Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a393430303a3a2f33382d313238203d3e20333938393931.roa
File:                     323630373a613534303a393430303a3a2f33382d313238203d3e20333938393931.roa (raw, json)
Hash identifier:          enL+f9w8bO9mEngPZM/kLo3FQKSpxFzxfqruHy2MIDQ=
Subject key identifier:   D6:D2:38:15:CA:6B:F4:FC:72:F2:3D:B8:EA:DD:A4:15:25:FC:43:7E
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       6B15B00735480730A3CC237ECC18E54664A70F50
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a393430303a3a2f33382d313238203d3e20333938393931.roa
Signing time:             Fri 15 Aug 2025 03:40:58 +0000
ROA not before:           Fri 15 Aug 2025 03:35:58 +0000
ROA not after:            Fri 14 Aug 2026 03:40:58 +0000
asID:                     398991
IP address blocks:        2607:a540:9400::/38 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
                          rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 12:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:15:b0:07:35:48:07:30:a3:cc:23:7e:cc:18:e5:46:64:a7:0f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Aug 15 03:35:58 2025 GMT
            Not After : Aug 14 03:40:58 2026 GMT
        Subject: CN=D6D23815CA6BF4FC72F23DB8EADDA41525FC437E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:04:9f:8e:a4:e8:00:ef:e9:53:4b:b4:97:
                    31:04:e7:c1:e4:96:a7:f0:96:6b:cb:ae:0b:06:fd:
                    ee:d6:1f:22:07:44:7b:25:e0:07:bd:33:4e:92:13:
                    7b:87:0c:64:d5:51:c9:2d:14:79:91:d8:f6:d1:67:
                    7c:bd:8c:c9:c0:78:e2:aa:5c:d0:ab:3b:f8:d8:72:
                    ab:b8:e6:54:c1:2d:d0:6a:67:6d:ae:cb:89:5c:eb:
                    df:69:60:3e:c7:32:a0:65:ec:d0:85:e6:40:68:f1:
                    ac:c0:41:1b:dd:f1:df:cf:6b:25:85:7d:eb:16:ab:
                    cf:52:7f:a6:80:33:0d:83:3a:92:d4:4e:82:dc:6b:
                    79:da:68:dd:8c:63:a5:9a:7a:b3:36:42:1f:ec:de:
                    7c:52:cb:74:97:3c:14:37:70:93:2b:f0:01:5b:f8:
                    94:79:7e:72:e2:fa:1f:df:58:3c:a8:7d:a8:df:cc:
                    7f:35:10:d7:c7:ae:96:1b:37:7d:65:cb:f4:4b:b2:
                    37:f4:54:fe:a3:dc:54:94:33:96:12:b1:7f:2a:ce:
                    96:63:65:92:d5:90:f0:1f:28:3c:f3:9c:74:3f:e3:
                    3d:31:c8:50:f5:9f:29:c4:6e:0c:78:98:a2:90:01:
                    5e:0e:f7:84:4c:5c:57:5c:69:a8:cc:51:a0:21:03:
                    3a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D2:38:15:CA:6B:F4:FC:72:F2:3D:B8:EA:DD:A4:15:25:FC:43:7E
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a393430303a3a2f33382d313238203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a540:9400::/38

    Signature Algorithm: sha256WithRSAEncryption
         2f:dd:79:d9:84:ae:e8:b9:e3:32:84:f7:90:77:0a:b9:2f:d8:
         67:aa:0b:6e:2e:bb:e1:04:f6:84:c2:48:3d:e2:c7:d0:53:3b:
         08:57:6e:a3:b8:5d:6d:d1:a6:e4:43:50:29:70:e1:49:7a:e8:
         db:0d:55:32:c5:42:88:f7:de:43:66:cf:20:45:e4:fd:f9:9b:
         43:0e:65:c0:0e:ab:67:f8:c6:ed:16:f1:fa:ac:5c:3e:04:f5:
         4f:1d:47:8f:3a:f8:80:5e:86:0d:ed:33:d4:38:a4:7f:9d:8d:
         6e:d2:77:35:a7:93:34:7e:35:41:a3:83:76:2f:3d:66:04:ae:
         e7:ac:be:67:4d:bc:09:ee:ff:2d:a8:bf:7b:1c:49:8a:f4:52:
         6c:70:ef:2c:46:03:4a:1b:2c:c9:16:8b:6c:f0:8e:a3:c6:1c:
         04:3d:b5:f9:71:85:ea:9f:71:6a:da:54:59:c1:fb:5e:c3:69:
         c7:a6:ba:fb:79:36:9e:71:ec:4c:55:f9:81:8a:fb:b8:f5:02:
         f4:85:95:30:e0:6b:6d:62:5d:19:36:9f:97:c4:ee:57:92:94:
         dd:f0:d0:c5:38:69:79:82:74:b8:68:a3:55:dd:74:93:5a:90:
         ad:01:1e:66:55:3a:48:60:f2:51:d7:68:6e:37:f5:6c:70:fc:
         a9:db:1e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:07 2025 by rpki-client