Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a34303a3a2f34342d3434203d3e20333937373330.roa
File:                     323630323a663736313a34303a3a2f34342d3434203d3e20333937373330.roa (raw, json)
Hash identifier:          WXRaVPEGP4pY74ej9BbvuJF9efGaKidlMK44LvHkmCg=
Subject key identifier:   EB:FE:00:12:30:77:6A:67:B7:8B:45:42:9F:44:68:92:7B:47:7A:E5
Certificate issuer:       /CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
Certificate serial:       5CF00BE46061FD274F8E31810568DB0CBD03AD72
Authority key identifier: 4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a34303a3a2f34342d3434203d3e20333937373330.roa
Signing time:             Sun 13 Jul 2025 23:32:11 +0000
ROA not before:           Sun 13 Jul 2025 23:27:11 +0000
ROA not after:            Sun 12 Jul 2026 23:32:11 +0000
asID:                     397730
IP address blocks:        2602:f761:40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl
                          rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 13:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f0:0b:e4:60:61:fd:27:4f:8e:31:81:05:68:db:0c:bd:03:ad:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc
        Validity
            Not Before: Jul 13 23:27:11 2025 GMT
            Not After : Jul 12 23:32:11 2026 GMT
        Subject: CN=EBFE001230776A67B78B45429F4468927B477AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bc:8a:8e:c8:13:f7:f6:34:21:05:73:f2:25:
                    b4:62:ee:e7:09:9d:80:3b:66:90:62:78:67:d3:bc:
                    f9:70:87:97:89:aa:cb:57:cc:69:71:48:a3:e1:29:
                    5c:5d:46:53:38:8b:94:4d:9b:ff:f1:75:ee:ae:cf:
                    54:f0:f6:24:27:6e:60:09:ed:1c:7a:ac:86:8c:94:
                    8a:5c:0b:e1:f6:5d:94:c5:75:3e:60:c7:d7:ab:8f:
                    8e:eb:87:e0:6e:6d:d8:4e:07:eb:33:98:d0:50:b0:
                    84:46:84:87:10:40:28:b0:13:31:52:8c:f4:5a:bb:
                    15:ae:3d:a6:0c:9a:31:67:48:4a:38:31:a6:40:02:
                    16:8e:94:d6:89:a6:47:10:3e:07:47:2a:e7:af:28:
                    55:c8:3f:b1:6e:7c:94:cf:53:e3:c0:76:77:48:b3:
                    99:23:56:21:fb:c4:b1:e5:bd:c9:ec:a8:78:f9:cd:
                    8f:0a:06:7d:e7:e0:2a:54:d9:5c:eb:2c:b2:d1:25:
                    45:0f:0d:9e:95:31:62:33:13:c5:b3:98:43:59:b3:
                    6d:ee:02:b7:a5:ab:48:a1:d4:41:78:c2:3a:01:16:
                    df:03:40:34:30:57:32:9d:bc:91:5e:c5:4f:7a:cf:
                    64:97:29:ed:f6:72:86:a7:b9:b3:8b:d7:f1:d6:9f:
                    60:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FE:00:12:30:77:6A:67:B7:8B:45:42:9F:44:68:92:7B:47:7A:E5
            X509v3 Authority Key Identifier:
                keyid:4B:5C:BC:46:8E:62:44:4A:54:5B:45:83:61:8A:E3:20:40:8A:B0:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/4B5CBC468E62444A545B4583618AE320408AB092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe88778cdbdcdb9c019e54789b020b689502b07a6bdc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/01f2baccc55740d3a4a2824b7efd58a2/0/323630323a663736313a34303a3a2f34342d3434203d3e20333937373330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f761:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:cc:b2:ac:d3:b0:cb:d2:ba:89:d5:96:02:2e:24:f4:b1:06:
         35:e6:b7:a1:dc:df:77:7a:3c:3c:70:17:a1:f7:ec:1d:48:a4:
         ed:ea:0c:c8:bf:67:3b:5d:f5:97:27:77:2c:e7:12:26:29:9f:
         9a:c6:f0:4d:3e:43:1a:4f:7a:cf:a0:eb:ef:79:dc:ce:ef:cc:
         60:03:4f:54:d7:2c:97:f4:30:ab:e5:57:30:b3:ea:d7:6c:01:
         21:19:ab:6d:8c:0e:af:69:6c:d4:ac:02:d4:19:27:e1:99:45:
         0f:fc:c8:2d:9c:3f:da:92:af:24:b4:42:b8:61:f4:23:36:d7:
         af:40:7e:e9:b2:91:c0:54:02:0b:b1:4c:d0:35:2c:83:5d:2e:
         6d:58:25:5b:61:c0:09:b6:5c:46:7b:86:ed:b7:97:4c:3d:f0:
         f6:86:7f:a9:60:f2:1c:66:6a:a4:1b:7a:8c:27:20:bf:0b:ec:
         9b:04:7e:01:2f:36:cf:73:01:68:16:29:2a:31:fb:85:c1:a4:
         69:9f:cd:8b:51:96:27:cf:68:df:7d:40:1c:f8:90:c7:a3:e9:
         33:c3:d3:24:ab:52:ce:ca:a4:5d:41:6f:89:ee:f6:80:b2:2f:
         d8:58:ae:e4:1d:df:0d:3f:ce:bf:65:c8:49:83:6a:c4:bf:79:
         38:39:a3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:37:58 2025 by rpki-client