Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          5AYG4FKfxLtCdimMEZltGz/iFrjlT2KoyNpx2p+cUus=
Subject key identifier:   CF:2C:3C:EA:E1:C6:E1:FC:0B:5D:DF:B4:6B:BC:3E:AF:AF:72:3F:51
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       34B73E544749338A701B62E3E33300913FDCA68A
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 10 Jul 2025 14:12:19 +0000
ROA not before:           Thu 10 Jul 2025 14:07:19 +0000
ROA not after:            Thu 09 Jul 2026 14:12:19 +0000
asID:                     9009
IP address blocks:        2602:fad4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Jul 2025 19:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:b7:3e:54:47:49:33:8a:70:1b:62:e3:e3:33:00:91:3f:dc:a6:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jul 10 14:07:19 2025 GMT
            Not After : Jul  9 14:12:19 2026 GMT
        Subject: CN=CF2C3CEAE1C6E1FC0B5DDFB46BBC3EAFAF723F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b2:ca:ba:46:1b:47:6f:64:19:c2:01:05:10:
                    2d:12:8a:da:d3:8d:a4:20:06:91:21:c5:54:81:ad:
                    7b:01:e5:4b:f6:88:64:2f:57:9c:f2:03:01:c2:f7:
                    19:8c:66:b6:d6:f6:32:32:b4:38:c9:7b:17:d8:b0:
                    d1:6a:02:a7:f6:19:99:3f:05:4b:e0:cf:da:0f:63:
                    e8:43:c0:4b:6e:70:fd:3a:fc:c9:a7:c0:2d:9b:cc:
                    ee:72:e2:87:5b:c2:8b:db:26:41:7d:6d:00:c5:a1:
                    12:c2:ae:42:60:5f:94:37:e2:f2:aa:a1:32:c2:3c:
                    2e:83:a1:33:31:df:38:ad:ca:2a:fc:5b:59:35:fc:
                    10:d8:a6:b9:66:87:a6:f7:9f:52:76:62:a8:33:03:
                    7a:f8:21:66:ad:bd:f5:7f:97:60:28:65:0e:55:3b:
                    56:3a:1b:53:50:fd:c1:e9:4e:00:46:67:2f:05:e8:
                    d5:21:c2:fd:76:24:42:d0:46:6b:2e:5f:f1:2c:28:
                    59:9b:21:32:13:2c:3f:f9:61:b2:8a:41:7b:53:0b:
                    6b:84:6e:1d:01:40:f9:c4:4e:61:db:b2:00:cb:47:
                    39:39:9a:96:5f:cc:4e:16:84:71:05:d1:71:25:25:
                    60:05:50:bb:29:5d:4d:d5:f9:68:50:ce:ee:b8:c5:
                    7a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2C:3C:EA:E1:C6:E1:FC:0B:5D:DF:B4:6B:BC:3E:AF:AF:72:3F:51
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:1d:50:83:24:49:bf:da:10:3b:9d:fc:fc:5a:9b:30:45:0f:
         48:42:9d:c0:28:63:c7:06:8d:70:4e:da:25:cb:14:6d:64:21:
         65:b3:a5:f9:24:e1:03:19:d9:bc:8e:89:57:38:4c:f7:9e:b9:
         7d:82:0a:da:87:aa:b0:b4:0c:8f:3a:b7:57:13:b9:d7:70:aa:
         b0:d3:7c:27:d0:ad:29:4f:bd:2c:ea:d1:da:82:8d:9e:bc:3d:
         9c:8d:18:cf:4a:d8:7b:5b:7b:e8:92:d5:83:d6:06:6c:3f:b5:
         9b:f0:8a:65:f8:5b:e2:94:58:35:4a:7d:e3:f3:ad:84:ad:ea:
         b2:6b:86:b8:7a:c6:8b:32:a2:74:ad:6e:55:a5:4f:f4:65:d8:
         cf:dd:2d:10:1a:36:2c:fa:2c:bd:64:62:29:13:e3:48:e4:62:
         ad:fc:f7:9c:b4:5f:c2:2e:08:25:47:88:13:9b:49:3d:2d:82:
         c1:5c:db:ad:ed:12:27:9d:35:05:2c:5e:87:2a:72:61:f4:e0:
         18:6a:bc:93:93:91:9d:ae:fd:f9:63:eb:47:0f:54:ae:2a:c0:
         74:94:b7:37:84:88:1d:83:7e:04:a6:2c:3f:02:6d:83:45:aa:
         9a:2f:d8:5b:b9:9d:9a:5a:c9:ef:d5:08:78:9c:83:04:65:68:
         4d:c9:0d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:13:25 2025 by rpki-client