Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a373a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a373a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          W+l1MugExpwlUlt/6SD4tyzEuKf4yo97fXL0xpSFG0I=
Subject key identifier:   3F:78:B5:2E:E6:C8:B0:1A:97:91:07:F1:75:B4:7E:D3:98:86:AF:37
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       1F85EF934B8F54795743A05371D9691CD8AD6C5F
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a373a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 10 Jul 2025 14:11:28 +0000
ROA not before:           Thu 10 Jul 2025 14:06:28 +0000
ROA not after:            Thu 09 Jul 2026 14:11:28 +0000
asID:                     9009
IP address blocks:        2602:ff62:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 08:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:85:ef:93:4b:8f:54:79:57:43:a0:53:71:d9:69:1c:d8:ad:6c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 10 14:06:28 2025 GMT
            Not After : Jul  9 14:11:28 2026 GMT
        Subject: CN=3F78B52EE6C8B01A979107F175B47ED39886AF37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:09:4f:6b:da:5e:9a:3a:f7:51:1f:35:92:1a:
                    39:37:da:54:77:d0:09:2d:dc:10:1f:1a:24:9f:0a:
                    4e:dc:9e:f2:ec:e6:9b:d0:c6:08:2e:08:3d:3e:ec:
                    11:87:90:a9:a9:4e:09:7f:ee:06:5b:a1:67:d2:f7:
                    39:e5:b2:1e:15:e1:1a:67:3a:4a:d5:20:56:ef:6d:
                    a7:fc:5e:61:79:00:c8:2f:97:a8:0d:75:3d:1b:fa:
                    77:cb:0b:87:83:7f:f4:15:76:4c:c9:7d:c2:ed:26:
                    c5:c7:29:73:e7:b6:94:ab:fa:a8:40:12:9c:9b:d3:
                    34:04:83:ec:35:6d:51:e9:3c:cb:78:a5:5b:d5:36:
                    0a:97:bd:e4:6d:c6:23:db:af:48:93:57:fc:76:20:
                    6e:6f:8f:58:f2:d9:66:b1:82:de:36:56:49:60:c7:
                    3f:ad:bb:a4:29:ed:bd:cc:95:32:68:5e:f3:6b:35:
                    97:23:06:33:9e:67:a7:61:78:f1:e7:66:28:bf:87:
                    3a:47:a5:36:65:fa:bd:f5:31:0b:7b:0a:ee:dc:6f:
                    30:a2:3f:ff:45:01:db:fb:d4:51:32:b6:ae:d2:4a:
                    5e:28:a5:b3:74:8a:4c:af:10:76:25:05:a6:55:37:
                    95:c3:e4:78:e0:90:b2:c6:6e:2d:c3:bd:44:49:c3:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:78:B5:2E:E6:C8:B0:1A:97:91:07:F1:75:B4:7E:D3:98:86:AF:37
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a373a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:32:81:b5:92:4c:63:08:a7:e5:bc:71:99:88:47:9b:6b:e2:
         c9:ee:87:2b:55:83:0e:84:a7:a8:f2:86:dc:37:ad:47:ce:bf:
         0d:32:71:3c:49:8c:4c:80:7a:3d:2c:6f:a5:e8:1b:9d:fe:17:
         87:6d:e6:0e:4a:32:35:4f:d6:68:f6:87:0b:f1:bb:f5:e3:ae:
         35:b8:e3:79:d6:b7:27:35:1e:1d:14:13:93:53:e9:d4:4f:32:
         83:e3:e8:1f:a7:2c:9f:93:71:0e:6e:2e:5d:45:8f:83:cc:ef:
         b1:1f:1b:b2:60:5a:92:09:8f:3d:1f:2a:e7:f0:d5:77:8a:1e:
         02:84:80:2b:86:2c:a2:30:71:ee:fc:f2:ff:cb:a0:2c:75:26:
         63:c4:ef:7b:b7:d7:27:48:a1:3f:e0:ba:69:ed:3e:4f:a8:11:
         46:f8:9e:3d:bd:19:a0:98:be:1b:dd:a2:fc:65:06:11:a0:bd:
         1c:37:8c:20:6d:4c:cd:90:83:3f:25:47:9c:f7:07:61:1b:05:
         70:de:7d:b4:8d:2a:4a:b9:95:ec:bf:bc:ed:cd:54:4a:95:c0:
         ea:a4:6a:86:22:54:56:a8:67:7b:c2:2e:96:54:31:64:6a:b8:
         34:a1:a0:f3:de:9a:68:65:e9:43:9b:f6:8f:cc:d1:8c:5d:c4:
         f6:dc:45:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:20:27 2025 by rpki-client