Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e20393833.roa
File:                     323630323a666266313a3a2f33322d3438203d3e20393833.roa (raw, json)
Hash identifier:          MXwNOVXooY96t6g0rh52dBjADLcY81X0R3dZkrmELXA=
Subject key identifier:   3A:F4:77:02:A5:43:69:B4:14:9F:9B:47:81:C0:D2:29:D1:41:29:A6
Certificate issuer:       /CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Certificate serial:       2AD0EBC906F6A4DFD5F298EF1FE0855447647749
Authority key identifier: FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e20393833.roa
Signing time:             Fri 18 Jul 2025 07:36:59 +0000
ROA not before:           Fri 18 Jul 2025 07:31:59 +0000
ROA not after:            Fri 17 Jul 2026 07:36:59 +0000
asID:                     983
IP address blocks:        2602:fbf1::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d0:eb:c9:06:f6:a4:df:d5:f2:98:ef:1f:e0:85:54:47:64:77:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
        Validity
            Not Before: Jul 18 07:31:59 2025 GMT
            Not After : Jul 17 07:36:59 2026 GMT
        Subject: CN=3AF47702A54369B4149F9B4781C0D229D14129A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:55:a7:4d:8f:91:23:d2:7e:c4:b0:90:76:3a:
                    64:c9:05:07:30:92:07:aa:0f:2f:39:ad:d2:96:85:
                    0a:4e:6c:30:81:2a:b6:05:82:b7:40:6f:ec:69:0d:
                    0a:78:b7:73:54:59:e0:0c:75:45:81:a1:91:23:71:
                    16:e6:1c:50:6d:f6:b3:06:26:b4:6e:b3:5a:c7:5b:
                    bb:5f:a9:76:db:1b:42:79:aa:c1:f2:51:b2:95:bf:
                    e6:ec:85:49:75:89:58:f6:36:67:7b:68:84:dd:1a:
                    a5:c3:57:53:b7:03:5c:02:e6:eb:1a:3f:77:03:a6:
                    36:16:22:45:a5:47:81:c5:2d:64:94:51:f0:62:01:
                    91:58:bf:e3:1f:62:0e:02:9a:26:b2:93:71:76:6d:
                    fe:9e:19:35:ec:1f:61:e5:7d:80:3b:79:4d:2b:22:
                    32:37:77:68:9e:b8:4a:eb:ee:d8:9e:88:3d:41:79:
                    8a:d9:73:5e:8b:02:4c:ea:76:57:fb:54:b2:24:27:
                    c3:28:85:c7:fc:2f:1f:2f:98:27:d4:75:f9:0b:3d:
                    95:48:10:32:7c:e4:7d:ff:9a:63:eb:dd:fe:f9:59:
                    e5:9b:7e:aa:7d:c9:c6:a9:12:0e:40:5c:7f:72:8d:
                    b2:62:84:75:55:ab:f6:11:05:af:fe:fa:97:e1:f5:
                    7e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F4:77:02:A5:43:69:B4:14:9F:9B:47:81:C0:D2:29:D1:41:29:A6
            X509v3 Authority Key Identifier:
                keyid:FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/323630323a666266313a3a2f33322d3438203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf1::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:4d:70:48:96:2c:bd:98:fc:fe:0b:7e:d3:de:85:02:2d:79:
         03:1a:ad:8a:d8:7e:8c:10:77:87:72:bb:34:a6:23:f6:1e:c5:
         8f:0b:76:bb:bd:71:4a:49:40:ac:0e:c8:83:43:43:3f:b3:ed:
         48:51:25:51:52:94:da:7d:33:5d:13:8a:ba:7a:51:ac:c4:20:
         9a:27:7d:4b:14:45:8e:1d:ce:ce:de:09:a6:20:85:6f:88:ab:
         0e:1d:92:8a:eb:8c:5c:95:1b:8b:50:dd:98:d4:de:18:a8:89:
         74:c7:8f:1f:a2:14:f9:31:1c:1d:84:a7:db:5e:8a:1a:7d:fb:
         7f:f5:6c:eb:cc:ad:57:a7:35:29:48:d1:26:a5:6e:4a:5d:32:
         ac:8c:fe:a9:9c:04:33:ec:c2:1f:e6:01:f0:21:22:bc:32:97:
         57:e6:75:33:5e:89:7c:7e:bd:59:02:51:c1:f7:d0:15:c0:9a:
         35:72:3d:16:f4:f6:ad:7d:f0:59:99:a1:16:df:ab:b8:f3:83:
         c8:2b:7c:9f:63:7f:4a:6b:e4:39:02:b7:1e:ad:15:0f:ea:77:
         ae:3b:a8:b5:18:4f:c1:d6:29:79:86:77:af:92:95:a3:73:51:
         49:a1:4c:4b:c1:92:a9:0e:70:a2:27:33:de:ed:3d:7c:7f:2a:
         59:f1:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:05:46 2025 by rpki-client