Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a383a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a383a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          13Fznb/RFpS1OLkvFgQBpGFnH9EdEyzCh6z1Hye+fT8=
Subject key identifier:   37:C8:BA:18:DF:6C:27:C7:34:60:74:B9:10:D3:9E:26:11:CD:DB:1C
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       24CFA7E0BB74B047C017861701DFAFA2E61AA4D5
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a383a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 10 Jul 2025 14:12:31 +0000
ROA not before:           Thu 10 Jul 2025 14:07:31 +0000
ROA not after:            Thu 09 Jul 2026 14:12:31 +0000
asID:                     9009
IP address blocks:        2602:fad4:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Jul 2025 19:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:cf:a7:e0:bb:74:b0:47:c0:17:86:17:01:df:af:a2:e6:1a:a4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jul 10 14:07:31 2025 GMT
            Not After : Jul  9 14:12:31 2026 GMT
        Subject: CN=37C8BA18DF6C27C7346074B910D39E2611CDDB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:8d:b1:72:c3:8a:0b:bc:48:ad:62:be:36:
                    1a:83:ca:9a:ca:9a:12:00:8f:8c:48:b0:88:5d:00:
                    84:1f:e2:1a:5c:11:74:b3:3b:d5:78:66:67:0d:64:
                    53:9e:8f:73:e3:8f:ec:ba:82:7a:08:5c:12:71:3d:
                    de:9b:a9:cd:a4:7e:09:d7:b1:24:a0:1c:87:75:48:
                    a7:5c:6e:6b:17:fd:09:9e:57:c0:04:1d:11:cf:c1:
                    5d:ed:26:0a:77:4d:40:e4:2f:b5:49:d3:e2:ef:ab:
                    8c:d6:55:92:fb:48:bd:00:cf:2c:0b:77:0a:16:09:
                    7c:cb:88:4d:0d:82:fe:25:12:a2:4e:eb:a5:97:0d:
                    56:11:6b:6d:9d:c6:29:98:4f:1a:97:93:70:ab:00:
                    7a:93:39:f0:4a:ac:ad:d6:ba:68:9d:f2:41:a1:b9:
                    d4:b9:7a:2c:63:26:64:77:43:4f:8d:13:bb:d7:d4:
                    0e:06:57:50:b0:de:f0:f3:64:88:06:26:74:4f:68:
                    a9:11:58:12:ca:c0:6e:3a:d8:11:f9:32:d9:06:6d:
                    91:fa:3b:e6:17:26:f3:91:60:aa:81:23:ec:23:53:
                    2c:b2:9d:e0:46:2b:e3:b0:32:86:e0:f8:e7:e7:55:
                    82:55:91:18:9c:e2:f0:cd:0e:d5:a5:0b:ed:3b:3e:
                    07:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C8:BA:18:DF:6C:27:C7:34:60:74:B9:10:D3:9E:26:11:CD:DB:1C
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a383a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:d2:de:8d:9d:70:45:ba:c8:73:dc:69:ec:53:a0:19:e2:e6:
         e1:46:91:2a:3f:d9:1a:e0:b7:90:87:0f:fd:b8:48:40:57:42:
