Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231353a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231353a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          l6ywUWR6/EOVPLfF/tKBRuhjFWaZNGeu7vWwmx2IvHw=
Subject key identifier:   BA:29:C9:BE:2C:52:56:16:FB:34:3E:03:B5:40:09:3A:65:5E:2A:CB
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       4667754E1B59D88E942BFD8E1C2D16514DEAB7D9
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231353a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 04 Jun 2024 11:58:22 +0000
ROA not before:           Tue 04 Jun 2024 11:53:22 +0000
ROA not after:            Tue 03 Jun 2025 11:58:22 +0000
asID:                     9009
IP address blocks:        2602:ff62:215::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:67:75:4e:1b:59:d8:8e:94:2b:fd:8e:1c:2d:16:51:4d:ea:b7:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun  4 11:53:22 2024 GMT
            Not After : Jun  3 11:58:22 2025 GMT
        Subject: CN=BA29C9BE2C525616FB343E03B540093A655E2ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b8:02:eb:90:34:a1:49:89:5a:84:96:60:5e:
                    54:1d:03:d7:bd:d0:e0:e3:32:20:8e:aa:d2:2f:9c:
                    49:c2:cb:44:6c:1b:2e:e0:37:b3:16:5f:1c:dd:49:
                    91:fb:2f:4d:de:76:b5:e7:5a:15:f7:45:dd:39:59:
                    90:ad:b3:c6:94:97:d5:28:5d:79:55:6a:87:9d:d1:
                    a6:f7:0a:a1:e4:cf:39:c7:f2:0f:75:d2:92:75:68:
                    0f:4d:9c:18:02:33:e8:3a:da:12:47:57:aa:8f:e2:
                    5d:5a:ec:f2:01:98:1b:2d:1e:b6:2d:68:18:87:96:
                    91:80:4c:64:42:4d:2c:fb:cc:13:fe:5f:28:7d:7b:
                    91:f3:0f:e5:3e:6d:1a:3c:f4:f9:68:de:7e:40:68:
                    66:3f:55:b0:20:32:a9:3a:ee:20:7f:f7:56:80:bc:
                    29:50:ad:62:6f:2c:96:c7:c7:11:00:b7:95:b1:be:
                    a4:d3:9f:83:73:e2:d8:0b:73:37:a6:b1:29:03:5c:
                    90:b0:15:53:00:a1:0e:e7:da:28:8a:48:c4:0c:40:
                    3a:8f:57:e8:8a:c5:2d:03:50:f2:5a:39:94:ed:24:
                    76:cd:ad:c3:3a:4b:74:d8:d2:d3:6f:c3:8b:17:f0:
                    9f:a7:af:7a:4e:ef:85:29:a7:11:1e:23:08:bb:ea:
                    84:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:29:C9:BE:2C:52:56:16:FB:34:3E:03:B5:40:09:3A:65:5E:2A:CB
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231353a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:215::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:4f:b6:02:5e:c6:09:fb:22:4b:c7:57:74:96:9f:31:cc:df:
         ad:02:b5:27:c5:de:39:0c:d2:57:b5:11:08:12:a9:5d:8d:7c:
         b6:77:11:5a:d3:6d:13:0d:95:a0:2f:f1:7d:91:9a:d7:8f:4e:
         19:cb:8a:0e:26:ea:d3:76:15:93:18:c8:2b:41:bb:86:b3:c0:
         5b:46:fb:54:78:46:d4:55:57:62:4c:9b:d9:e7:f3:1d:9e:43:
         3c:7f:4a:70:a9:96:1e:61:0c:01:f8:48:c8:32:e3:d5:d6:84:
         6a:6d:3d:37:88:a0:8e:0e:15:d4:9d:6e:b3:2e:04:25:ba:0e:
         02:24:4c:9f:98:39:42:5c:f3:76:d4:c0:80:b6:01:a0:4d:e5:
         db:39:52:02:65:48:45:c9:39:09:64:40:66:70:c3:fe:97:05:
         f2:c2:04:db:15:a0:a4:ac:6b:ca:76:15:d5:a6:26:19:24:53:
         7c:82:bd:80:4f:a4:2c:08:5e:8f:c1:b6:66:23:83:08:c4:98:
         54:42:e3:b8:5d:fc:a7:5e:5d:1f:04:86:f3:14:36:7a:8f:c5:
         10:c2:ef:28:ab:6c:f6:69:84:10:89:83:41:77:f1:f3:06:7b:
         82:4d:cf:e7:de:d2:d4:54:a7:c0:86:f0:4a:65:82:20:81:81:
         25:b3:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:13 2024 by rpki-client on console-fra.rpki-client.org