Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231383a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231383a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          iEDH/AZFNkwxBhV3BLKiS5fXsb2QRY/OSaLOuw7TVz0=
Subject key identifier:   CA:07:40:E3:BC:57:4D:78:A3:0F:29:DD:FB:6E:95:58:E2:A7:D2:4C
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       49A126017FAA22842F7B9B91E339D11154B12807
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231383a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 04 Jun 2024 11:58:23 +0000
ROA not before:           Tue 04 Jun 2024 11:53:23 +0000
ROA not after:            Tue 03 Jun 2025 11:58:23 +0000
asID:                     9009
IP address blocks:        2602:ff62:218::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a1:26:01:7f:aa:22:84:2f:7b:9b:91:e3:39:d1:11:54:b1:28:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun  4 11:53:23 2024 GMT
            Not After : Jun  3 11:58:23 2025 GMT
        Subject: CN=CA0740E3BC574D78A30F29DDFB6E9558E2A7D24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:21:b9:33:3c:fc:1b:04:5b:51:38:f1:a8:
                    df:08:97:ab:0c:32:b5:35:b9:7a:21:7f:59:f4:58:
                    d2:3f:02:a0:5c:01:8d:64:67:35:df:f2:b7:34:63:
                    82:59:55:3b:9e:ce:fc:83:44:fd:f7:03:5a:2b:0c:
                    6b:78:f3:2a:3c:ec:2c:8e:c8:0a:72:90:92:82:75:
                    2c:6b:86:48:50:2e:62:f7:9f:c5:bc:50:46:13:32:
                    6f:74:3a:db:4d:82:a8:fb:f6:6b:35:d4:6e:9e:59:
                    41:b3:8c:62:25:92:a8:3c:cc:60:0d:84:06:43:77:
                    03:60:e5:62:26:96:ac:2b:65:f4:d1:72:6a:6e:70:
                    ec:39:f6:f6:1d:0e:0c:99:bb:96:70:f8:a3:af:a2:
                    5b:9d:c1:6d:5f:f5:43:3a:1b:e6:bf:55:0a:2d:3a:
                    e2:d6:2c:bc:48:62:fb:70:fc:f6:0a:5d:d9:4b:23:
                    b5:ed:e2:cf:1b:e7:86:6b:a1:7b:e5:30:fe:96:d4:
                    21:b7:7f:ec:ef:8b:a6:4f:a4:b1:f7:40:2e:1b:39:
                    65:0f:37:c9:e7:1a:cf:c1:c2:f7:7d:7f:1e:9f:dd:
                    00:bf:ef:ee:f1:9b:e7:cc:81:ae:d8:de:c0:3f:2f:
                    b6:1d:79:0b:b0:1d:d8:74:43:6b:5c:65:c3:dd:46:
                    53:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:07:40:E3:BC:57:4D:78:A3:0F:29:DD:FB:6E:95:58:E2:A7:D2:4C
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231383a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:218::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:f0:db:83:b6:af:f9:7b:41:39:6b:d2:1e:eb:b6:ef:a6:e3:
         88:70:5d:44:54:d0:1f:8a:40:17:07:37:68:f2:16:04:24:de:
         c2:70:2c:52:30:1e:af:b7:1c:fe:21:96:ae:7d:dc:57:ff:99:
         a1:ac:74:2f:1e:6c:55:bd:6e:9e:3f:69:7d:0b:f2:c7:87:12:
         7f:14:7b:ce:e3:8b:8d:8c:32:12:28:91:f1:19:02:f7:a1:3f:
         97:80:9c:58:55:c5:28:89:62:ab:ea:d6:bc:86:45:55:8f:0d:
         d0:4d:95:4f:f7:12:38:87:b1:65:a8:7c:5b:94:d9:7f:68:47:
         dc:62:14:2d:bf:66:82:28:97:b4:4f:b1:ab:46:dc:80:77:a1:
         ad:14:44:d5:e8:7a:9f:22:7e:99:b1:23:8c:07:bd:72:13:92:
         1b:fb:9a:06:76:90:63:2d:be:7f:7b:93:d4:6a:62:f8:5d:2e:
         25:53:ea:13:be:72:d7:29:ef:ff:a1:de:61:99:d8:67:04:39:
         23:79:27:67:2e:27:e7:a7:0e:96:56:4d:80:6a:43:00:c2:65:
         8e:4e:8e:20:3a:a0:1b:3c:4f:9d:d1:79:a9:30:c0:bc:f6:02:
         da:99:65:53:31:79:4b:f0:f5:a0:9b:bc:33:47:46:11:0f:2f:
         34:c1:5c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:13 2024 by rpki-client on console-fra.rpki-client.org