Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a623a3a2f34382d3438203d3e2039303039.roa
File:                     323630323a666164343a623a3a2f34382d3438203d3e2039303039.roa (raw, json)
Hash identifier:          tPxg5V8lxn76/WS7aoe/FuhKw+/2B0QDX15GZdosFZU=
Subject key identifier:   A8:BB:B1:EB:DB:F8:CE:2E:C4:4E:16:FF:C4:91:33:70:27:2C:D6:9F
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       5ECEC753B43CD957493805814FF56AA533E39E13
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a623a3a2f34382d3438203d3e2039303039.roa
Signing time:             Thu 10 Jul 2025 14:12:36 +0000
ROA not before:           Thu 10 Jul 2025 14:07:36 +0000
ROA not after:            Thu 09 Jul 2026 14:12:36 +0000
asID:                     9009
IP address blocks:        2602:fad4:b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Jul 2025 19:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ce:c7:53:b4:3c:d9:57:49:38:05:81:4f:f5:6a:a5:33:e3:9e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Jul 10 14:07:36 2025 GMT
            Not After : Jul  9 14:12:36 2026 GMT
        Subject: CN=A8BBB1EBDBF8CE2EC44E16FFC4913370272CD69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:83:84:74:1a:2b:4d:84:19:b2:be:0a:46:
                    ac:dd:86:93:c3:e1:55:e8:1b:90:8e:23:51:76:21:
                    13:75:0f:5e:b1:77:a6:5c:32:8c:d3:ed:7c:25:83:
                    22:83:16:c2:71:07:8a:28:9b:d0:29:9a:06:21:e5:
                    8d:1c:1d:34:51:38:8d:e8:22:87:dd:a1:be:c5:f0:
                    95:58:da:bf:29:26:dd:39:13:1e:58:86:df:55:72:
                    4e:57:4c:25:68:31:aa:fd:17:db:9f:4d:2c:ee:0c:
                    c6:3c:7b:cf:81:07:45:5d:02:54:64:73:86:b7:b7:
                    66:46:43:3b:cd:31:8d:22:9c:ac:6c:a7:b5:06:cc:
                    1d:e3:63:aa:fe:2e:e3:af:93:45:6a:8d:06:da:61:
                    88:3c:ac:11:b7:eb:ad:1e:5e:48:02:0e:75:b3:de:
                    cd:7b:29:c6:50:48:c3:1d:a2:c9:7a:09:1a:1f:11:
                    c3:24:fe:60:10:09:8b:ab:9a:74:85:e6:1a:d8:83:
                    a7:17:82:e0:33:c2:4a:05:08:c6:d7:a4:63:af:45:
                    d8:87:2c:2a:7d:12:4a:1a:ea:a4:9a:16:bb:d1:6e:
                    dd:3a:d9:41:83:e7:13:29:3d:47:4d:a9:2c:4e:f5:
                    3d:9c:16:2b:77:a3:9f:a2:65:49:14:fa:97:e2:ef:
                    b7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BB:B1:EB:DB:F8:CE:2E:C4:4E:16:FF:C4:91:33:70:27:2C:D6:9F
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a623a3a2f34382d3438203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:76:e7:ba:73:24:32:37:e7:9a:01:da:f9:5b:e3:7e:91:50:
         3b:9a:1c:6a:03:13:07:88:65:79:9f:87:d5:21:5c:ce:82:c5:
         d2:24:75:d6:ea:12:b5:6c:2e:26:29:a7:93:fd:e1:59:ac:03:
         d7:91:85:f2:e8:a3:e9:bb:6a:9d:f0:46:d8:e0:d9:c5:d9:51:
         97:24:4a:49:59:f8:f8:ce:e6:1b:94:fc:f9:66:1f:cb:2b:f4:
         5f:cf:68:a5:de:1c:43:d4:8b:e7:c1:cc:c1:78:1f:bc:1e:9b:
         d7:54:13:9e:92:0d:be:2e:39:71:4c:be:83:0e:77:e9:30:ae:
         39:7a:44:79:6e:b8:56:49:6d:b2:2b:8c:fb:3d:05:c6:05:cb:
         b4:33:c7:7c:17:1c:38:8f:04:8a:46:0d:f1:26:1e:af:32:67:
         16:31:d7:2b:a7:27:88:9b:a4:fb:85:4c:2c:f8:bc:7d:bb:cb:
         7e:cb:d9:98:3b:96:26:63:fc:e6:16:1e:6e:63:d7:0c:26:4b:
         19:21:e1:46:23:bb:1a:03:5a:02:a5:75:cf:aa:69:45:92:01:
         66:07:0a:6c:1e:9a:5d:6b:87:f7:83:fa:3f:95:72:c1:fd:61:
         f6:bf:c1:0f:ba:73:c1:1a:55:01:e9:bb:a1:a1:39:bc:68:29:
         80:06:7a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:13:31 2025 by rpki-client