Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138353a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3138353a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          cwpp4/UZFmo9l8mXq1UeTh0LpN4GVrKlz6Q/Sr2p3lM=
Subject key identifier:   60:17:A3:D3:60:8C:D8:03:A8:E5:74:DD:1A:A6:C8:28:74:64:E9:75
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       0552B5DE184B55EB5056B16F0CB7B0EB8679FCD4
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138353a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 05 May 2025 15:28:32 +0000
ROA not before:           Mon 05 May 2025 15:23:32 +0000
ROA not after:            Mon 04 May 2026 15:28:32 +0000
asID:                     29802
IP address blocks:        2602:ff62:185::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 17:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:52:b5:de:18:4b:55:eb:50:56:b1:6f:0c:b7:b0:eb:86:79:fc:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May  5 15:23:32 2025 GMT
            Not After : May  4 15:28:32 2026 GMT
        Subject: CN=6017A3D3608CD803A8E574DD1AA6C8287464E975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:d1:08:d5:e5:5f:cf:62:3c:b6:91:a7:ea:
                    31:65:7a:77:35:0b:37:f3:be:6a:89:19:32:d3:35:
                    6d:67:fc:8c:52:fb:c6:74:d8:3c:cf:c2:43:fe:48:
                    b8:42:f7:0b:1c:11:8e:55:35:c7:b5:5a:84:dc:7f:
                    cc:4a:d4:1f:f3:b5:1a:23:76:90:ba:01:6d:06:f1:
                    aa:ce:34:d1:bb:58:2c:8f:bc:67:30:d2:ae:f1:e5:
                    fe:50:79:d1:4b:48:2c:0e:9a:9c:fa:20:a8:b4:16:
                    e7:42:a5:d3:89:ad:ef:ed:b6:2f:84:09:48:b2:07:
                    c0:de:4f:8f:cb:07:72:6a:99:62:55:34:57:c6:43:
                    d1:39:fb:ce:45:bb:82:71:b7:f4:04:59:90:ed:90:
                    b5:b9:b4:48:5a:3e:bb:aa:08:b6:74:9d:82:9c:39:
                    5d:0f:31:e6:ab:e0:27:80:4d:97:7d:3a:b6:3c:ea:
                    32:c7:9d:41:23:60:87:58:26:42:f9:52:fe:b5:8f:
                    80:fd:23:04:b2:b4:36:cc:35:bd:8e:24:ed:10:08:
                    5c:ed:bb:9b:d9:a7:7b:9a:a5:ec:8e:ab:c4:87:2f:
                    4f:6c:3a:c4:46:9c:a1:90:9b:94:59:0f:dc:4c:5f:
                    77:1f:90:64:eb:da:0d:74:a0:01:b8:11:07:b6:12:
                    af:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:17:A3:D3:60:8C:D8:03:A8:E5:74:DD:1A:A6:C8:28:74:64:E9:75
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3138353a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:185::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:e7:58:96:fd:b8:f3:41:e0:e6:49:44:7c:18:54:7c:0b:4e:
         33:95:45:75:75:9c:99:93:ce:ad:99:32:8d:9b:39:04:df:7f:
         c2:05:2c:56:d5:75:ed:0a:1f:5c:ee:17:d8:88:1d:30:06:24:
         c9:aa:f0:4e:3d:c4:fc:2e:31:b8:af:62:e3:de:da:84:42:18:
         7e:01:29:cd:89:67:8b:25:00:5e:68:cd:83:1c:d0:1d:c1:b0:
         99:85:ba:d8:e0:8a:a3:20:91:13:6c:99:3e:c4:a9:09:99:a4:
         e2:5d:f1:f2:65:a0:41:a7:3a:30:1b:40:ef:58:bb:0e:e9:ae:
         02:46:29:a7:7d:73:62:c2:b6:a0:66:0d:ef:3d:ce:cd:1c:56:
         c5:ef:01:24:28:04:5d:fa:7b:6c:a0:8a:b2:fa:34:e3:99:7c:
         16:a0:b6:b9:ad:6e:9d:d8:44:34:9c:0c:5b:0f:21:5e:a7:2f:
         3d:8c:db:07:29:57:56:88:18:dd:29:cc:17:04:a0:41:47:66:
         86:2e:ab:94:40:ab:71:d6:ca:36:08:40:c8:7f:a7:7e:f7:be:
         80:99:18:7f:67:3e:31:c2:1a:ae:af:cc:ec:73:21:09:73:fc:
         ac:29:93:be:ff:7d:d5:7a:ca:de:71:01:4b:5f:8e:f3:e2:1f:
         66:54:e2:c9
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUBVK13hhLVetQVrFvDLew64Z5/NQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjUwNTA1MTUyMzMyWhcNMjYwNTA0MTUyODMy
WjAzMTEwLwYDVQQDEyg2MDE3QTNEMzYwOENEODAzQThFNTc0REQxQUE2QzgyODc0
NjRFOTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOfRCNXlX89i
PLaRp+oxZXp3NQs3875qiRky0zVtZ/yMUvvGdNg8z8JD/ki4QvcLHBGOVTXHtVqE
3H/MStQf87UaI3aQugFtBvGqzjTRu1gsj7xnMNKu8eX+UHnRS0gsDpqc+iCotBbn
QqXTia3v7bYvhAlIsgfA3k+PywdyapliVTRXxkPROfvORbuCcbf0BFmQ7ZC1ubRI
Wj67qgi2dJ2CnDldDzHmq+AngE2XfTq2POoyx51BI2CHWCZC+VL+tY+A/SMEsrQ2
zDW9jiTtEAhc7bub2ad7mqXsjqvEhy9PbDrERpyhkJuUWQ/cTF93H5Bk69oNdKAB
uBEHthKv2QIDAQABo4ICuzCCArcwHQYDVR0OBBYEFGAXo9NgjNgDqOV03RqmyCh0
ZOl1MB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzODM1M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBhTANBgkq
hkiG9w0BAQsFAAOCAQEAaedYlv2480Hg5klEfBhUfAtOM5VFdXWcmZPOrZkyjZs5
BN9/wgUsVtV17QofXO4X2IgdMAYkyarwTj3E/C4xuK9i497ahEIYfgEpzYlniyUA
XmjNgxzQHcGwmYW62OCKoyCRE2yZPsSpCZmk4l3x8mWgQac6MBtA71i7DumuAkYp
p31zYsK2oGYN7z3OzRxWxe8BJCgEXfp7bKCKsvo045l8FqC2ua1undhENJwMWw8h
XqcvPYzbBylXVogY3SnMFwSgQUdmhi6rlECrcdbKNghAyH+nfve+gJkYf2c+McIa
rq/M7HMhCXP8rCmTvv991XrK3nEBS1+O8+IfZlTiyQ==
-----END CERTIFICATE-----
Generated at Mon May 12 10:24:42 2025 by rpki-client