Route Origin Authorization

$ rpki-client -vvf repo.rpki.space/repo/Netiface/1/323630323a663931353a3a2f34302d3430203d3e20323038313931.roa
File:                     323630323a663931353a3a2f34302d3430203d3e20323038313931.roa (raw, json)
Hash identifier:          J9ExWbrdKJcmkdwVmprlwAvE4MsnNQqX2S5H+bETX68=
Subject key identifier:   60:4E:3C:4F:31:27:BF:D9:34:EB:5B:7B:05:9B:F6:66:B5:06:D3:20
Certificate issuer:       /CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
Certificate serial:       6E0514A2954D94C6ABE1E69D0A60932ADF2D44FE
Authority key identifier: FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
Subject info access:      rsync://repo.rpki.space/repo/Netiface/1/323630323a663931353a3a2f34302d3430203d3e20323038313931.roa
Signing time:             Fri 29 Aug 2025 21:13:27 +0000
ROA not before:           Fri 29 Aug 2025 21:08:27 +0000
ROA not after:            Fri 28 Aug 2026 21:13:27 +0000
asID:                     208191
IP address blocks:        2602:f915::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl
                          rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/04b24da1-11ab-48ad-a03f-6b7832a569c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 01:32:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:05:14:a2:95:4d:94:c6:ab:e1:e6:9d:0a:60:93:2a:df:2d:44:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8
        Validity
            Not Before: Aug 29 21:08:27 2025 GMT
            Not After : Aug 28 21:13:27 2026 GMT
        Subject: CN=604E3C4F3127BFD934EB5B7B059BF666B506D320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:32:e5:0e:6a:8a:b0:87:67:0d:0b:8f:6f:51:
                    11:ab:24:ff:e5:06:15:dd:bc:b9:3a:42:b3:01:35:
                    00:14:c5:c9:e1:5f:3f:09:7b:48:50:0f:8d:c2:de:
                    88:59:1f:ed:b0:34:92:b1:ef:50:c4:b6:7f:6e:59:
                    cc:f6:29:6e:60:47:7d:39:0c:ef:dd:e1:ac:86:60:
                    af:a2:69:66:12:e2:5d:31:eb:e1:57:c0:09:4c:e8:
                    54:e1:f1:3a:24:3e:4c:60:a1:ee:6d:8f:2c:4a:c9:
                    d6:57:bd:49:f3:42:5b:c7:b4:59:4d:d6:65:4f:b6:
                    fc:3a:34:a8:05:34:1b:bf:7b:29:31:71:24:22:02:
                    48:c6:c9:71:47:31:8e:e6:ec:92:fc:1d:93:e3:d9:
                    94:55:0b:dd:78:b8:bb:58:88:70:04:5e:4a:5e:62:
                    25:29:a2:9f:cf:05:89:6b:41:12:fe:00:61:c7:6a:
                    e4:d5:31:92:58:fe:de:6c:d6:38:19:03:7f:37:3e:
                    c7:da:21:d6:e5:d6:36:52:42:26:92:a2:51:ed:f8:
                    07:92:c3:18:ab:f4:c4:04:79:bb:3b:a8:79:3e:b2:
                    2d:d3:7c:98:cc:fb:9f:55:c1:ac:a8:a6:a1:34:90:
                    97:3d:4c:2a:25:d3:6c:5c:4b:ea:d4:6e:90:fe:14:
                    4b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4E:3C:4F:31:27:BF:D9:34:EB:5B:7B:05:9B:F6:66:B5:06:D3:20
            X509v3 Authority Key Identifier:
                keyid:FB:F7:8E:5D:A5:B5:D6:AD:4E:2F:93:26:34:20:6B:13:3C:CB:FD:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.rpki.space/repo/Netiface/1/FBF78E5DA5B5D6AD4E2F932634206B133CCBFD25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/04b24da1-11ab-48ad-a03f-6b7832a569c8/2b75ca250fc63c6c47d032638bcecc49f4b5fb715ec6dfe8c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/1/323630323a663931353a3a2f34302d3430203d3e20323038313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f915::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:ed:8e:b2:d1:1e:90:e7:d4:7f:40:0c:35:89:55:03:b3:51:
         9d:ee:3e:01:e0:8f:d5:fa:9b:34:10:79:19:97:fb:6b:c4:db:
         f4:a2:28:0d:d8:39:9a:c4:6a:fa:46:47:b3:f2:7c:a3:1d:6a:
         c3:09:7d:68:8d:1f:32:bb:95:b1:41:7f:93:f6:b2:13:a5:fc:
         34:7e:dc:cc:b1:0f:22:b1:5f:04:85:d3:d3:c4:f8:0b:d1:13:
         f5:d0:4b:b4:10:ed:2c:2d:10:94:b4:b4:96:52:79:29:4f:f0:
         66:ea:b0:fc:e6:d6:d0:dc:bc:83:46:08:c6:50:68:22:a2:86:
         19:66:a1:01:df:90:69:a1:01:bd:fd:0d:30:37:b0:a7:9b:ce:
         80:04:66:85:cd:ba:4c:e5:d4:b0:ce:41:06:2b:41:d0:cf:bf:
         7f:78:85:00:cc:bf:86:de:c9:db:94:b0:b6:2a:db:8f:11:1b:
         90:5b:dd:58:19:fb:c7:ff:8e:bb:81:d2:b1:4c:9d:b3:6c:dd:
         4a:5d:24:df:90:44:01:7b:0a:21:57:30:0c:9d:7b:03:d0:6e:
         75:c5:f7:8b:66:4a:29:24:c6:9f:ba:5c:93:12:d1:b0:84:a4:
         57:f0:e7:96:3b:35:ae:ca:03:1d:c0:e1:87:55:19:68:aa:88:
         f9:b0:0b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 09:19:08 2025 by rpki-client