Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a393030303a3a2f33382d3338203d3e20333938393931.roa
File:                     323630373a613534303a393030303a3a2f33382d3338203d3e20333938393931.roa (raw, json)
Hash identifier:          Db2/6+oOJ0SsJ2vagCaPId0KOSBw3PP4SpociFje0Kw=
Subject key identifier:   F9:CF:B6:F7:78:AC:A5:B0:46:D7:88:32:C6:69:52:9A:81:57:F3:5E
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       11DC0D268943BA4FEC4415DF38A21C7D7024C7C6
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a393030303a3a2f33382d3338203d3e20333938393931.roa
Signing time:             Thu 14 Aug 2025 15:43:31 +0000
ROA not before:           Thu 14 Aug 2025 15:38:31 +0000
ROA not after:            Thu 13 Aug 2026 15:43:31 +0000
asID:                     398991
IP address blocks:        2607:a540:9000::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
                          rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 12:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:dc:0d:26:89:43:ba:4f:ec:44:15:df:38:a2:1c:7d:70:24:c7:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Aug 14 15:38:31 2025 GMT
            Not After : Aug 13 15:43:31 2026 GMT
        Subject: CN=F9CFB6F778ACA5B046D78832C669529A8157F35E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:aa:16:f9:a9:8e:a8:c8:9c:fc:15:df:29:69:
                    f7:1b:66:92:29:fa:9f:f7:ff:75:80:28:ef:c8:2b:
                    f3:c6:40:6d:1b:35:33:b6:c5:96:ce:06:9f:c9:06:
                    bd:b2:71:e7:df:39:b8:78:3d:d9:05:60:e1:b0:c7:
                    3d:cb:fe:6f:69:f2:23:e2:e2:5f:b2:32:b2:b8:9d:
                    6b:3a:98:fb:20:0c:df:3d:67:a0:e9:74:f3:ce:18:
                    f0:d6:2f:28:de:b7:ce:cc:29:a8:87:78:6d:1f:e1:
                    4f:c7:b0:78:72:e9:b0:e0:89:ee:30:b5:8f:a1:81:
                    bf:f6:29:17:5a:ee:fb:28:e8:47:4a:f7:1a:bb:6e:
                    e5:dd:fd:51:fe:07:e6:83:aa:8c:7b:aa:82:29:f0:
                    4f:2d:c2:28:a0:2b:0d:47:5a:db:fd:22:13:8c:63:
                    c7:c1:3d:17:43:e7:ee:a8:ae:9c:b1:10:f8:8d:a5:
                    c3:c8:b7:c1:be:d3:52:a0:76:b0:f3:e0:14:55:71:
                    13:d4:4c:e1:bb:6a:14:79:d1:4b:52:d8:63:10:39:
                    86:dd:1f:16:38:56:c9:93:88:59:e9:d9:81:37:28:
                    84:78:55:5f:5d:fe:af:b9:77:c2:76:80:6e:b4:c7:
                    a4:23:36:54:ec:fd:e2:1c:c2:72:57:0c:64:63:0c:
                    bc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CF:B6:F7:78:AC:A5:B0:46:D7:88:32:C6:69:52:9A:81:57:F3:5E
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a393030303a3a2f33382d3338203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a540:9000::/38

    Signature Algorithm: sha256WithRSAEncryption
         1e:ec:e6:b9:5a:3c:c8:9e:3b:a2:a0:92:ba:44:25:2a:bc:8a:
         de:51:89:18:26:37:16:d6:e1:26:3d:b7:cf:21:02:8d:97:fd:
         cc:01:90:b1:80:56:1e:e2:36:21:e0:fb:86:70:f2:97:74:ef:
         cc:07:7c:e7:46:57:04:40:b8:8a:26:00:1e:ed:30:a7:93:3c:
         0a:20:7e:16:db:2a:2c:5c:41:e7:7e:4b:2f:4e:12:b7:d3:1b:
         20:91:0d:50:02:ff:32:71:f2:5b:14:fd:41:dc:f9:b4:ce:f4:
         79:40:b2:67:e9:17:d2:96:0d:e4:50:6e:46:42:f0:3d:96:b8:
         b3:ee:61:92:b4:56:d4:de:92:94:96:02:77:e4:03:cf:c8:88:
         e5:e4:86:82:e7:f2:57:72:75:5c:2e:97:d4:5a:5f:d7:68:81:
         23:af:18:08:12:9f:6c:a5:e0:3b:1e:5b:10:51:30:63:5d:1e:
         49:36:91:b3:13:be:af:6b:b7:fc:cb:09:81:18:ca:a1:e7:0d:
         c6:b3:2c:de:d1:4f:dd:6c:5c:a5:c6:15:fd:e5:ad:78:f6:66:
         fc:07:1e:6c:63:bb:1e:f1:17:67:95:76:ff:f3:1b:a7:cd:c3:
         d5:dd:67:96:b8:c5:fd:9c:88:47:e3:06:95:8c:17:b0:52:ec:
         90:91:50:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:10 2025 by rpki-client