Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a333a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a333a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          BnRScj2IJJdrqWQ0Xjgv5t9R7sD8jHf8oHIqt7ta0Ak=
Subject key identifier:   A8:A2:D4:BC:79:2F:43:E6:EC:2D:FD:10:BF:EF:B1:27:8E:E3:35:64
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       6714E2D0E968940D76E90F6C395302374619297B
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a333a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 10 Jul 2025 14:11:02 +0000
ROA not before:           Thu 10 Jul 2025 14:06:02 +0000
ROA not after:            Thu 09 Jul 2026 14:11:02 +0000
asID:                     9009
IP address blocks:        2602:ff62:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 08:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:14:e2:d0:e9:68:94:0d:76:e9:0f:6c:39:53:02:37:46:19:29:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 10 14:06:02 2025 GMT
            Not After : Jul  9 14:11:02 2026 GMT
        Subject: CN=A8A2D4BC792F43E6EC2DFD10BFEFB1278EE33564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ff:0a:10:24:da:b6:b4:8c:f4:db:c4:6a:c8:
                    78:be:55:ef:04:aa:b4:25:2e:ec:45:42:24:2f:6a:
                    d8:70:25:59:a0:6e:8b:03:82:b6:d0:ee:33:de:de:
                    3b:0a:af:41:1c:cb:90:f4:46:d5:26:9b:40:66:c0:
                    55:7b:34:f7:d1:c9:cb:b9:a1:fd:7c:d2:38:74:96:
                    97:d8:5f:14:15:4c:dc:1c:00:03:13:96:a6:ce:61:
                    7c:ab:f6:d9:de:55:a8:19:f5:4e:5e:5c:44:72:ac:
                    40:9a:2c:12:74:91:86:b7:8d:3f:90:6b:9b:ed:8b:
                    72:71:ba:8c:4b:11:13:ab:7f:d8:28:15:9f:2e:30:
                    f9:08:cd:c4:17:dd:c4:af:6a:b0:c2:6c:93:2f:aa:
                    34:7c:7c:88:80:61:82:d7:cf:4e:e4:68:83:86:ae:
                    d7:45:4b:ab:50:e9:62:76:c5:0e:9e:2a:36:c8:99:
                    23:31:9d:9c:59:e1:69:a7:64:63:45:a1:7f:8a:44:
                    16:fe:d7:c2:3c:05:40:e7:92:be:82:ef:e4:e2:b6:
                    cb:be:17:a0:7f:bd:fb:a3:1b:62:9b:c0:17:36:8b:
                    b2:41:43:c7:12:84:7c:b4:b1:b4:35:56:1e:0d:01:
                    b3:74:c1:f3:bb:13:de:3b:ea:c1:a3:0d:c0:cd:82:
                    8e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A2:D4:BC:79:2F:43:E6:EC:2D:FD:10:BF:EF:B1:27:8E:E3:35:64
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a333a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:45:d9:91:ca:7b:5b:56:d8:7a:5f:3e:a8:b2:c8:cf:30:70:
         27:79:fe:d1:b5:4d:1e:cc:b5:76:57:9b:e8:8e:d9:d8:30:88:
         5f:63:29:bd:75:8d:62:89:43:d8:12:02:d8:2c:eb:3f:b8:80:
         83:d6:12:4d:26:42:85:ee:d3:e2:e6:5a:f4:63:b9:83:e9:e0:
         17:e9:01:2b:07:b6:7b:65:d3:52:0f:eb:a0:2d:7b:a4:36:d0:
         91:56:41:1d:1f:d1:58:2d:05:8b:d7:57:51:69:de:79:fb:54:
         ee:95:5c:5d:92:21:9d:0f:7f:c1:fa:da:15:7b:65:0f:0b:de:
         a3:74:ee:da:b1:4b:e3:3d:25:c8:de:96:e0:96:32:35:19:13:
         8f:ec:d1:d6:a6:2c:ee:aa:47:ca:07:55:ad:cd:e0:d0:b4:6b:
         41:65:c7:7e:e4:3e:69:af:f1:dc:91:49:18:ca:94:44:1e:c4:
         7f:9a:58:c3:dc:e6:1a:12:52:15:16:02:61:3a:a7:bb:9f:8c:
         45:10:6a:d8:7a:4d:0b:bc:be:c5:05:6a:93:28:ff:7e:22:3d:
         c6:0e:1d:32:58:96:f2:c7:8e:3b:6b:a9:43:6f:63:29:1f:51:
         1e:e3:6a:4c:be:09:42:9e:3f:82:08:c9:6d:98:64:e7:4f:ec:
         c2:cd:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:17:53 2025 by rpki-client