Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a3a2f33332d3333203d3e20333938393931.roa
File:                     323630373a613534303a3a2f33332d3333203d3e20333938393931.roa (raw, json)
Hash identifier:          CLGTtpp/P5goLIZj4In2BHnC4Al/q7zecz+xsI68zS0=
Subject key identifier:   46:CE:72:03:C9:24:37:7F:65:84:8D:A8:4E:1F:4B:EF:1C:27:1E:3E
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       2ACF06C490564B3DD7196D1706E36E4038C494F8
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a3a2f33332d3333203d3e20333938393931.roa
Signing time:             Thu 14 Aug 2025 15:43:30 +0000
ROA not before:           Thu 14 Aug 2025 15:38:30 +0000
ROA not after:            Thu 13 Aug 2026 15:43:30 +0000
asID:                     398991
IP address blocks:        2607:a540::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
                          rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 12:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cf:06:c4:90:56:4b:3d:d7:19:6d:17:06:e3:6e:40:38:c4:94:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Aug 14 15:38:30 2025 GMT
            Not After : Aug 13 15:43:30 2026 GMT
        Subject: CN=46CE7203C924377F65848DA84E1F4BEF1C271E3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:69:d0:32:dc:a8:6c:18:c8:f9:f8:7c:d2:03:
                    43:40:6b:88:24:fc:e1:03:0b:6e:4c:f0:f4:1d:e7:
                    24:ed:06:91:1f:d6:e4:24:75:1c:73:b4:fa:71:77:
                    58:d6:a0:3c:32:22:78:92:f9:72:b7:20:7a:1a:a4:
                    a5:6c:b7:fc:28:ef:c9:1e:b1:b6:38:2d:0d:72:80:
                    60:11:b8:7a:bd:b9:5b:19:51:df:c1:49:54:fc:22:
                    73:6b:a1:f6:6f:19:e2:46:66:51:74:89:cf:82:f9:
                    a0:84:8f:24:07:6c:0e:29:d5:0a:fe:88:48:d8:76:
                    ef:55:fb:69:6e:7d:8e:c4:88:c6:4c:6f:de:8d:fe:
                    80:02:6e:fd:73:44:04:43:df:d4:e9:9a:8b:b2:de:
                    50:ef:3c:d6:4c:76:07:a7:02:e3:83:57:91:36:40:
                    12:64:e2:9b:c0:ea:bd:80:dd:03:74:ef:fb:91:81:
                    67:fd:61:90:52:73:cf:b7:43:69:4a:fc:fe:88:90:
                    7c:3c:78:38:88:2e:a1:8e:67:07:14:0e:a9:9c:33:
                    08:67:2a:49:48:2f:8d:c4:ff:0a:4f:73:e0:af:f1:
                    9c:6b:4d:c3:e8:f2:81:2b:97:ae:e8:90:11:32:46:
                    c4:20:95:bb:31:89:81:7d:20:62:88:8d:bc:7d:55:
                    a2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CE:72:03:C9:24:37:7F:65:84:8D:A8:4E:1F:4B:EF:1C:27:1E:3E
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a3a2f33332d3333203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:a540::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:f7:6e:56:ac:f8:81:51:11:33:92:58:f2:ec:5d:68:4f:cd:
         a8:90:cc:4a:cd:bc:06:39:f2:b3:9c:7e:da:d2:23:53:35:42:
         b4:b5:f1:dd:b1:02:f1:32:a3:11:83:c0:6e:93:82:1e:92:79:
         3e:13:1a:e6:64:70:4c:50:bc:59:2f:09:ce:ca:91:51:90:ba:
         11:9a:a0:d4:38:4a:69:36:7b:5e:1c:ef:d7:4d:92:d9:a7:02:
         7c:7f:bb:44:76:ac:9d:10:e2:4d:52:81:68:8f:b5:99:c8:72:
         ac:27:ab:ee:39:3c:b8:af:c4:10:92:7d:fd:28:1c:82:3e:86:
         ba:e2:c5:2f:92:e0:93:bd:8d:32:c1:ba:21:62:6c:27:6b:5a:
         c7:ab:34:9e:98:90:18:34:ea:02:8e:d4:4a:85:4e:8a:1f:7e:
         32:9f:15:b0:32:7e:a4:cf:6c:dd:d9:44:36:92:90:cf:17:d7:
         bc:8d:5b:ca:85:ff:e4:06:28:51:5c:23:65:88:64:1e:51:89:
         bc:ca:76:89:2c:e1:6d:7a:ae:9f:7a:28:b6:4a:23:d6:c3:bc:
         5a:77:e0:88:16:5a:34:ae:66:f0:94:e4:dc:a1:d7:9a:72:40:
         c1:c6:6e:b9:64:41:cb:65:d7:ea:40:d4:88:8c:af:0e:0e:79:
         49:a7:27:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:21 2025 by rpki-client