Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231613a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231613a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          3YHwEvKzzctRuaURi+JoTIMuPlu69WMPCq80AYAhNXM=
Subject key identifier:   F8:E4:DB:AB:D7:89:81:AA:AA:6F:F9:1B:90:89:73:C7:4C:D7:B2:D6
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       4066DDF1F2319352B7BACCC9E36519C6E63AA225
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231613a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 04 Jun 2024 11:58:24 +0000
ROA not before:           Tue 04 Jun 2024 11:53:24 +0000
ROA not after:            Tue 03 Jun 2025 11:58:24 +0000
asID:                     9009
IP address blocks:        2602:ff62:21a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:66:dd:f1:f2:31:93:52:b7:ba:cc:c9:e3:65:19:c6:e6:3a:a2:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun  4 11:53:24 2024 GMT
            Not After : Jun  3 11:58:24 2025 GMT
        Subject: CN=F8E4DBABD78981AAAA6FF91B908973C74CD7B2D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:79:bf:33:70:cc:03:83:10:a1:a7:f4:bb:
                    b6:af:cb:58:e6:c0:26:93:ec:67:1f:8e:92:41:38:
                    77:55:5d:fa:e4:7e:14:9b:af:2a:98:3d:d8:5f:89:
                    ee:67:56:8f:58:b1:52:ab:7b:e0:b8:06:60:60:55:
                    1d:a4:02:46:8d:1b:64:28:c6:a9:72:02:00:bc:d4:
                    24:71:07:a5:ad:e1:69:14:c2:71:25:18:4a:03:a6:
                    f3:86:47:fc:6c:95:e5:96:3e:0a:06:58:40:5d:fb:
                    d7:07:48:84:49:e9:a9:7c:1a:4d:01:c2:e5:1f:4a:
                    f9:0f:6e:cb:11:28:b6:50:11:07:89:5c:88:af:e4:
                    ec:b6:fc:85:11:4b:cd:e2:5f:7b:85:da:24:9c:f2:
                    94:26:75:36:ee:33:87:89:25:c3:fc:a4:a4:df:06:
                    90:9c:4f:16:92:c0:79:7d:49:19:db:0d:9a:5b:62:
                    c7:13:83:9b:ed:c4:8c:57:81:5b:69:61:d5:7b:fb:
                    96:fa:35:78:6f:e8:19:55:00:5b:fb:56:77:2e:37:
                    77:cd:30:42:40:5a:04:f9:56:6f:53:9d:a1:21:07:
                    46:fe:6f:e6:5b:e1:15:a7:9f:9a:e0:71:cd:cf:4e:
                    dd:dc:ab:c3:b9:ba:26:0b:86:be:8d:8d:e5:d3:08:
                    6d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E4:DB:AB:D7:89:81:AA:AA:6F:F9:1B:90:89:73:C7:4C:D7:B2:D6
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231613a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:21a::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:c0:61:1c:94:87:0b:09:a1:0c:17:6a:c0:cd:f1:2b:c5:40:
         7c:9a:b5:59:aa:17:7f:08:e8:00:ab:33:96:ad:b5:58:0b:50:
         6f:7f:eb:2a:12:21:2e:2e:f1:7b:90:3f:43:10:77:d3:06:f8:
         c5:ff:48:f7:d1:0b:76:fd:6c:b3:4b:bd:bc:b4:34:e5:c2:7c:
         a8:a0:85:27:e6:51:a7:09:07:82:a8:b6:6b:c6:3e:e5:4f:74:
         2a:94:e6:7b:e3:ed:e4:0a:7c:19:37:2f:00:fa:0b:fc:d7:51:
         5a:7e:42:45:a4:58:f2:d8:3f:ab:2b:9c:27:33:ae:9f:e3:37:
         3d:9d:ab:dc:61:7c:83:39:84:43:ce:53:b4:98:e1:21:ca:e5:
         97:83:53:44:2d:e7:1d:cb:09:ee:58:e8:f6:ad:3b:0b:2d:f3:
         19:40:37:f3:51:85:1e:6e:f8:de:c1:f2:16:d4:d5:8e:87:9a:
         cf:d4:96:79:cd:6a:19:e1:0e:d5:eb:d0:23:80:7c:61:32:36:
         16:37:5b:d3:7f:d2:1a:3a:00:ce:d2:9f:b5:93:a7:ca:d5:a0:
         97:31:fb:7b:5e:75:a1:02:83:da:d0:c5:b8:2c:f4:ad:8e:c3:
         4e:49:19:eb:5b:8c:50:78:e7:d4:b1:1f:9d:0b:3b:69:2e:03:
         5a:b5:6b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:55 2024 by rpki-client on console-ams.rpki-client.org