         10:b4:a1:2b:40:00:53:42:42:a0:d8:29:84:f6:8c:4f:a0:eb:
         6d:86:ca:28:3a:b3:c5:ee:4c:cd:a5:d6:88:44:07:23:8f:11:
         df:62:80:4a:20:2d:92:c5:35:b1:75:5e:de:fd:11:e4:9c:9c:
         21:ed:28:f7:69:e4:7d:ed:dc:e0:2c:fe:69:f7:87:e7:a3:92:
         ac:0d:4c:b7:cf:30:90:9f:41:63:0b:b5:1b:de:04:d0:b1:58:
         6c:e5:c3:1b:1b:6d:4d:69:4e:57:a0:9e:af:44:60:b3:08:98:
         93:91:33:78:84:dc:44:d1:5a:ec:11:11:5f:f8:ea:b9:0a:35:
         1d:d1:9d:b4:8d:35:98:c4:1e:86:84:c4:21:e4:9b:1a:c5:2a:
         26:f3:b6:d2:48:ac:41:a0:91:83:b0:1c:aa:83:45:7c:8e:ac:
         15:d1:48:5f:29:43:2b:64:3d:37:05:dc:cc:88:44:b0:4e:71:
         71:2d:09:97:a9:31:95:60:ff:f3:13:8a:db:5a:1d:34:b9:1f:
         30:ea:3c:44:62:8e:54:f3:83:3f:5d:fd:21:4d:ab:a5:e2:d9:
         b7:13:af:ff
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIUJM+n4Lt0sEfAF4YXAd+vouYapNUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTNlMTM1MjE2YTM3NTU0MGJlNWVmMzQ1MmU2YWEzMmEw
YTAzZWFjNjY3Y2I5ZmU2NGUwHhcNMjUwNzEwMTQwNzMxWhcNMjYwNzA5MTQxMjMx
WjAzMTEwLwYDVQQDEygzN0M4QkExOERGNkMyN0M3MzQ2MDc0QjkxMEQzOUUyNjEx
Q0REQjFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IeNsXLDigu8
SK1ivjYag8qaypoSAI+MSLCIXQCEH+IaXBF0szvVeGZnDWRTno9z44/suoJ6CFwS
cT3em6nNpH4J17EkoByHdUinXG5rF/0JnlfABB0Rz8Fd7SYKd01A5C+1SdPi76uM
1lWS+0i9AM8sC3cKFgl8y4hNDYL+JRKiTuullw1WEWttncYpmE8al5NwqwB6kznw
Sqyt1rponfJBobnUuXosYyZkd0NPjRO719QOBldQsN7w82SIBiZ0T2ipEVgSysBu
OtgR+TLZBm2R+jvmFybzkWCqgSPsI1Mssp3gRivjsDKG4Pjn51WCVZEYnOLwzQ7V
pQvtOz4HPwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFDfIuhjfbCfHNGB0uRDTniYR
zdscMB8GA1UdIwQYMBaAFJB1EYPkO6TqsWr2BLUEHo/+8x3yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg5YzNlYWUwMTg4YWZmNjY3MzQwOTRkLzAv
OTA3NTExODNFNDNCQTRFQUIxNkFGNjA0QjUwNDFFOEZGRUYzMURGMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjLzA3NDNlYWNmLWJjNGYtNGM4YS05MTQwLTEzNDdiNmZhNmVlNS9hM2Ux
MzUyMTZhMzc1NTQwYmU1ZWYzNDUyZTZhYTMyYTBhMDNlYWM2NjdjYjlmZTY0ZS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4OWMzZWFlMDE4OGFm
ZjY2NzM0MDk0ZC8wLzMyMzYzMDMyM2E2NjYxNjQzNDNhMzgzYTNhMmYzNDM4MmQz
NDM4MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC+tQACDANBgkqhkiG9w0B
AQsFAAOCAQEAS9LejZ1wRbrIc9xp7FOgGeLm4UaRKj/ZGuC3kIcP/bhIQFdCELSh
K0AAU0JCoNgphPaMT6DrbYbKKDqzxe5MzaXWiEQHI48R32KASiAtksU1sXVe3v0R
5JycIe0o92nkfe3c4Cz+afeH56OSrA1Mt88wkJ9BYwu1G94E0LFYbOXDGxttTWlO
V6Cer0RgswiYk5EzeITcRNFa7BERX/jquQo1HdGdtI01mMQehoTEIeSbGsUqJvO2
0kisQaCRg7AcqoNFfI6sFdFIXylDK2Q9NwXczIhEsE5xcS0Jl6kxlWD/8xOK21od
NLkfMOo8RGKOVPODP139IU2rpeLZtxOv/w==
-----END CERTIFICATE-----
Generated at Sun Jul 20 11:44:27 2025 by rpki-client