Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231623a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231623a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          e33ntQKNlpZMBXN51P5kofkCG0gAPnlFAoTA/fjJ/Co=
Subject key identifier:   78:C2:EA:46:F7:5A:1B:C1:6D:91:4D:22:5D:5B:98:B1:14:87:98:7B
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       1DA3A69ACF3327495891DAC264440919EFF6D55A
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231623a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 04 Jun 2024 11:58:25 +0000
ROA not before:           Tue 04 Jun 2024 11:53:25 +0000
ROA not after:            Tue 03 Jun 2025 11:58:25 +0000
asID:                     9009
IP address blocks:        2602:ff62:21b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a3:a6:9a:cf:33:27:49:58:91:da:c2:64:44:09:19:ef:f6:d5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun  4 11:53:25 2024 GMT
            Not After : Jun  3 11:58:25 2025 GMT
        Subject: CN=78C2EA46F75A1BC16D914D225D5B98B11487987B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:9c:e8:4c:aa:c7:15:23:6b:39:03:90:74:
                    1e:49:58:37:9a:c0:aa:e1:2f:59:f3:17:37:9c:67:
                    b8:9f:09:48:4c:1e:bf:f6:78:44:f7:7c:3b:b2:c8:
                    77:2c:c9:25:96:4b:ba:69:8b:a8:e6:b1:ed:1a:bf:
                    d1:a7:b6:b4:80:07:1a:44:62:40:b4:1c:7f:00:19:
                    c3:74:49:2e:2c:7b:89:b0:c1:99:b6:03:90:fe:87:
                    90:d9:60:eb:21:bc:53:a1:ce:49:00:dc:39:e8:ca:
                    46:57:c8:9f:7f:0c:ee:3f:93:57:8d:54:8a:fe:44:
                    f5:d9:e6:41:4b:1e:26:c2:63:5a:c4:1e:f2:0a:a6:
                    69:22:78:7e:ca:71:98:d8:b8:25:ae:a1:4f:d0:25:
                    d2:23:79:5b:02:69:ca:19:d8:94:f1:d3:a5:26:bf:
                    d0:e6:7c:a0:94:29:92:2b:5e:9b:b7:64:35:99:8b:
                    0e:ca:2a:14:46:ef:8f:db:9c:a0:c9:22:97:31:56:
                    08:2a:34:48:05:4e:3b:8a:63:16:9d:e7:d8:cb:9d:
                    78:3d:37:7f:f1:bd:b0:7f:e5:43:4c:82:58:ea:c6:
                    dd:0d:df:10:1f:c6:ec:b8:a1:f4:9f:95:bd:d4:66:
                    af:bd:59:2d:63:62:f0:e0:13:1d:41:c9:f4:06:25:
                    c7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C2:EA:46:F7:5A:1B:C1:6D:91:4D:22:5D:5B:98:B1:14:87:98:7B
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231623a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:21b::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:07:e6:31:34:b8:45:a3:7a:93:19:8e:f8:23:4b:2c:12:
         a4:37:c2:3b:a3:58:9c:ab:7a:aa:c9:34:5d:77:a9:ef:89:bc:
         1f:f4:f1:85:01:6f:2b:4b:40:a2:8b:96:a6:16:a5:2e:4d:cf:
         63:f0:46:ac:58:cc:82:ce:5e:d9:cf:4c:59:0d:0c:8b:ef:ad:
         f3:a9:54:8b:9c:7d:d5:b6:ee:aa:d4:f7:1d:be:9c:2d:45:52:
         c7:41:2d:44:98:2d:4c:39:47:b3:70:68:26:e9:95:82:27:f4:
         05:cf:23:12:6d:3b:12:6d:bc:b6:59:fd:d5:6f:cb:05:fc:d0:
         e2:cb:90:63:f9:5a:cb:f5:2b:12:02:e1:d6:ac:c8:00:04:a2:
         75:44:b8:55:68:5a:b3:b1:68:a4:84:40:c3:2c:70:67:11:79:
         da:c9:fa:01:88:3b:a1:a9:0a:e2:a5:74:e4:cb:64:51:93:b4:
         a8:e7:50:80:fd:19:66:f6:80:3d:55:9d:06:6a:5c:e8:dd:a6:
         aa:38:23:f1:62:05:8b:08:00:eb:0b:35:a5:00:09:c0:d3:11:
         b9:17:21:bc:0b:98:67:4c:56:b9:08:2e:55:9f:41:b1:0c:6f:
         9e:bf:fd:e8:e9:78:ba:3f:e2:8a:9c:e1:d3:50:89:87:85:17:
         20:ed:94:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:55 2024 by rpki-client on console-ams.rpki-client.org