Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a32303a3a2f34342d3434203d3e20323134373638.roa
File:                     323630323a663736313a32303a3a2f34342d3434203d3e20323134373638.roa (raw, json)
Hash identifier:          q9PO6On42/rijVCa6cp+Bm2GcUY1Mi/M7C/Ws6lEA0E=
Subject key identifier:   40:27:DC:AC:A2:6D:1C:1B:56:87:A8:79:D0:FB:56:BE:A9:99:85:0D
Certificate issuer:       /CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
Certificate serial:       53480462D4B93A04CE9B4957343C8E8A2A1C9D35
Authority key identifier: 4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a32303a3a2f34342d3434203d3e20323134373638.roa
Signing time:             Sun 13 Jul 2025 23:32:04 +0000
ROA not before:           Sun 13 Jul 2025 23:27:04 +0000
ROA not after:            Sun 12 Jul 2026 23:32:04 +0000
asID:                     214768
IP address blocks:        2602:f761:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl
                          rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 13:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:48:04:62:d4:b9:3a:04:ce:9b:49:57:34:3c:8e:8a:2a:1c:9d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
        Validity
            Not Before: Jul 13 23:27:04 2025 GMT
            Not After : Jul 12 23:32:04 2026 GMT
        Subject: CN=4027DCACA26D1C1B5687A879D0FB56BEA999850D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:ac:21:34:32:ad:f2:5a:a7:b6:6d:aa:69:
                    b6:c8:0d:e7:c1:35:c9:04:62:a8:ec:1c:03:57:93:
                    ed:88:d7:95:5b:a2:45:2e:13:1b:95:cd:8f:fe:f6:
                    7d:96:b1:fc:c3:89:82:f9:0e:10:c9:42:f9:ea:5e:
                    54:db:3e:00:a1:03:2a:40:c3:fa:ed:61:f3:1b:4c:
                    2c:99:2d:94:98:3f:02:46:4a:14:13:b0:fb:5a:1e:
                    be:5d:1e:b4:fc:6d:1e:44:33:af:13:b8:3d:e3:23:
                    30:2e:1d:af:48:89:57:05:9f:08:b3:d9:b3:83:2d:
                    19:d9:59:05:df:77:3a:0d:04:0b:1a:9d:ae:9a:57:
                    ad:14:6c:ab:3b:26:98:60:82:cf:43:47:90:e7:b7:
                    3d:b3:37:d1:4b:24:2d:a2:27:8f:c6:9f:43:79:59:
                    75:e7:97:48:aa:77:e2:44:92:7f:22:c0:59:ad:83:
                    e3:25:05:6a:0c:85:15:0b:68:a3:19:59:79:80:5d:
                    ed:95:12:cb:61:05:d6:d5:25:47:74:24:93:17:ec:
                    6c:27:2e:c6:1c:a6:f0:b9:1c:5b:48:5a:6e:09:51:
                    9b:28:2a:55:23:28:d5:a3:c4:fe:11:ef:45:81:9d:
                    43:b0:ef:72:c1:4b:70:55:89:87:11:21:91:a5:51:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:27:DC:AC:A2:6D:1C:1B:56:87:A8:79:D0:FB:56:BE:A9:99:85:0D
            X509v3 Authority Key Identifier:
                keyid:4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a32303a3a2f34342d3434203d3e20323134373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f761:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:22:26:c6:c9:3b:7c:ea:b6:4b:f4:71:38:74:56:d5:e7:5d:
         9f:a8:83:63:be:66:82:fa:cd:c9:1c:5f:63:0c:f3:0f:67:4a:
         58:61:fc:fb:a4:11:28:b2:5d:15:a5:1d:16:2b:29:67:8c:78:
         e2:95:e3:d4:af:bd:e7:b7:b5:27:58:d3:f4:ae:ab:79:b5:29:
         4a:2b:e9:3b:f5:d1:e6:c5:07:cd:6b:f0:1d:6e:9d:79:05:03:
         f2:2b:a7:d8:e2:30:91:1f:ad:47:2d:8f:98:67:1b:90:19:f5:
         09:07:f9:8a:cf:9f:f7:61:10:9d:d8:73:cb:ed:29:e3:3c:10:
         75:5e:c6:8c:fb:8f:cf:ab:68:73:be:29:b8:e2:e3:b2:01:80:
         20:46:7d:82:47:c2:f0:ea:a0:51:a5:4b:ec:93:fd:04:5c:97:
         15:9b:a4:c7:f0:a2:11:83:bb:70:b4:89:bc:a1:72:8c:c6:00:
         4b:cb:a8:7a:a0:cf:a5:f5:4d:6d:59:34:0b:8e:e3:a2:0f:67:
         30:bd:20:fb:6a:f8:5e:4a:6c:91:82:0b:be:d4:a0:84:5b:8f:
         ec:5a:af:e7:27:61:6d:98:70:7b:40:ae:55:11:53:5a:a4:21:
         6a:45:7c:e9:4f:4c:2c:77:6b:e8:4f:58:e9:02:21:b6:0d:80:
         26:03:47:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:23:55 2025 by rpki-client