Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3834303a3a2f34332d3433203d3e203533333433.roa
File:                     323630323a663736353a3834303a3a2f34332d3433203d3e203533333433.roa (raw, json)
Hash identifier:          2euiWvYQOKtZXCyBn1PPAvXnc9EVn4+3HZPuYfoIpNI=
Subject key identifier:   3F:3B:17:37:B2:55:89:F6:DD:2C:E8:4A:90:69:06:E9:62:1F:89:F4
Certificate issuer:       /CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
Certificate serial:       340720A3B5394E6C28D0CCA1BF0EB07C95D1ED72
Authority key identifier: 6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3834303a3a2f34332d3433203d3e203533333433.roa
Signing time:             Tue 07 Jan 2025 04:04:04 +0000
ROA not before:           Tue 07 Jan 2025 03:59:04 +0000
ROA not after:            Tue 06 Jan 2026 04:04:04 +0000
asID:                     53343
IP address blocks:        2602:f765:840::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/da044fca-c418-4088-8a66-0c6896769f77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 15:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:07:20:a3:b5:39:4e:6c:28:d0:cc:a1:bf:0e:b0:7c:95:d1:ed:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff
        Validity
            Not Before: Jan  7 03:59:04 2025 GMT
            Not After : Jan  6 04:04:04 2026 GMT
        Subject: CN=3F3B1737B25589F6DD2CE84A906906E9621F89F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2b:c7:e9:aa:22:c7:fb:53:67:c3:d3:89:39:
                    59:17:d5:c4:9a:fc:27:47:8e:37:b5:8b:7d:6b:25:
                    c4:c9:ea:4c:73:06:4e:97:44:f3:a8:ed:83:b8:1b:
                    ee:94:aa:4c:25:4c:7b:5c:93:30:04:6d:e1:1e:f0:
                    c2:b1:d3:12:27:4c:78:44:3d:08:67:2d:b3:fb:06:
                    b5:fd:97:47:e6:63:b9:28:52:29:4b:8d:6e:06:34:
                    f0:d8:a7:03:3c:ae:6e:e9:a1:ad:37:88:d7:4f:58:
                    28:16:b0:43:4e:7a:91:ab:11:b7:31:5a:96:04:e5:
                    21:0d:30:79:5c:85:d9:de:98:da:ad:01:e5:ea:94:
                    13:a1:ee:df:89:e9:b3:c2:7d:44:ed:2a:32:af:43:
                    32:f1:ed:cd:5e:fa:93:f0:59:e4:c4:90:af:a6:91:
                    87:8d:6b:c6:47:a2:29:45:41:10:13:00:7f:4b:40:
                    10:63:6d:7c:73:a6:bb:00:a4:28:49:94:08:ed:cc:
                    96:39:7a:e7:1b:a6:10:71:25:1e:f8:f7:d2:e9:2d:
                    3b:6e:c3:88:d6:03:83:8b:4a:6d:77:a2:76:1d:4f:
                    31:59:8b:7d:2c:ac:03:57:9f:4d:fd:71:75:34:c3:
                    96:10:2c:41:fd:d4:95:6f:99:50:c6:97:64:dd:44:
                    74:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3B:17:37:B2:55:89:F6:DD:2C:E8:4A:90:69:06:E9:62:1F:89:F4
            X509v3 Authority Key Identifier:
                keyid:6B:BF:BA:B4:26:67:2D:39:5C:FC:17:B1:3C:AD:AC:1A:38:22:3B:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/6BBFBAB426672D395CFC17B13CADAC1A38223BAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/da044fca-c418-4088-8a66-0c6896769f77/772ca8b9b1a98402624e0d5142b17425ddd2e0330ebd24dcff.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/0/323630323a663736353a3834303a3a2f34332d3433203d3e203533333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f765:840::/43

    Signature Algorithm: sha256WithRSAEncryption
         5a:81:04:0d:07:39:6f:eb:52:7f:1b:7e:0a:a5:6d:c1:e6:97:
         da:b7:3a:6e:58:a6:34:83:e5:19:2a:87:23:ba:d9:ba:51:22:
         05:1d:78:c3:42:8a:18:b4:17:39:60:68:32:21:0d:bd:fd:dd:
         35:4d:f4:50:93:17:58:f0:50:35:f2:ed:c7:5a:c7:09:d4:49:
         04:73:93:3d:3f:c9:c3:fe:b1:22:41:17:22:7f:e0:65:29:27:
         da:b3:5b:d8:b8:c1:7b:16:a5:e0:18:1a:8d:75:df:e8:82:91:
         81:20:72:f6:be:65:9f:fa:4c:23:ff:5d:3c:bf:6c:e2:8c:f1:
         15:c0:d8:25:a0:7f:fa:68:82:9f:5a:55:da:2c:a6:5d:0c:f8:
         ad:fe:b9:b6:f5:ad:e1:47:cb:ae:60:79:5a:3b:c3:33:a5:35:
         71:70:00:11:07:a5:13:c9:26:4c:80:13:ad:ce:29:9e:89:fe:
         08:e4:e7:3c:1a:c6:16:7a:b9:c4:e6:80:b6:a0:1c:35:d2:93:
         38:4f:4b:f6:4e:7e:eb:df:f5:68:f8:11:44:43:1f:75:79:31:
         a1:cc:b3:2c:31:0f:3c:39:8f:02:3b:d6:a6:9c:a4:78:59:44:
         cc:86:c0:05:53:26:a7:29:3c:da:48:9a:23:a8:0b:5b:f5:3c:
         69:18:8b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:49:18 2025 by rpki-client