Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365333a3a2f34382d3438203d3e20333936393933.roa
File:                     323630323a663734333a3365333a3a2f34382d3438203d3e20333936393933.roa (raw, json)
Hash identifier:          WXyqXWkOR2hbKJ7Jc+uEykEYTXpt+7TKCcU0PeWJ3kg=
Subject key identifier:   C4:FB:0B:B2:63:72:FF:32:9F:0F:86:EE:8C:5F:5F:7D:0B:24:24:3F
Certificate issuer:       /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial:       3EE2A5CC38F15A5C8152648F60A0F628F07BD12F
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365333a3a2f34382d3438203d3e20333936393933.roa
Signing time:             Mon 07 Jul 2025 21:08:42 +0000
ROA not before:           Mon 07 Jul 2025 21:03:42 +0000
ROA not after:            Mon 06 Jul 2026 21:08:42 +0000
asID:                     396993
IP address blocks:        2602:f743:3e3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
                          rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 19:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e2:a5:cc:38:f1:5a:5c:81:52:64:8f:60:a0:f6:28:f0:7b:d1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
        Validity
            Not Before: Jul  7 21:03:42 2025 GMT
            Not After : Jul  6 21:08:42 2026 GMT
        Subject: CN=C4FB0BB26372FF329F0F86EE8C5F5F7D0B24243F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:8e:8b:38:d0:2c:8e:d1:c7:a1:b8:81:a2:
                    86:52:e1:fd:6d:df:a8:2f:db:d0:7d:3e:27:a1:a6:
                    1f:eb:40:7d:49:e5:e6:e5:6f:01:5f:2b:ca:f6:4b:
                    ba:8f:15:bd:d3:4a:81:5e:38:d5:4f:5e:0a:99:cc:
                    21:01:0b:3e:15:51:04:23:d8:c2:3e:fa:42:e5:a4:
                    b4:b8:86:da:1b:3d:0a:17:a9:00:37:f3:ca:43:40:
                    a0:98:14:06:f6:b4:a5:45:ec:23:46:dc:c3:8a:e2:
                    d5:14:29:7b:57:38:33:21:d7:46:ca:39:0a:66:c1:
                    bb:e9:a0:90:83:5d:0c:4b:a7:25:d6:3a:4b:90:0c:
                    c1:00:9c:e1:5d:7e:7e:c0:88:fe:ab:df:fb:d8:f1:
                    74:11:91:15:98:7d:7a:a5:19:7c:0a:f0:8c:7f:5d:
                    cc:8b:63:3b:d4:88:65:13:30:bd:ef:8a:60:83:76:
                    29:cf:60:f2:c6:44:7b:6f:9f:7b:fd:2b:8c:34:8e:
                    ec:46:78:21:a8:a8:87:2a:eb:31:72:ef:c0:da:b8:
                    00:2e:c4:97:f2:bf:90:92:b0:ca:b5:9d:19:2a:eb:
                    26:5c:92:d6:27:c7:f5:16:2d:b0:08:d0:db:d5:24:
                    3c:2b:2a:b6:64:8e:db:68:47:f6:a6:f0:95:22:6c:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FB:0B:B2:63:72:FF:32:9F:0F:86:EE:8C:5F:5F:7D:0B:24:24:3F
            X509v3 Authority Key Identifier:
                keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3365333a3a2f34382d3438203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f743:3e3::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:fb:57:b8:5e:90:ea:04:85:15:68:8d:7d:97:6c:22:c3:15:
         7f:4c:15:91:da:35:8a:d3:e5:b8:26:9b:50:7e:28:17:5d:a2:
         ab:ed:93:1c:83:2a:1e:8f:bf:cf:78:fa:b1:ba:4e:92:e4:60:
         65:51:ed:a8:8a:bd:d1:05:74:bc:59:2a:fd:b1:ab:7a:9d:d7:
         2c:31:7a:a5:7f:2d:da:33:bb:d0:c1:55:c6:ec:da:44:9d:7c:
         d4:93:46:65:ae:d2:95:63:cb:b8:a9:f9:36:14:ec:b2:a8:c1:
         24:c9:b4:9d:45:a7:b1:13:90:54:b5:9e:6d:1f:65:0e:66:a9:
         0a:1e:60:e3:47:a7:48:42:2f:d4:e4:38:f1:ed:5d:bc:0c:4c:
         a7:66:29:ed:70:02:ab:f0:77:c5:23:ec:7a:11:d6:17:34:36:
         c0:26:bf:2f:89:92:81:cb:7b:ed:41:c2:6e:34:c8:75:a6:f8:
         44:d3:88:aa:7e:58:d9:94:d8:e8:75:be:c7:18:5c:c7:57:47:
         e4:a7:fc:c6:6c:55:a1:ef:6e:8b:1e:e9:09:d8:b1:5c:02:0a:
         63:0c:96:de:1b:9d:34:1d:40:0a:57:00:ce:09:c4:57:a7:ef:
         14:c9:93:2d:a7:9a:e0:be:d3:41:a3:82:24:52:f6:cd:dc:78:
         48:0b:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 09:13:27 2025 by rpki-client