Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a363a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a363a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          V4PU7PTFuiXZSS3kZ5seW6FiOhB4dvdCIrkeBs0Lbls=
Subject key identifier:   5D:F5:A8:E8:B3:15:5C:00:88:7F:36:D5:14:2E:CC:E2:18:C5:EA:92
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       4C97365598DE6ECCBDD28654BFA24FBE3B10278A
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a363a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 10 Jul 2025 14:11:27 +0000
ROA not before:           Thu 10 Jul 2025 14:06:27 +0000
ROA not after:            Thu 09 Jul 2026 14:11:27 +0000
asID:                     9009
IP address blocks:        2602:ff62:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 08:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:97:36:55:98:de:6e:cc:bd:d2:86:54:bf:a2:4f:be:3b:10:27:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 10 14:06:27 2025 GMT
            Not After : Jul  9 14:11:27 2026 GMT
        Subject: CN=5DF5A8E8B3155C00887F36D5142ECCE218C5EA92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:39:da:d2:8b:42:68:3f:e1:fd:a5:99:4f:
                    0b:dc:5a:1f:93:4a:d0:ef:ce:c8:93:bd:f8:c4:d2:
                    51:b7:d5:fc:eb:91:52:5d:5d:c0:15:46:de:7e:95:
                    3a:45:1a:8c:ea:2d:40:55:da:78:23:b0:b9:3e:26:
                    d6:ab:65:73:f9:e8:3c:5a:70:a0:5a:25:90:1b:3e:
                    9f:b8:86:a4:27:90:30:78:ee:55:c8:e3:5b:e3:39:
                    72:ff:ed:06:95:1c:48:c6:fb:ed:92:69:36:21:f4:
                    bb:24:7d:cb:e2:01:3a:65:90:3c:42:28:67:e9:94:
                    86:de:d6:a5:47:50:02:42:f8:a3:0f:b7:3c:d5:06:
                    6f:30:49:fb:16:45:dc:11:4b:a4:48:26:c6:2b:16:
                    2a:41:56:ae:18:32:96:fc:14:04:a3:a6:bd:c4:6b:
                    9b:25:7c:10:8c:c6:b2:66:25:f5:09:42:7c:81:fb:
                    9e:5c:8d:42:f6:33:0d:8c:9a:90:1b:69:8a:b3:a0:
                    a0:1d:92:24:de:24:c1:0a:e7:03:9d:e2:50:e5:89:
                    66:84:46:e8:25:6d:ee:1b:06:0a:88:cf:ff:71:9c:
                    ef:8c:ff:82:28:09:06:0e:7c:17:9f:c8:cd:08:3a:
                    46:c1:f8:c8:f0:7e:a6:8a:af:f7:86:24:cd:6a:e4:
                    36:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F5:A8:E8:B3:15:5C:00:88:7F:36:D5:14:2E:CC:E2:18:C5:EA:92
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a363a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:4c:40:e4:92:d6:dd:ec:bf:56:a9:fd:22:d1:c0:e6:51:7f:
         30:6f:e5:39:c2:7b:61:88:f3:e9:6e:1a:ae:e8:b9:51:46:34:
         00:47:b7:9f:5e:58:ec:3f:10:b3:68:ff:a6:bc:24:ba:a4:96:
         4b:8b:75:12:97:46:e1:b5:52:d1:d1:42:1d:f4:4b:91:71:a6:
         32:91:56:71:d0:12:95:28:03:3d:11:7d:ad:09:28:c0:5a:bc:
         af:6f:3f:ac:d5:d2:0e:3d:66:e2:87:22:aa:5e:96:56:cd:ff:
         fc:54:7d:63:a1:c5:0c:fd:5f:19:5d:af:ce:22:ab:5a:61:94:
         83:41:59:e2:d9:21:b1:cc:20:07:74:1a:4d:e7:bb:15:97:e6:
         d0:a5:5a:af:6b:eb:cb:5e:08:fe:12:01:8c:a3:bf:c2:87:de:
         93:22:bd:3d:36:34:0c:64:b7:ff:a7:46:86:de:82:05:04:4a:
         dd:48:e5:18:cc:d9:c8:04:a9:f9:ce:51:7e:d2:08:9d:f4:09:
         0c:49:ab:f4:db:ee:e1:17:10:40:ac:e9:a5:1d:af:21:c6:28:
         80:84:71:47:26:12:e3:8e:6b:30:c0:43:12:b6:fd:8d:92:6d:
         ce:04:e0:ba:36:74:6d:9e:4b:6e:f7:a0:7e:e0:6c:88:9d:9f:
         6a:c7:4f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:25:21 2025 by rpki-client