Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3230303a3a2f34302d3430203d3e20333936393933.roa
File:                     323630323a663734333a3230303a3a2f34302d3430203d3e20333936393933.roa (raw, json)
Hash identifier:          3JpizsD378UUmVQatl8oFW2RLNDxUTf+w48Xj3V1wKo=
Subject key identifier:   DB:AA:0F:62:D4:E1:2E:1A:89:A9:C8:06:32:C2:16:D4:39:45:A6:1D
Certificate issuer:       /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial:       501D3CCBC2A9A38ECCA0D9E39985BC050DF8118D
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3230303a3a2f34302d3430203d3e20333936393933.roa
Signing time:             Sun 27 Apr 2025 03:16:45 +0000
ROA not before:           Sun 27 Apr 2025 03:11:45 +0000
ROA not after:            Sun 26 Apr 2026 03:16:45 +0000
asID:                     396993
IP address blocks:        2602:f743:200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
                          rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 05:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1d:3c:cb:c2:a9:a3:8e:cc:a0:d9:e3:99:85:bc:05:0d:f8:11:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
        Validity
            Not Before: Apr 27 03:11:45 2025 GMT
            Not After : Apr 26 03:16:45 2026 GMT
        Subject: CN=DBAA0F62D4E12E1A89A9C80632C216D43945A61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:16:4c:5f:43:81:09:53:cf:de:e6:0c:83:a3:
                    26:94:66:a4:86:56:f3:a3:7b:fc:9a:15:9d:2b:7b:
                    32:e9:ef:4f:97:8a:ab:66:a3:44:80:0e:c9:86:38:
                    c9:6c:19:7b:03:57:d1:50:e1:0d:b5:a7:ff:8e:79:
                    53:09:50:37:b8:ec:d1:02:8d:49:86:cb:b8:4b:03:
                    ca:f4:6a:73:25:a9:b3:33:3f:3f:75:7e:6e:fd:79:
                    04:a0:ed:ee:3c:f3:51:cf:df:14:6e:71:3e:47:f7:
                    b8:e5:1a:5d:df:59:a0:53:af:ce:d8:3d:2a:d5:e1:
                    a4:32:1b:84:ff:0c:76:9e:f0:1c:68:ae:30:43:a5:
                    42:95:45:22:65:ba:ff:21:d6:27:c5:2a:e0:4b:a4:
                    65:99:2a:9f:90:d6:51:58:c9:b8:26:a5:8f:10:b6:
                    cd:69:4f:18:44:c6:2f:06:99:3e:b9:f9:18:82:87:
                    63:7d:10:da:e5:46:b2:f4:8c:de:c7:e9:d6:e5:2e:
                    44:55:87:c2:f5:78:6f:b5:de:07:3f:f1:84:73:64:
                    2c:b0:4e:6a:cc:2c:43:97:8e:ac:ed:a3:e5:64:b7:
                    ee:77:b1:d6:6b:9c:cd:9a:ed:50:9d:24:9c:cb:0d:
                    7f:73:e9:18:4f:46:77:9a:e0:27:1a:9d:ba:5f:fe:
                    43:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AA:0F:62:D4:E1:2E:1A:89:A9:C8:06:32:C2:16:D4:39:45:A6:1D
            X509v3 Authority Key Identifier:
                keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/323630323a663734333a3230303a3a2f34302d3430203d3e20333936393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f743:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:70:4f:bc:02:b4:63:ae:a0:68:f1:69:54:01:e5:85:e4:e2:
