Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231363a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231363a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          WdCMHgkgyqJf1hL+e+hzBu4fzhAgZLaNVhLhnbLTKEg=
Subject key identifier:   94:F6:07:16:1C:73:57:43:69:9F:D4:C2:93:46:48:94:E3:F7:F7:F7
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       129752B267301B3DFD48E49640DFB94395BB1CFB
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231363a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 04 Jun 2024 11:58:23 +0000
ROA not before:           Tue 04 Jun 2024 11:53:23 +0000
ROA not after:            Tue 03 Jun 2025 11:58:23 +0000
asID:                     9009
IP address blocks:        2602:ff62:216::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:97:52:b2:67:30:1b:3d:fd:48:e4:96:40:df:b9:43:95:bb:1c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun  4 11:53:23 2024 GMT
            Not After : Jun  3 11:58:23 2025 GMT
        Subject: CN=94F607161C735743699FD4C293464894E3F7F7F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:54:69:b6:1a:7c:a3:08:73:05:13:3e:2c:
                    fa:08:31:1b:67:cb:80:db:8e:f1:c1:9a:2e:ae:f8:
                    e6:f4:3e:45:04:21:7d:8e:e2:0e:cb:af:13:e3:47:
                    50:b2:f5:ec:79:61:8b:33:22:d7:91:c4:d6:c3:36:
                    65:86:1e:89:0f:79:0d:4e:30:af:be:f9:f0:ab:91:
                    83:98:f6:6d:be:6a:18:54:a3:ba:43:42:47:bf:6f:
                    0c:47:f6:b6:9f:06:6a:02:90:d1:fb:a6:8a:80:6e:
                    95:bb:68:1a:17:d1:ce:25:63:26:9d:27:51:1d:35:
                    81:75:20:3b:3a:5b:33:cc:93:23:64:09:83:c7:54:
                    1f:19:0c:fc:01:90:60:5b:7f:29:f7:f1:40:06:da:
                    63:a6:3c:85:37:bb:eb:5e:94:b0:be:89:e4:ac:67:
                    41:69:58:5c:77:27:51:42:a2:38:30:6b:14:9e:d6:
                    88:a2:71:4b:f6:74:cf:02:d3:8e:95:e1:6c:b7:00:
                    37:a3:d3:ef:a8:f8:b5:ef:79:e3:d8:a9:4f:92:e9:
                    59:49:5b:67:c7:1d:74:51:75:15:2c:3e:85:03:3d:
                    33:67:6c:e6:38:0a:05:53:c1:c6:e7:d1:0d:63:86:
                    07:40:68:f8:cf:9c:2c:07:8a:cb:44:32:bf:10:8b:
                    29:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F6:07:16:1C:73:57:43:69:9F:D4:C2:93:46:48:94:E3:F7:F7:F7
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231363a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:216::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:75:53:6a:43:18:7f:ab:17:e2:93:ab:9a:b7:72:17:c2:76:
         3c:23:94:66:da:73:7e:98:ff:10:27:bc:cf:f0:1f:3e:e8:d1:
         29:2b:b4:0a:17:0b:1f:32:1c:23:7a:8b:b5:ce:7d:d1:74:36:
         62:c9:b4:c6:b4:8a:df:0a:8d:63:b6:cc:2f:fe:8b:9a:47:d1:
         69:b9:75:08:53:2f:1f:d5:4a:dd:77:e0:c2:c4:66:48:b1:7c:
         74:58:94:f8:6a:ff:5a:0a:91:73:27:33:24:7c:28:1c:fb:3b:
         f2:4e:17:63:5f:24:8b:df:38:6d:45:39:cf:4a:88:d1:42:46:
         da:e0:4d:0f:4b:95:a6:00:70:b8:02:1c:72:0e:a9:b5:ea:e9:
         da:a1:bc:f3:14:65:42:09:8b:9c:22:67:43:6b:5b:5b:a9:b7:
         da:d9:c6:56:27:d8:df:11:29:12:5f:af:e6:06:04:94:06:32:
         f2:3d:cf:b5:06:22:9d:c2:2c:05:bf:a0:06:2f:6f:f6:54:f1:
         95:fe:81:60:95:1d:66:fb:1f:e1:42:1c:9c:f9:d2:0f:cc:18:
         98:88:19:2f:eb:35:fb:d2:cb:2f:b5:78:d5:8d:4b:66:59:df:
         b2:9f:10:11:dd:d8:c4:83:56:80:eb:9e:be:15:f3:e9:4f:3c:
         4d:41:c5:b9
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUEpdSsmcwGz39SOSWQN+5Q5W7HPswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjQwNjA0MTE1MzIzWhcNMjUwNjAzMTE1ODIz
WjAzMTEwLwYDVQQDEyg5NEY2MDcxNjFDNzM1NzQzNjk5RkQ0QzI5MzQ2NDg5NEUz
RjdGN0Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7xUabYafKMI
cwUTPiz6CDEbZ8uA247xwZourvjm9D5FBCF9juIOy68T40dQsvXseWGLMyLXkcTW
wzZlhh6JD3kNTjCvvvnwq5GDmPZtvmoYVKO6Q0JHv28MR/a2nwZqApDR+6aKgG6V
u2gaF9HOJWMmnSdRHTWBdSA7OlszzJMjZAmDx1QfGQz8AZBgW38p9/FABtpjpjyF
N7vrXpSwvonkrGdBaVhcdydRQqI4MGsUntaIonFL9nTPAtOOleFstwA3o9PvqPi1
73nj2KlPkulZSVtnxx10UXUVLD6FAz0zZ2zmOAoFU8HG59ENY4YHQGj4z5wsB4rL
RDK/EIspaQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFJT2BxYcc1dDaZ/UwpNGSJTj
9/f3MB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzIzMTM2M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv9iAhYwDQYJKoZI
hvcNAQELBQADggEBAEV1U2pDGH+rF+KTq5q3chfCdjwjlGbac36Y/xAnvM/wHz7o
0SkrtAoXCx8yHCN6i7XOfdF0NmLJtMa0it8KjWO2zC/+i5pH0Wm5dQhTLx/VSt13
4MLEZkixfHRYlPhq/1oKkXMnMyR8KBz7O/JOF2NfJIvfOG1FOc9KiNFCRtrgTQ9L
laYAcLgCHHIOqbXq6dqhvPMUZUIJi5wiZ0NrW1upt9rZxlYn2N8RKRJfr+YGBJQG
MvI9z7UGIp3CLAW/oAYvb/ZU8ZX+gWCVHWb7H+FCHJz50g/MGJiIGS/rNfvSyy+1
eNWNS2ZZ37KfEBHd2MSDVoDrnr4V8+lPPE1Bxbk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:13 2024 by rpki-client on console-fra.rpki-client.org