Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          1WtnPp/ynIdTLAqL0qn011+67yK2r4KqUzkE59stpsg=
Subject key identifier:   80:A5:AB:6F:C8:83:98:80:51:03:14:04:0B:F4:27:21:4D:D7:26:DF
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       179B97DF4BAFFC5E62F11E9BEEC6EEDD0977BB8B
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 03 Jun 2024 15:01:15 +0000
ROA not before:           Mon 03 Jun 2024 14:56:15 +0000
ROA not after:            Mon 02 Jun 2025 15:01:15 +0000
asID:                     29802
IP address blocks:        2602:ff62:184::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9b:97:df:4b:af:fc:5e:62:f1:1e:9b:ee:c6:ee:dd:09:77:bb:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun  3 14:56:15 2024 GMT
            Not After : Jun  2 15:01:15 2025 GMT
        Subject: CN=80A5AB6FC8839880510314040BF427214DD726DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c9:59:97:3c:cd:df:d1:e7:ae:bd:a9:c5:2e:
                    82:e8:1a:4f:fa:51:54:1d:cf:8a:eb:a3:5f:fa:49:
                    6c:82:6f:07:df:42:3a:ab:97:e8:38:da:73:6f:df:
                    b4:f4:5b:65:f5:bb:1f:cb:6f:c6:1a:ff:72:bf:6f:
                    ad:f1:71:1a:f9:fa:eb:1f:7d:ad:16:3f:9c:9f:cb:
                    6b:84:48:db:0f:a3:ac:50:d0:7a:ce:ad:30:94:49:
                    b4:b8:9a:ae:d8:bf:8d:7f:19:08:ed:55:cb:3a:30:
                    ff:01:89:e0:86:e9:17:fe:30:ef:21:b7:b8:cd:1d:
                    3b:a3:63:e9:57:61:29:6d:ad:8d:9a:cb:f7:b7:46:
                    76:78:d4:6e:f5:29:fd:db:ba:56:1e:b2:44:ea:da:
                    0a:12:7c:89:a3:c5:d1:00:09:a2:45:b9:9d:6e:1f:
                    a1:3b:31:20:5b:79:08:2f:68:16:5e:8a:e6:d8:7e:
                    87:b4:92:31:c5:7b:b3:c2:13:a9:e5:b7:ce:02:96:
                    4e:59:71:2d:f6:6a:0b:9e:61:69:c1:e8:5e:ab:f6:
                    7f:ff:10:d3:04:c3:d9:39:fa:43:de:b8:df:89:50:
                    07:f1:07:05:03:ca:48:a1:72:d0:24:6f:41:e0:b1:
                    b9:c5:4e:0e:c1:f8:d6:58:c4:a6:61:3a:0c:8f:76:
                    39:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A5:AB:6F:C8:83:98:80:51:03:14:04:0B:F4:27:21:4D:D7:26:DF
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138343a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:184::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:fe:58:7f:77:7a:d2:77:28:a0:99:15:40:6b:86:64:94:5d:
         13:e1:fc:95:c4:f1:64:e8:ed:a1:eb:b9:9d:d8:f9:53:fe:16:
         23:a9:16:37:4b:7a:2f:c2:b9:7e:0b:8f:90:de:7d:87:8a:5b:
         57:9e:78:fc:a5:e6:8a:3b:6d:26:87:75:9a:0e:e8:4f:cb:a8:
         a0:1c:4b:01:0b:5c:00:3c:07:89:59:d7:dc:b0:c4:8a:e6:a9:
         89:d0:94:2e:87:7a:e9:65:9a:8c:db:8d:73:9f:fe:12:70:b1:
         f6:e1:21:69:8c:8f:40:9f:dd:cb:33:72:0e:5f:46:b9:8e:f5:
         3a:d7:74:83:aa:38:4c:4f:1b:de:e4:1d:d4:2b:bb:4c:7d:fa:
         38:83:20:88:f6:52:e7:a9:76:d8:dd:5c:aa:9f:cd:2f:2f:2f:
         a6:5d:74:e9:43:b9:d3:21:c9:f7:4f:12:05:0a:52:b0:00:0f:
         3f:ef:d9:bf:27:f6:cf:a1:a9:dc:ed:93:d5:23:90:a4:1f:ca:
         aa:20:31:36:7f:97:5b:54:ef:04:37:ed:07:6c:ec:22:53:56:
         a8:d9:3f:fc:ee:71:11:fd:92:4d:3f:c0:0a:26:4e:93:73:b8:
         74:20:d9:3b:a8:2d:82:e5:96:70:1f:f9:ab:7f:b2:a2:f6:4e:
         39:3a:30:35
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUF5uX30uv/F5i8R6b7sbu3Ql3u4swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjQwNjAzMTQ1NjE1WhcNMjUwNjAyMTUwMTE1
WjAzMTEwLwYDVQQDEyg4MEE1QUI2RkM4ODM5ODgwNTEwMzE0MDQwQkY0MjcyMTRE
RDcyNkRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApclZlzzN39Hn
rr2pxS6C6BpP+lFUHc+K66Nf+klsgm8H30I6q5foONpzb9+09Ftl9bsfy2/GGv9y
v2+t8XEa+frrH32tFj+cn8trhEjbD6OsUNB6zq0wlEm0uJqu2L+NfxkI7VXLOjD/
AYnghukX/jDvIbe4zR07o2PpV2Epba2Nmsv3t0Z2eNRu9Sn927pWHrJE6toKEnyJ
o8XRAAmiRbmdbh+hOzEgW3kIL2gWXorm2H6HtJIxxXuzwhOp5bfOApZOWXEt9moL
nmFpweheq/Z//xDTBMPZOfpD3rjfiVAH8QcFA8pIoXLQJG9B4LG5xU4OwfjWWMSm
YToMj3Y5KQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFIClq2/Ig5iAUQMUBAv0JyFN
1ybfMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzODM0M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBhDANBgkq
hkiG9w0BAQsFAAOCAQEAQf5Yf3d60ncooJkVQGuGZJRdE+H8lcTxZOjtoeu5ndj5
U/4WI6kWN0t6L8K5fguPkN59h4pbV554/KXmijttJod1mg7oT8uooBxLAQtcADwH
iVnX3LDEiuapidCULod66WWajNuNc5/+EnCx9uEhaYyPQJ/dyzNyDl9GuY71Otd0
g6o4TE8b3uQd1Cu7TH36OIMgiPZS56l22N1cqp/NLy8vpl106UO50yHJ908SBQpS
sAAPP+/Zvyf2z6Gp3O2T1SOQpB/KqiAxNn+XW1TvBDftB2zsIlNWqNk//O5xEf2S
TT/ACiZOk3O4dCDZO6gtguWWcB/5q3+yovZOOTowNQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:13 2024 by rpki-client on console-fra.rpki-client.org