Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231633a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a3231633a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          EIzp3ObztNAruRJ+xfu10N4qHq60ZrCjlOFHiGKUvjQ=
Subject key identifier:   BC:A4:EA:9F:2D:5F:A7:BF:96:0F:20:36:E5:1D:94:36:3E:E2:B8:B2
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       1D7E39A06E0EC26E6BCF12D87C356B9E4AF24318
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231633a3a2f34382d3438203d3e2039303039.roa
Signing time:             Tue 04 Jun 2024 11:58:25 +0000
ROA not before:           Tue 04 Jun 2024 11:53:25 +0000
ROA not after:            Tue 03 Jun 2025 11:58:25 +0000
asID:                     9009
IP address blocks:        2602:ff62:21c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7e:39:a0:6e:0e:c2:6e:6b:cf:12:d8:7c:35:6b:9e:4a:f2:43:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jun  4 11:53:25 2024 GMT
            Not After : Jun  3 11:58:25 2025 GMT
        Subject: CN=BCA4EA9F2D5FA7BF960F2036E51D94363EE2B8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:97:ea:90:63:ad:ba:74:05:3f:bc:d6:22:
                    24:a9:aa:b5:31:e6:7b:af:2c:0f:2b:18:c7:a9:d1:
                    da:6e:09:dc:b2:2f:5f:b6:01:ef:db:22:43:18:fb:
                    b4:6d:56:6f:e1:7d:a4:60:10:92:d3:6f:6e:b4:7c:
                    3f:04:9d:1d:a2:53:50:f8:b8:b9:5f:a2:9c:d9:57:
                    59:85:9e:e7:76:84:e2:ac:7f:49:b2:92:18:5d:2e:
                    75:66:79:04:cc:14:9d:f3:0f:8e:a1:79:27:5f:35:
                    5a:9d:a8:66:52:32:5a:ed:fb:2a:81:79:75:00:a6:
                    3d:86:bb:59:a3:49:bf:b9:09:d5:b4:e6:a8:86:83:
                    4a:c4:07:4c:80:0b:76:36:58:8e:b0:c4:8d:aa:0b:
                    cd:2a:08:50:b3:99:7e:90:f2:5d:d1:bd:82:31:b7:
                    4e:27:4a:91:88:57:b7:9b:c7:74:8f:ad:0e:9f:0e:
                    f8:9d:a1:93:8c:fb:81:a8:0d:6c:1f:4a:f1:61:f6:
                    d4:78:f6:84:a3:52:60:b1:c2:58:c0:01:5e:7e:03:
                    76:78:b6:e4:e3:93:1b:43:b6:56:f7:3d:1e:7a:db:
                    bf:83:05:27:36:87:32:f2:e9:0d:10:16:a8:56:cb:
                    cc:53:7c:c0:19:da:22:ec:ec:7a:5a:65:86:24:ed:
                    9a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A4:EA:9F:2D:5F:A7:BF:96:0F:20:36:E5:1D:94:36:3E:E2:B8:B2
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3231633a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:21c::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:e9:90:88:af:29:36:c9:7d:2f:fa:f1:1b:99:dd:d6:f6:a0:
         aa:95:fa:a7:d2:be:98:61:4a:82:2d:2e:64:80:8b:80:39:f6:
         f2:c9:83:49:81:0e:e8:9f:77:07:f7:fc:77:07:1b:18:3d:fc:
         c0:1a:08:df:ab:50:a3:9a:4a:41:99:f2:be:54:5d:1b:1e:c4:
         f5:99:3f:d5:0f:26:65:e8:55:07:9a:59:67:f9:47:6e:1f:40:
         06:1d:91:03:e1:eb:b9:be:2b:32:9b:ea:51:6a:93:55:55:a6:
         b6:2b:e5:d0:3a:d9:79:59:d5:82:e7:2e:0e:0d:41:87:b0:95:
         71:36:6c:85:cb:07:a2:d3:85:e8:73:1a:c7:cd:34:95:a4:1d:
         cf:fd:97:7a:17:c2:76:90:39:16:3b:73:1b:f8:b8:fc:6b:35:
         12:32:2f:1d:73:15:23:b9:4a:04:4c:38:78:17:9e:44:64:28:
         27:7d:e7:57:c7:b2:7f:be:27:98:a3:0d:6a:88:82:be:1b:1f:
         75:c5:71:c7:69:72:f5:7b:e2:e7:75:6f:a7:64:8d:9a:1c:7b:
         bc:31:51:99:b5:a9:c6:b1:23:13:5f:9b:d4:67:d7:eb:ab:fe:
         cd:38:f4:06:8f:c5:6b:54:36:e8:e3:4a:9b:d5:ff:e8:26:43:
         e0:e8:75:28
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUHX45oG4Owm5rzxLYfDVrnkryQxgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjQwNjA0MTE1MzI1WhcNMjUwNjAzMTE1ODI1
WjAzMTEwLwYDVQQDEyhCQ0E0RUE5RjJENUZBN0JGOTYwRjIwMzZFNTFEOTQzNjNF
RTJCOEIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQCX6pBjrbp0
BT+81iIkqaq1MeZ7rywPKxjHqdHabgncsi9ftgHv2yJDGPu0bVZv4X2kYBCS029u
tHw/BJ0dolNQ+Li5X6Kc2VdZhZ7ndoTirH9JspIYXS51ZnkEzBSd8w+OoXknXzVa
nahmUjJa7fsqgXl1AKY9hrtZo0m/uQnVtOaohoNKxAdMgAt2NliOsMSNqgvNKghQ
s5l+kPJd0b2CMbdOJ0qRiFe3m8d0j60Onw74naGTjPuBqA1sH0rxYfbUePaEo1Jg
scJYwAFefgN2eLbk45MbQ7ZW9z0eetu/gwUnNocy8ukNEBaoVsvMU3zAGdoi7Ox6
WmWGJO2agQIDAQABo4ICuTCCArUwHQYDVR0OBBYEFLyk6p8tX6e/lg8gNuUdlDY+
4riyMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzIzMTYzM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAv9iAhwwDQYJKoZI
hvcNAQELBQADggEBAGrpkIivKTbJfS/68RuZ3db2oKqV+qfSvphhSoItLmSAi4A5
9vLJg0mBDuifdwf3/HcHGxg9/MAaCN+rUKOaSkGZ8r5UXRsexPWZP9UPJmXoVQea
WWf5R24fQAYdkQPh67m+KzKb6lFqk1VVprYr5dA62XlZ1YLnLg4NQYewlXE2bIXL
B6LThehzGsfNNJWkHc/9l3oXwnaQORY7cxv4uPxrNRIyLx1zFSO5SgRMOHgXnkRk
KCd951fHsn++J5ijDWqIgr4bH3XFccdpcvV74ud1b6dkjZoce7wxUZm1qcaxIxNf
m9Rn1+ur/s049AaPxWtUNujjSpvV/+gmQ+DodSg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:18:13 2024 by rpki-client on console-fra.rpki-client.org