Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a393a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a393a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          Ytfx6s9BuJafwuYUlt9dDa6KYNeI1ivh8a8jSZjICho=
Subject key identifier:   B7:25:19:21:DC:BF:A8:8D:0D:99:EE:3D:83:0A:CD:4D:62:93:55:2D
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       7A3C28B9690D8F67A42F170062B4B4D2510F2BFD
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a393a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 10 Jul 2025 14:12:32 +0000
ROA not before:           Thu 10 Jul 2025 14:07:32 +0000
ROA not after:            Thu 09 Jul 2026 14:12:32 +0000
asID:                     9009
IP address blocks:        2602:fad4:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Jul 2025 19:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:3c:28:b9:69:0d:8f:67:a4:2f:17:00:62:b4:b4:d2:51:0f:2b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jul 10 14:07:32 2025 GMT
            Not After : Jul  9 14:12:32 2026 GMT
        Subject: CN=B7251921DCBFA88D0D99EE3D830ACD4D6293552D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:16:3f:8c:48:ed:f9:33:d8:36:3a:2b:49:
                    4b:8f:75:07:63:dd:1a:72:76:d9:c7:e0:6d:6e:36:
                    62:ff:de:52:36:8f:46:1c:ce:54:96:41:86:23:dd:
                    eb:3c:9b:ea:f2:fd:1d:a5:1a:a2:07:9f:29:ad:b9:
                    f2:90:36:fb:8c:c1:2f:83:35:5b:c5:80:9e:97:1b:
                    1f:b8:74:5b:27:d6:1d:9a:8b:a2:d9:11:65:48:6a:
                    d0:79:b7:0b:ff:1e:5f:ca:e3:21:66:32:b3:ab:e5:
                    ef:4a:9c:55:64:8a:69:99:db:e9:4b:e4:f4:a2:bd:
                    34:04:c4:f7:40:a6:1e:1d:4b:c0:dc:b0:50:73:28:
                    b8:b7:0d:8b:ca:8d:bd:d9:e8:95:d2:76:bd:f2:de:
                    04:ee:1a:45:42:06:36:43:ee:3f:82:a4:e9:33:c2:
                    ef:e3:82:3c:40:b2:18:01:d2:09:3e:5a:c5:2e:c8:
                    b2:88:72:68:af:cf:d4:f0:ec:df:c2:40:37:92:84:
                    38:08:0c:ef:38:47:5b:7f:80:15:97:2c:b7:48:c8:
                    93:2f:f2:0a:4d:2c:32:32:da:8a:f9:cd:38:ba:a6:
                    14:ec:58:58:0f:f8:b7:3a:64:0f:86:0a:3b:c0:e9:
                    e9:b8:3f:ea:ef:7c:00:95:f3:7e:d4:4d:44:37:28:
                    39:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:25:19:21:DC:BF:A8:8D:0D:99:EE:3D:83:0A:CD:4D:62:93:55:2D
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a393a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:b6:e0:9c:09:c7:e5:33:21:27:49:e8:f1:26:80:e5:4e:c0:
         20:6c:3f:90:7b:e4:55:f9:82:96:8c:e8:2f:de:70:61:a5:ee:
         41:b1:bc:7e:97:22:ef:3a:68:5d:6a:7a:b7:bf:00:dc:19:78:
         e1:92:42:b5:e1:fc:8e:59:45:0f:4c:65:29:b1:7b:f8:4c:33:
         5c:66:1b:cf:28:8d:84:86:bf:6e:80:63:fa:63:9b:49:bb:1b:
         59:9a:24:c8:2a:a5:8c:52:7d:d0:cc:69:43:f1:c6:79:25:15:
         78:de:c3:e9:26:40:36:2a:ee:fc:77:d5:1b:5c:ab:b8:ac:08:
         78:e6:4e:ba:c2:05:7d:e9:53:fd:1a:e9:78:6a:f9:46:ba:4e:
         48:86:41:50:00:cd:8c:98:f3:36:ca:78:49:8d:06:f1:07:63:
         4f:79:7c:b2:52:dc:d5:8f:6e:16:d4:3d:5c:d6:0d:09:0f:21:
         fd:5a:11:6f:a0:3a:3f:80:72:4f:54:8f:23:9b:1d:1b:7f:a9:
         4d:74:82:9a:d4:60:24:35:7d:c9:16:34:cd:55:b3:f5:90:d3:
         a0:b0:4c:b7:ba:2c:00:01:4a:cc:52:43:1f:f6:f6:97:df:20:
         e0:be:ab:60:ce:dd:4b:23:ab:be:a1:9d:2f:bd:a5:51:29:da:
         37:78:c5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:44:21 2025 by rpki-client