Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3630303a3a2f34332d3433203d3e203533333433.roa
File:                     323630323a663736353a3630303a3a2f34332d3433203d3e203533333433.roa (raw, json)
Hash identifier:          lUiRcgfMSslRIck3/lsc9HhFasPBbypkvGrkAsy0rcA=
Subject key identifier:   6D:B9:F3:AF:CC:C4:46:26:66:90:51:70:41:D2:F7:1A:3A:AA:C6:4F
Certificate issuer:       /CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
Certificate serial:       571F1F65565CA532008F46F03D0EA64F042F71D3
Authority key identifier: 6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3630303a3a2f34332d3433203d3e203533333433.roa
Signing time:             Sat 11 Jan 2025 17:58:24 +0000
ROA not before:           Sat 11 Jan 2025 17:53:24 +0000
ROA not after:            Sat 10 Jan 2026 17:58:24 +0000
asID:                     53343
IP address blocks:        2602:f765:600::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 15:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1f:1f:65:56:5c:a5:32:00:8f:46:f0:3d:0e:a6:4f:04:2f:71:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
        Validity
            Not Before: Jan 11 17:53:24 2025 GMT
            Not After : Jan 10 17:58:24 2026 GMT
        Subject: CN=6DB9F3AFCCC446266690517041D2F71A3AAAC64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:52:43:a5:05:d7:b9:69:06:04:46:be:72:
                    de:5b:c3:fd:02:97:dc:06:b2:6c:0b:89:7d:2b:f8:
                    18:b8:c7:bd:25:a0:12:eb:01:f7:27:4c:a8:5a:46:
                    5f:22:92:00:06:7c:26:59:27:9d:3b:47:74:8c:56:
                    29:05:d0:c2:d8:6a:0f:4d:08:bf:3e:09:b3:e6:78:
                    13:05:bb:30:91:80:11:df:85:53:f7:ef:93:66:e1:
                    85:7a:43:30:e4:7b:fd:32:4d:63:6c:5b:05:25:94:
                    7a:ab:61:df:e9:09:ea:98:f8:f7:19:2f:a3:06:61:
                    50:37:44:c6:0d:34:2e:46:57:76:c6:43:da:99:ea:
                    c3:b2:f6:ca:33:5b:9c:0a:9c:14:39:4b:2c:a5:46:
                    f7:58:f2:6e:33:4c:16:d6:d6:83:b3:f2:4d:25:db:
                    b2:5a:e9:f9:97:fc:37:cc:1b:a8:93:25:85:fe:35:
                    2d:b5:fb:19:89:17:d3:42:3b:ee:0c:0e:0c:f5:57:
                    34:50:ae:8e:ec:5e:d8:11:de:9a:54:b0:ca:ad:21:
                    da:a9:67:a8:18:7a:5c:c5:87:56:96:f4:4b:8a:16:
                    7f:a7:a3:54:f2:aa:fa:7f:c8:02:08:5d:77:68:26:
                    6a:59:c0:e6:44:4a:a2:da:09:b4:13:d5:f1:4b:18:
                    51:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B9:F3:AF:CC:C4:46:26:66:90:51:70:41:D2:F7:1A:3A:AA:C6:4F
            X509v3 Authority Key Identifier:
                keyid:6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3630303a3a2f34332d3433203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f765:600::/43

    Signature Algorithm: sha256WithRSAEncryption
         5c:34:4e:13:62:53:85:72:0d:60:1d:e5:36:4c:55:c6:03:7a:
         80:d4:d0:07:84:7a:87:f4:b4:54:0d:38:0c:e9:8b:79:b0:b8:
         53:5a:ec:a0:26:d9:92:a3:99:05:29:d6:54:b9:4e:75:fd:c9:
         c1:98:6d:c3:d6:71:82:30:7e:cb:d9:17:ec:7a:6c:9a:12:6a:
         09:83:17:9e:a8:d9:e2:6b:5d:b5:33:ed:7f:7b:fe:e4:fe:55:
         c7:ae:7d:77:45:cd:92:44:d1:a2:2c:6e:01:b1:70:e8:f6:50:
         04:24:d3:4c:ad:e2:a6:e5:38:4c:53:db:85:d5:29:0c:88:7e:
         f7:31:e3:07:2f:cd:ed:f7:eb:0c:f8:19:d7:38:c2:8d:7c:40:
         13:5f:89:86:83:67:cc:99:f0:e0:29:9b:75:4f:af:e4:6d:0d:
         1d:17:a9:19:5b:82:91:c7:06:6b:60:d1:03:b6:ed:de:19:69:
         4a:3a:99:43:03:b7:6d:28:6e:da:bb:87:5c:46:55:c9:65:ee:
         2c:8c:ba:f0:47:71:7b:89:6d:cd:0d:93:c4:2a:ee:7e:ef:e9:
         9a:f2:0d:13:68:33:53:78:da:27:6d:54:fc:62:22:46:eb:cf:
         45:ce:0f:c4:c0:36:3e:f4:69:2f:da:33:2e:30:f6:57:b8:68:
         f9:11:80:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:45:41 2025 by rpki-client