Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231343a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231343a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          7FFyM5H27NtSwaGg9CehMGwL0T8M+t4YymkiGypGE5c=
Subject key identifier:   DE:18:57:87:5C:F8:3E:98:C6:DC:4C:E4:2D:8E:02:3D:D6:ED:C0:F6
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       4F0204B54BCAFCCF1A055EA476C3A60FB036C339
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231343a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 04 Jun 2024 11:58:22 +0000
ROA not before:           Tue 04 Jun 2024 11:53:22 +0000
ROA not after:            Tue 03 Jun 2025 11:58:22 +0000
asID:                     9009
IP address blocks:        2602:ff62:214::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:02:04:b5:4b:ca:fc:cf:1a:05:5e:a4:76:c3:a6:0f:b0:36:c3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun  4 11:53:22 2024 GMT
            Not After : Jun  3 11:58:22 2025 GMT
        Subject: CN=DE1857875CF83E98C6DC4CE42D8E023DD6EDC0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:36:f0:85:bc:66:bd:53:98:48:c0:5e:93:41:
                    18:27:4c:ff:46:4f:30:5b:7f:4f:fd:bb:2e:ed:ac:
                    cd:54:99:e8:87:32:5d:0a:14:7f:a2:c0:ac:c8:b3:
                    bb:77:18:0a:47:8d:d9:fc:18:b5:e2:5c:63:eb:1b:
                    eb:98:2d:c3:2f:67:b0:7f:54:93:66:50:18:81:1c:
                    2b:3c:01:e1:3a:fc:9b:7d:f6:e9:f5:9f:4a:15:16:
                    8f:b4:9e:1c:93:9e:77:03:9f:73:c3:40:df:ac:ad:
                    d0:77:6b:89:a5:11:15:cf:c7:fe:49:c0:2a:68:7d:
                    e2:22:cf:e6:7e:f2:34:f8:2b:7e:3b:90:d2:24:e2:
                    6f:1c:12:cb:63:8e:5f:e2:1e:51:59:1c:4e:f9:a9:
                    ff:a8:3d:aa:e9:27:3e:f3:64:3c:89:67:ca:b3:db:
                    5f:c4:bb:7b:76:56:1d:63:52:f1:92:1e:4b:21:3d:
                    86:a3:c0:c6:5e:27:1b:9d:10:d6:42:1e:d1:fc:05:
                    83:69:98:7f:8b:4d:a9:50:49:68:2d:e5:4c:ea:3b:
                    45:dd:f3:03:4f:94:4f:1e:92:6b:42:06:ae:1f:4d:
                    84:3b:f9:39:2e:4b:2f:a5:b9:3f:1f:f1:dd:81:30:
                    a2:c1:61:b7:31:b2:c6:cf:eb:03:dd:9a:3a:e8:50:
                    2b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:18:57:87:5C:F8:3E:98:C6:DC:4C:E4:2D:8E:02:3D:D6:ED:C0:F6
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231343a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:214::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:b9:46:45:64:7c:35:b5:3d:9b:29:e2:19:fd:11:f9:f5:80:
         43:30:7f:92:ed:16:c4:05:62:21:4e:f6:92:05:c1:50:c8:f9:
         ce:be:ae:39:dd:31:ae:cf:2b:93:1a:19:4f:1a:ec:14:5e:a1:
         45:f2:37:53:36:99:65:df:55:a2:ab:60:29:cc:e7:6c:95:47:
         9e:2d:52:40:14:1d:5e:9b:0a:c4:95:e6:47:f6:3f:8c:5b:aa:
         66:7d:a3:b7:f7:ad:c8:c4:ca:52:62:5f:f7:bb:59:23:c9:3e:
         33:fd:fe:a7:89:2d:cd:ca:3b:83:af:fe:57:e8:bb:03:d8:ea:
         95:79:bd:91:22:46:72:46:7d:91:22:23:3c:01:2b:5c:a7:37:
         31:9b:75:ec:93:5d:c4:18:c3:e9:ff:ab:c1:92:49:b0:ae:76:
         41:e3:1a:da:22:4e:12:3d:b7:18:ab:75:65:c5:5f:bc:39:9d:
         68:1a:7f:5c:13:3c:1e:9f:11:fd:0e:0a:c1:70:d4:42:94:db:
         6b:ae:f6:5b:3e:01:f3:e3:cf:de:cb:38:67:45:2f:f4:c1:17:
         17:ba:2b:b7:35:89:d4:59:62:b8:c5:f1:b8:da:6f:aa:51:bb:
         bb:8c:95:02:4e:6d:e6:2c:52:47:7c:ca:6d:83:57:88:79:bd:
         0c:8c:24:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:13 2024 by rpki-client on console-fra.rpki-client.org