Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a383a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666636323a383a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          7Dg0f2aYlXK8cEJnsH5HCXFqt3MvJcDjD93TsJ44WKw=
Subject key identifier:   CA:8C:DD:84:6E:F8:F5:09:50:20:77:9A:E5:DE:85:22:5D:B7:35:BB
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       57DD763174FD1895BC5E092215B54D51B9055CD5
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a383a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 10 Jul 2025 14:12:16 +0000
ROA not before:           Thu 10 Jul 2025 14:07:16 +0000
ROA not after:            Thu 09 Jul 2026 14:12:16 +0000
asID:                     9009
IP address blocks:        2602:ff62:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 08:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:dd:76:31:74:fd:18:95:bc:5e:09:22:15:b5:4d:51:b9:05:5c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 10 14:07:16 2025 GMT
            Not After : Jul  9 14:12:16 2026 GMT
        Subject: CN=CA8CDD846EF8F5095020779AE5DE85225DB735BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a2:4c:80:25:bc:85:c0:79:01:39:08:2d:be:
                    6f:8c:2b:44:f7:5b:ff:4f:77:7e:34:f5:6b:37:92:
                    52:4c:b9:85:c5:4d:49:b9:7e:3f:f7:79:78:ee:c0:
                    9a:76:42:66:06:e9:58:8c:56:6c:aa:37:ae:b8:d5:
                    f5:e3:58:45:28:49:23:75:9c:4d:5d:dd:65:9d:08:
                    19:8f:0c:1a:10:c6:17:79:72:f8:ff:aa:a6:2a:b2:
                    91:2e:ff:bd:b6:58:7b:99:43:f5:6c:7a:7a:bf:a4:
                    09:da:37:ec:5d:72:c3:25:29:fb:c2:36:25:c3:4d:
                    da:89:e6:83:d8:05:79:b8:a6:f4:ef:fd:8a:d7:01:
                    02:ac:04:37:bb:68:c9:b2:1d:32:9f:29:ff:4e:27:
                    c1:98:33:50:2e:b0:7c:17:94:1b:18:c3:9c:0a:1d:
                    31:ff:dc:63:2a:1d:8c:4d:67:8d:50:9b:33:ca:da:
                    c4:6d:f2:be:7c:2a:20:10:fa:a2:66:ae:b6:02:67:
                    93:5a:11:4e:ce:8a:d9:56:bd:86:b1:f6:81:4f:34:
                    dd:d5:c8:32:a0:dc:7d:e9:7b:e8:a2:e6:84:23:53:
                    bf:a7:bb:37:35:9f:2d:4f:43:38:7b:24:a7:1c:18:
                    5e:5f:80:6b:a7:ef:52:35:fc:71:93:06:51:42:54:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8C:DD:84:6E:F8:F5:09:50:20:77:9A:E5:DE:85:22:5D:B7:35:BB
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a383a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:69:fa:4c:8f:18:df:7f:72:4b:6f:11:12:31:ed:e8:78:70:
         1c:86:f8:cc:df:6e:cd:82:85:6e:98:74:84:00:3a:b4:67:39:
         9f:0f:02:19:ab:94:ca:e5:aa:de:d1:d3:d8:af:a7:55:92:27:
         c1:ae:96:f6:89:e8:e8:f0:0a:5b:05:fc:2f:d6:90:58:22:b2:
         ac:f5:8c:4a:bc:7b:ba:5b:06:d6:8c:59:7e:20:3d:28:6e:f4:
         ec:3e:d6:2a:91:ed:a8:55:1e:52:31:80:55:8c:95:9d:b9:6f:
         2c:02:e6:68:a3:2b:52:93:b0:52:4a:06:0e:ba:94:9a:95:87:
         e7:90:43:fd:c3:ef:47:84:af:ce:75:76:4b:43:21:03:c8:bb:
         b6:b6:aa:88:87:43:7c:88:a5:49:05:1d:3a:a4:dc:a1:75:d2:
         ef:1a:b5:b5:67:d9:79:24:5f:ee:e4:69:01:43:d9:22:5a:69:
         be:bd:44:6b:85:a6:5c:a1:22:b9:57:ae:cb:75:31:51:34:33:
         78:7e:7d:6a:01:66:82:7e:4b:ec:49:91:90:12:24:b8:9c:57:
         36:54:c6:83:9b:7e:41:90:65:f3:ba:f7:47:6b:2a:17:11:4c:
         b6:03:d6:7a:d0:c3:4f:e2:2c:93:51:91:ae:9e:1c:eb:e8:a3:
         73:c7:c1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:18:59 2025 by rpki-client