Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa
File:                     323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa (raw, json)
Hash identifier:          xIBzVraxB8Oq6U68xVpCgWeYSPU+7cS/bsiu5mUkvXs=
Subject key identifier:   A4:73:9C:09:D8:F0:DB:40:69:F6:D4:47:29:D0:A8:DB:BA:83:F0:AE
Certificate issuer:       /CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
Certificate serial:       03D4DACD3FCB35FBD91A570407462E9E4B953AE0
Authority key identifier: 4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa
Signing time:             Sun 13 Jul 2025 23:32:07 +0000
ROA not before:           Sun 13 Jul 2025 23:27:07 +0000
ROA not after:            Sun 12 Jul 2026 23:32:07 +0000
asID:                     214768
IP address blocks:        2602:f761:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl
                          rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 13:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d4:da:cd:3f:cb:35:fb:d9:1a:57:04:07:46:2e:9e:4b:95:3a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
        Validity
            Not Before: Jul 13 23:27:07 2025 GMT
            Not After : Jul 12 23:32:07 2026 GMT
        Subject: CN=A4739C09D8F0DB4069F6D44729D0A8DBBA83F0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:fc:3e:8a:f5:f3:d4:dc:0e:4b:c0:e3:28:54:
                    fa:03:a7:19:59:74:91:5f:70:11:2d:a4:ce:ab:c5:
                    eb:50:88:af:ed:b3:7e:0c:8a:e8:c2:68:ac:b9:2f:
                    b1:00:df:d5:dc:32:5a:39:ce:59:c9:68:61:a9:ec:
                    69:32:aa:68:29:27:75:16:02:6c:c6:47:3f:b5:af:
                    17:ef:52:ed:09:37:3f:12:f3:b0:98:12:53:cb:26:
                    4a:9d:03:57:b5:8b:ea:70:3c:e1:da:5c:a8:dc:0f:
                    6b:84:d2:44:44:4e:40:bd:eb:b7:cc:3b:71:ee:45:
                    8e:73:8b:97:37:29:f8:b0:7b:4a:fc:73:bf:27:21:
                    04:ea:65:d3:3f:86:9a:23:86:bf:3b:ba:4d:af:9d:
                    8b:e1:f9:b8:01:c8:59:86:a2:3f:0e:89:e9:1c:11:
                    b3:85:94:80:27:92:1f:58:e5:2a:e9:96:8a:97:e1:
                    d4:41:62:2a:51:97:ec:fc:ad:d3:f3:79:88:0b:64:
                    21:91:33:4b:08:57:24:4e:f4:db:98:a1:19:26:ec:
                    45:76:bf:1a:90:34:cd:b4:23:a9:c5:7c:f1:d2:7d:
                    df:fa:57:9a:f2:da:f8:15:a1:88:6c:0e:6d:17:31:
                    04:26:7c:4c:2d:13:95:6e:c0:6e:8a:e9:43:fa:43:
                    c5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:73:9C:09:D8:F0:DB:40:69:F6:D4:47:29:D0:A8:DB:BA:83:F0:AE
            X509v3 Authority Key Identifier:
                keyid:4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a33303a3a2f34342d3434203d3e20323134373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f761:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         b2:10:e4:57:f1:97:51:31:21:69:41:94:5d:4a:84:a0:1b:8c:
         a2:90:89:da:9c:ba:68:2a:2b:72:6a:58:a7:da:4f:27:f6:61:
         97:fb:5d:44:a7:8d:f8:79:00:37:ae:88:54:34:90:f0:3b:a6:
         29:e6:78:fc:a9:32:96:07:6c:7a:ab:6e:0e:4e:39:80:5f:14:
         a8:4b:5c:5a:35:38:8e:35:77:65:66:a1:a2:32:ed:06:9a:ce:
         ab:12:28:19:6f:43:f2:0a:1e:69:5e:87:be:3f:3a:91:d3:72:
         12:2a:9a:29:08:20:03:33:b3:8a:5b:11:e5:44:de:ba:eb:26:
         72:cc:6f:b0:2c:6a:fb:18:0c:79:fb:02:5a:b6:10:4e:8b:6b:
         da:db:8c:65:95:e6:88:78:c2:2d:51:16:07:fd:1e:f8:6c:5a:
         e5:ac:2f:ad:23:17:04:4e:28:d3:ef:a5:34:01:25:92:0b:74:
         84:a6:5c:66:00:0b:bf:2b:85:62:f6:40:42:3e:38:28:e1:e8:
         50:cb:e9:88:26:4b:4e:1b:4c:a2:08:8f:44:3b:93:ae:1c:4e:
         e3:60:0d:fb:71:55:07:9b:77:cb:af:9e:54:a5:5b:ce:cc:7e:
         78:36:89:31:97:7a:ce:7c:4e:68:ae:2d:1e:1f:b2:77:ff:e4:
         39:d9:ff:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:23:14 2025 by rpki-client