         f1:af:82:c3:bd:d7:80:78:24:4b:4f:1f:f6:6e:14:cc:30:f7:
         0e:37:59:d0:30:25:1e:f1:6c:b7:ee:58:7b:ed:55:64:d6:8e:
         2c:b5:2f:ec:68:81:ae:c2:ac:32:1b:18:88:f1:8b:a1:cf:46:
         75:43:82:b0:a2:16:f5:6f:62:c5:7b:47:5f:03:58:96:61:d5:
         39:63:62:56:9c:8e:ac:1a:04:2c:48:b2:f7:1d:f6:3d:7b:da:
         55:d6:b7:69:0f:dd:ac:19:ff:02:30:4c:89:2b:7a:10:ff:a9:
         2e:52:fc:d6:40:77:9c:90:a2:21:1c:ac:52:0b:2b:6a:51:cb:
         5f:e6:0a:e1:c2:6a:00:b6:23:e6:d9:d4:26:e7:8b:c5:56:76:
         7b:78:9a:4b:17:60:4e:78:fa:35:ea:c4:d0:fb:95:2e:60:83:
         6e:38:74:3f:58:ba:35:7d:90:b6:9b:bd:41:8e:14:43:df:2e:
         59:d2:09:13:25:35:c2:51:b2:13:d0:75:d4:ad:52:e1:d0:c4:
         bd:a8:6c:fe:53:1a:77:b8:7c:29:f6:b6:11:44:ff:c6:6a:86:
         f2:21:47:7c:2f:4f:e3:6a:5a:30:3e:26:8b:1c:b9:54:b8:16:
         7c:6d:05:bc
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUB08y8Kpo47MoNnjmYW8BQ34EY0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3MjE1OTRkYTk0MjRiOTQ5ZDdjNjk1ZjAyZGVhZDdh
YmZmNDBiYTQyNmEyZTQxZjMwHhcNMjUwNDI3MDMxMTQ1WhcNMjYwNDI2MDMxNjQ1
WjAzMTEwLwYDVQQDEyhEQkFBMEY2MkQ0RTEyRTFBODlBOUM4MDYzMkMyMTZENDM5
NDVBNjFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hZMX0OBCVPP
3uYMg6MmlGakhlbzo3v8mhWdK3sy6e9Pl4qrZqNEgA7JhjjJbBl7A1fRUOENtaf/
jnlTCVA3uOzRAo1Jhsu4SwPK9GpzJamzMz8/dX5u/XkEoO3uPPNRz98UbnE+R/e4
5Rpd31mgU6/O2D0q1eGkMhuE/wx2nvAcaK4wQ6VClUUiZbr/IdYnxSrgS6RlmSqf
kNZRWMm4JqWPELbNaU8YRMYvBpk+ufkYgodjfRDa5Uay9Izex+nW5S5EVYfC9Xhv
td4HP/GEc2QssE5qzCxDl46s7aPlZLfud7HWa5zNmu1QnSScyw1/c+kYT0Z3muAn
Gp26X/5D3wIDAQABo4ICvDCCArgwHQYDVR0OBBYEFNuqD2LU4S4aianIBjLCFtQ5
RaYdMB8GA1UdIwQYMBaAFDBrdBpLMqK968y0xz2yUsUszz9RMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzI1ODg2YmM1OTJkZTRiMDU5NjU5YmI3OWVjMDhiYWNiLzAv
MzA2Qjc0MUE0QjMyQTJCREVCQ0NCNEM3M0RCMjUyQzUyQ0NGM0Y1MS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzU2NWY1NDM1LTVjZDEtNDhlNC05Y2ZjLTg0NGZjZDA2ZWZlMS80Mzcy
MTU5NGRhOTQyNGI5NDlkN2M2OTVmMDJkZWFkN2FiZmY0MGJhNDI2YTJlNDFmMy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8yNTg4NmJjNTkyZGU0YjA1OTY1OWJi
NzllYzA4YmFjYi8wLzMyMzYzMDMyM2E2NjM3MzQzMzNhMzIzMDMwM2EzYTJmMzQz
MDJkMzQzMDIwM2QzZTIwMzMzOTM2MzkzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3QwIwDQYJ
KoZIhvcNAQELBQADggEBAHJwT7wCtGOuoGjxaVQB5YXk4vGvgsO914B4JEtPH/Zu
FMww9w43WdAwJR7xbLfuWHvtVWTWjiy1L+xoga7CrDIbGIjxi6HPRnVDgrCiFvVv
YsV7R18DWJZh1TljYlacjqwaBCxIsvcd9j172lXWt2kP3awZ/wIwTIkrehD/qS5S
/NZAd5yQoiEcrFILK2pRy1/mCuHCagC2I+bZ1Cbni8VWdnt4mksXYE54+jXqxND7
lS5gg244dD9YujV9kLabvUGOFEPfLlnSCRMlNcJRshPQddStUuHQxL2obP5TGne4
fCn2thFE/8ZqhvIhR3wvT+NqWjA+JoscuVS4FnxtBbw=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:07:41 2025 by rpki-client