D5:4F:26:6D:CE:14
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       6DCF25968313FEB4B650DE66DE6493CF583D8DFF
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203133323133.roa
Signing time:             Thu 30 May 2024 12:29:13 +0000
ROA not before:           Thu 30 May 2024 12:24:13 +0000
ROA not after:            Thu 29 May 2025 12:29:13 +0000
asID:                     13213
IP address blocks:        2602:ff62:184::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 04:47:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cf:25:96:83:13:fe:b4:b6:50:de:66:de:64:93:cf:58:3d:8d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 30 12:24:13 2024 GMT
            Not After : May 29 12:29:13 2025 GMT
        Subject: CN=C7342DAA9B9AA5DEF791D6E730BAD54F266DCE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:ce:04:28:65:75:19:fa:e2:12:f5:e5:18:
                    12:c7:1c:b4:d7:a9:66:99:ec:c3:5f:18:21:22:b6:
                    c2:89:35:54:57:f9:b4:03:cf:d2:a7:39:ae:5e:72:
                    66:45:e1:fa:9b:9c:fb:4e:d7:13:52:00:70:86:bb:
                    20:33:a8:52:92:61:ae:42:7d:ea:2f:58:2f:9c:2b:
                    7c:ee:49:d5:28:47:aa:f1:0b:44:ec:de:50:47:d2:
                    9f:de:f8:16:98:7d:5f:dd:b6:3a:a7:51:1f:0d:4a:
                    91:2c:2c:fa:c0:a6:7f:0b:d9:97:72:17:e4:ec:73:
                    f8:b6:45:03:80:db:8b:ad:76:56:d8:17:af:44:34:
                    e1:5e:ae:26:16:c5:42:f3:03:48:dc:58:a5:cd:9b:
                    22:b7:ae:93:66:63:39:38:25:ed:83:55:93:d3:bc:
                    6e:20:e8:c6:5d:10:a5:4d:72:3e:6a:44:6f:85:d7:
                    98:b8:1f:5a:2f:30:38:4b:45:d5:05:53:35:ea:bd:
                    f4:f3:93:bc:1b:12:12:63:fe:20:31:72:58:6d:f1:
                    41:e3:99:64:3d:9c:ff:7a:31:d1:5e:8a:da:ed:a4:
                    49:de:18:2f:ff:99:a9:7b:80:39:ec:66:bc:12:5c:
                    71:63:4f:8d:0f:14:1f:1e:a9:36:0e:0c:b7:0a:22:
                    93:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:34:2D:AA:9B:9A:A5:DE:F7:91:D6:E7:30:BA:D5:4F:26:6D:CE:14
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:184::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:d0:ab:54:06:05:13:69:8e:18:24:46:a4:bf:4d:42:25:80:
         4b:a1:1c:67:83:18:7f:45:10:c5:8a:0e:40:f8:13:9f:cf:7b:
         1a:6b:d0:95:5c:05:59:63:33:b8:ba:5d:f4:10:cb:31:cf:9a:
         c0:c5:cd:fa:70:5b:c9:0f:bf:80:f2:f4:43:3e:bb:61:b0:f4:
         33:e6:37:cd:c5:31:99:8f:09:4b:33:47:7f:ac:24:3d:80:8c:
         f1:0d:e1:d6:8d:b0:86:ce:c1:ae:5e:56:64:f3:dd:30:37:10:
         f8:1b:21:2d:9e:a4:7b:cd:b1:27:04:f2:44:0d:7f:39:97:f2:
         8c:4d:15:4b:23:d3:e5:f5:76:6c:ee:e7:61:84:98:02:79:51:
         f8:d4:32:dc:9b:b1:69:cb:d8:ce:39:ba:6b:4a:fc:d8:a8:25:
         6c:26:fa:e6:4a:78:12:2e:0c:65:25:62:c8:d9:8e:1b:f7:b1:
         58:3b:67:2d:e8:b4:29:f0:dd:5b:a9:31:cc:5d:03:05:3f:33:
         6d:0b:35:e5:37:b6:a3:b5:7a:03:35:93:98:57:a6:c3:26:4d:
         56:95:d4:62:3d:a8:89:34:6d:83:5b:f9:3a:52:8f:d5:f2:56:
         0e:59:64:17:73:5b:53:38:3a:57:95:97:0c:d0:2f:fd:01:a6:
         ba:58:6a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:48 2024 by rpki-client on console-fra.rpki-client.org