Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32343a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a32343a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          BtpRPd+jwfvtJAD76MAHI0l3IbZikB7eaidT0Fyy2Cw=
Subject key identifier:   91:6A:1F:1A:27:8D:DD:FE:B0:C3:35:8D:CF:33:58:7F:F8:AF:81:15
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       5F04ED879A51E6E77957C349C06FA94AFAF38B69
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32343a3a2f34382d3438203d3e203131393637.roa
Signing time:             Sun 01 Jun 2025 21:28:51 +0000
ROA not before:           Sun 01 Jun 2025 21:23:51 +0000
ROA not after:            Sun 31 May 2026 21:28:51 +0000
asID:                     11967
IP address blocks:        2602:f72e:24::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:04:ed:87:9a:51:e6:e7:79:57:c3:49:c0:6f:a9:4a:fa:f3:8b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: Jun  1 21:23:51 2025 GMT
            Not After : May 31 21:28:51 2026 GMT
        Subject: CN=916A1F1A278DDDFEB0C3358DCF33587FF8AF8115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:92:32:cf:63:32:21:10:bb:58:1a:48:2b:e8:
                    20:92:e2:a3:1d:82:c0:63:36:55:f2:ba:b0:47:bf:
                    37:f6:b7:3f:7e:61:45:ee:6e:dd:8c:a4:c8:d7:d8:
                    a6:df:cd:d0:d3:2d:e7:39:df:4f:b8:e6:7b:0b:69:
                    5b:8a:e0:36:6e:12:1d:0a:c7:59:04:56:4e:7a:da:
                    39:d1:2b:0b:e6:f1:41:a2:62:18:1c:a0:a4:40:9b:
                    20:e4:5d:b8:57:ed:be:61:11:4d:73:35:2a:69:77:
                    ce:d5:7a:91:55:95:14:ff:d7:f7:ad:54:d3:b8:0c:
                    8f:ae:00:15:12:a6:b0:45:0f:15:4e:1d:22:d4:ef:
                    bd:7d:28:a9:3f:29:27:e4:2c:d0:1a:9d:9c:35:5b:
                    80:fc:4d:a1:00:8a:9a:9f:68:a2:9f:4b:d5:d2:97:
                    52:e2:c4:76:4b:2c:e3:cb:67:ae:08:23:d1:67:a8:
                    ea:2b:b6:6e:29:d7:1d:6b:dd:1a:03:06:d7:32:5a:
                    46:6b:2f:84:a3:c7:a0:3c:8b:1b:72:1b:98:fd:3e:
                    c1:65:ef:0a:29:8d:56:80:dc:cd:59:99:46:9c:42:
                    7f:a7:cf:e1:9b:db:15:78:7b:47:90:e9:f4:f6:c8:
                    82:b1:95:b1:3c:8a:47:cf:1f:65:a7:d7:57:c0:b5:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:1F:1A:27:8D:DD:FE:B0:C3:35:8D:CF:33:58:7F:F8:AF:81:15
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a32343a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:b5:02:66:35:c9:75:11:9d:6e:d9:ee:2e:e0:5b:48:de:56:
         1a:d2:fb:d1:c5:15:c0:88:b9:29:73:70:0f:d4:b6:11:0c:73:
         d7:79:dc:0f:af:70:6f:c2:06:db:50:5c:c6:a8:ac:f9:a8:29:
         92:6d:5e:c3:51:c1:f6:b3:46:39:7b:ea:ca:72:d5:a7:fe:f2:
         ce:e1:19:8f:93:88:e7:db:c6:5b:44:3a:6c:c4:d6:a9:32:b4:
         64:b4:df:8d:07:15:32:97:95:50:4d:85:7a:e7:52:89:46:cb:
         5e:fe:48:aa:b9:b3:70:a1:d5:0b:8e:39:92:44:4f:23:06:a1:
         a6:d9:e5:16:21:e7:6d:a3:71:02:f1:a8:6f:8e:74:9c:13:df:
         9a:b6:09:e6:f3:f6:d3:e6:5d:ac:c7:fd:3c:45:dd:6b:dd:e8:
         9a:0a:29:14:48:42:9d:03:ad:94:44:4f:16:5c:e3:23:95:16:
         28:8a:2d:de:b8:e6:6a:32:60:ab:86:ae:9e:5d:e0:2c:1d:e4:
         07:c6:f6:b8:24:a1:4c:09:d8:6d:f6:09:74:65:24:cf:a0:2d:
         06:79:bc:76:8f:5d:b0:70:0f:f8:6b:e0:97:cc:31:e3:fe:3a:
         b3:10:e6:c4:a8:86:f8:ef:46:2f:c7:90:b6:88:32:84:f5:c0:
         70:50:17:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:29:21 2025 by rpki-client