Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a613a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a613a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          g9yQQgTjWiQLrmljE6ojNA/pruSOETEb8uR5Hf1FI7I=
Subject key identifier:   DF:85:C1:A7:1A:EA:30:4A:27:AE:73:1B:F2:C5:1D:E1:A1:BF:2F:8C
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       3C96692B068FE679FFF1AEC620DE975A8B3CB4E9
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a613a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 10 Jul 2025 14:12:34 +0000
ROA not before:           Thu 10 Jul 2025 14:07:34 +0000
ROA not after:            Thu 09 Jul 2026 14:12:34 +0000
asID:                     9009
IP address blocks:        2602:fad4:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Jul 2025 19:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:96:69:2b:06:8f:e6:79:ff:f1:ae:c6:20:de:97:5a:8b:3c:b4:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jul 10 14:07:34 2025 GMT
            Not After : Jul  9 14:12:34 2026 GMT
        Subject: CN=DF85C1A71AEA304A27AE731BF2C51DE1A1BF2F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:15:4f:96:94:5f:09:2e:37:ae:45:d8:b1:
                    bd:34:bc:fe:9f:0f:c4:ea:35:da:d8:44:6e:ea:d5:
                    03:bf:f3:88:ee:6d:89:12:4d:91:dd:56:1d:c9:09:
                    9c:9c:14:bf:80:11:01:56:e5:b6:93:e6:a3:37:00:
                    d1:38:df:06:e7:12:11:15:9d:a7:c7:dd:24:6f:5f:
                    0c:d8:6c:7a:d4:13:17:8c:62:89:92:03:6d:7b:4c:
                    db:51:3e:30:b6:10:14:9d:8b:b4:5b:7b:26:52:d2:
                    31:7e:6f:d5:c0:b6:0e:92:3e:73:c2:10:5a:12:7d:
                    54:06:2b:a7:8a:a0:05:8a:21:bb:c1:f7:85:56:ee:
                    31:3f:d6:b7:13:99:a0:23:8f:f5:5f:09:d1:20:ee:
                    9a:e6:c7:c0:a8:81:67:6f:7c:f1:dc:bb:9f:d7:a9:
                    23:f9:26:24:aa:9c:6a:0f:e6:f9:bc:f3:88:22:fa:
                    78:6e:3e:b4:6d:9b:82:d3:a1:25:69:23:72:3c:c5:
                    17:94:5a:b4:5f:14:43:33:86:59:2d:43:b0:70:69:
                    5f:43:38:49:2f:1b:bb:aa:51:43:07:af:0c:79:37:
                    41:f2:bd:88:e4:ff:6c:55:37:14:b5:ab:79:c6:da:
                    f7:7f:5d:d8:5b:9a:01:84:b4:a2:29:8a:51:b3:82:
                    d5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:85:C1:A7:1A:EA:30:4A:27:AE:73:1B:F2:C5:1D:E1:A1:BF:2F:8C
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a613a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:4d:a1:b7:d9:97:c9:2b:c8:51:63:ce:4e:34:36:cd:d1:d1:
         7e:32:fd:b2:c3:20:3c:83:5b:ab:9a:5c:05:1a:57:9b:c6:83:
         b9:f3:c3:c1:d7:d8:91:14:76:11:41:16:86:51:ba:44:80:2d:
         64:88:41:76:b5:e3:52:13:31:bd:d7:a3:9a:9d:39:35:50:64:
         aa:5e:a0:d4:3e:54:d0:82:d1:30:c7:3a:a6:28:0f:01:80:c7:
         33:3a:17:fc:7c:3c:b0:20:d8:ed:d8:db:5a:9f:d9:78:47:2b:
         ed:bb:21:1b:34:0d:d0:7e:ac:cd:36:1d:d4:61:37:f7:ef:62:
         53:fd:eb:08:54:96:86:f6:27:2d:08:89:76:fe:7a:20:d2:8c:
         13:f8:9f:eb:52:ab:e3:90:84:a6:b9:8f:1f:bd:7f:ef:de:ad:
         7e:6b:43:8a:f6:2c:4c:cb:0f:52:4f:6c:8c:24:19:47:cf:7c:
         25:85:fd:b3:96:15:82:a9:ae:b3:37:43:61:a3:af:90:f5:8a:
         0d:74:4d:ac:15:5d:08:1a:dc:b8:20:20:3b:22:79:d0:ac:06:
         01:30:f1:cc:a6:21:35:2a:ad:e2:5c:eb:7d:82:99:93:9b:71:
         50:57:2f:c7:ea:12:5a:6f:8a:db:d9:57:48:b6:8f:64:09:38:
         0c:f5:31:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:13:30 2025 by rpki-client