Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a313a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a313a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          zoCjMAeCWmScK/SzhKl//2Rr76bbmr7Aq3uodZbZN9k=
Subject key identifier:   08:19:F4:C7:6E:22:91:F4:14:70:D6:24:0F:4B:6C:5E:A3:7B:96:0F
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       4DD76BC7135709CD84A81CB97785F6A21354FC9D
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a313a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 10 Jul 2025 14:10:57 +0000
ROA not before:           Thu 10 Jul 2025 14:05:57 +0000
ROA not after:            Thu 09 Jul 2026 14:10:57 +0000
asID:                     9009
IP address blocks:        2602:ff62:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 08:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d7:6b:c7:13:57:09:cd:84:a8:1c:b9:77:85:f6:a2:13:54:fc:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 10 14:05:57 2025 GMT
            Not After : Jul  9 14:10:57 2026 GMT
        Subject: CN=0819F4C76E2291F41470D6240F4B6C5EA37B960F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:7d:49:1b:94:1e:70:f9:06:5c:f6:16:fa:
                    30:8c:85:fe:fb:0d:41:79:57:fe:e9:8c:55:48:fb:
                    62:1f:80:a1:08:44:85:4f:e5:bd:cb:84:85:4d:11:
                    31:a5:96:90:ea:99:f4:11:93:e2:d6:5a:2d:43:5d:
                    9c:8b:3a:ff:39:26:33:b8:de:0f:39:00:f5:a5:80:
                    a8:4b:5b:6f:f0:33:fd:03:38:bc:f0:2e:88:f0:2d:
                    6e:e9:f3:43:76:04:6c:6e:3f:a8:92:27:f3:36:4f:
                    da:94:39:e4:de:43:ed:f4:d1:f0:70:6e:b0:35:35:
                    2d:65:9c:af:b9:03:d6:e9:79:f9:7b:c3:d0:c3:7c:
                    1a:a7:66:0b:d4:f4:5b:9b:40:86:a3:29:48:b1:f6:
                    8c:0e:75:b7:92:8d:d5:d3:b5:2f:1e:f5:67:e5:11:
                    78:e8:a3:57:eb:18:ba:94:59:33:06:98:7e:0b:51:
                    79:ff:c3:97:e9:72:46:bd:3b:b5:fb:ef:b1:36:c1:
                    18:76:b9:10:07:e9:e5:62:6c:a1:39:4d:0a:fe:40:
                    16:1d:e2:53:48:3d:fd:a8:54:d5:09:7c:df:14:a6:
                    9a:1d:0c:34:85:64:eb:d2:94:8c:d0:ac:52:62:37:
                    4b:d2:58:08:1a:f3:fa:47:d8:fb:31:27:03:1f:ff:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:19:F4:C7:6E:22:91:F4:14:70:D6:24:0F:4B:6C:5E:A3:7B:96:0F
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a313a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:7f:1a:dc:f9:d6:6b:f2:27:40:91:2d:5d:e0:40:1a:1b:63:
         a9:57:28:df:7e:f2:a6:24:3e:ad:49:ef:f5:01:b1:14:76:d6:
         2c:6f:ad:db:9b:43:88:a2:84:1e:db:43:27:97:07:de:f0:b8:
         18:23:33:c3:ed:99:4b:56:4b:13:7a:ab:1b:a0:1b:e9:c8:83:
         83:43:06:dc:23:7e:9c:5a:31:88:3e:a2:1f:b0:e6:d3:7e:15:
         55:0e:56:37:04:bb:f2:fc:5e:dc:fb:48:98:e1:51:5f:ac:3b:
         46:bc:c3:dc:f8:eb:f2:2d:dd:a3:e6:b7:be:30:32:a6:96:8a:
         0c:70:05:1c:fe:ea:a0:1d:6f:1b:27:af:e7:df:cd:00:38:65:
         06:55:50:30:f6:87:93:5c:da:53:d7:aa:03:f8:ad:9f:f2:bb:
         52:27:ac:f0:6c:3d:db:27:f8:47:22:75:d3:f7:90:fb:0a:0b:
         80:32:bc:0a:73:62:27:1b:52:c9:4c:4a:f3:7c:9d:6e:d9:ee:
         c4:cb:bd:22:f1:4c:ba:60:df:47:66:48:3b:7c:45:99:6b:74:
         88:32:e5:60:1b:d9:cc:5e:12:50:87:5d:28:1d:1d:c0:fd:5f:
         4a:ca:eb:0a:c3:3f:89:a1:9a:6e:02:7e:97:e1:7b:a0:23:0a:
         ca:6c:71:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:18:03 2025 by rpki-client