Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a33643a3a2f34382d3438203d3e20323035393431.roa
File:                     323630323a663732653a33643a3a2f34382d3438203d3e20323035393431.roa (raw, json)
Hash identifier:          zX4prna9/jzT5XnJ22K6eVd2s9rHjd+7IbBES2FbvGg=
Subject key identifier:   43:B4:82:2C:87:13:D6:4A:AC:3C:2A:56:93:65:23:42:91:25:75:74
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       74DAE9651A6279F629CC596505A4F71A40EAC5BB
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a33643a3a2f34382d3438203d3e20323035393431.roa
Signing time:             Wed 03 Sep 2025 20:11:00 +0000
ROA not before:           Wed 03 Sep 2025 20:06:00 +0000
ROA not after:            Wed 02 Sep 2026 20:11:00 +0000
asID:                     205941
IP address blocks:        2602:f72e:3d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 08:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:da:e9:65:1a:62:79:f6:29:cc:59:65:05:a4:f7:1a:40:ea:c5:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: Sep  3 20:06:00 2025 GMT
            Not After : Sep  2 20:11:00 2026 GMT
        Subject: CN=43B4822C8713D64AAC3C2A569365234291257574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:5c:67:03:aa:6f:91:01:c7:22:97:bb:37:
                    49:2c:dd:f8:67:0f:bb:f6:68:48:b7:b5:0a:3d:2c:
                    0f:f3:99:67:bc:5c:11:03:7b:38:2c:b3:e2:f7:b0:
                    04:cc:3e:54:b7:80:13:76:62:8f:e9:cb:b1:50:6f:
                    a3:e0:e9:57:17:5d:87:0f:ee:18:92:7d:5f:7e:db:
                    29:2e:cf:21:8e:6d:05:cb:11:08:77:d3:ee:8a:54:
                    c4:3e:a5:c5:b0:e6:e9:4e:a0:47:65:21:a0:52:30:
                    a2:0d:ac:6d:1d:93:b4:87:93:38:83:c7:48:f5:6d:
                    5a:58:9b:2a:2a:a4:67:21:ea:5b:ef:06:ab:fe:38:
                    3f:e6:cf:91:97:46:6a:bd:82:b1:d6:bc:1b:78:b6:
                    10:c7:03:8a:25:eb:93:67:de:52:94:b0:c2:33:c8:
                    dc:3d:c7:07:af:3c:06:67:8d:53:ef:7b:3f:bb:44:
                    8f:63:0a:16:2c:dc:f0:96:0d:ac:2b:97:8a:67:4c:
                    bc:51:e2:2a:21:b6:51:ba:92:70:a5:85:77:4d:c3:
                    21:88:df:d9:14:94:66:a9:4d:70:e7:36:e9:47:31:
                    42:ee:02:5e:8f:88:f9:79:51:87:49:80:9e:ad:78:
                    69:00:7b:0e:64:fc:22:01:fa:3d:d7:85:eb:f5:71:
                    39:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B4:82:2C:87:13:D6:4A:AC:3C:2A:56:93:65:23:42:91:25:75:74
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a33643a3a2f34382d3438203d3e20323035393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:3d::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:ae:0a:25:c8:7b:35:b8:31:ac:29:d6:10:1f:9e:e2:cc:4f:
         57:c9:22:df:13:e8:dd:60:2c:97:91:82:7d:39:7d:64:2b:b0:
         a7:1d:01:61:b7:24:9c:c6:90:69:4d:e6:00:0e:97:75:a3:db:
         89:df:fa:2b:03:35:3c:d5:7e:0c:dd:19:00:83:41:4b:ea:32:
         9c:67:19:72:aa:a6:66:21:47:59:fe:c9:d7:26:74:4d:86:b8:
         30:1e:c0:9b:c2:49:67:7f:23:4b:3a:cd:4c:a6:27:10:1c:14:
         48:5f:fe:15:17:e2:47:5e:08:83:38:d2:55:f9:40:46:71:3e:
         96:19:32:b9:67:32:fd:a9:4d:30:75:72:9d:06:b1:f8:b4:e5:
         24:1b:35:68:13:13:3f:db:ee:c6:f3:f1:66:bc:2c:7e:7f:b0:
         18:5a:45:57:95:73:16:4c:c2:5c:0a:2b:b8:d3:1c:a2:c4:22:
         d4:d6:83:71:5a:61:9c:b5:04:e0:76:97:4a:d3:28:6f:f0:c0:
         39:3d:b0:f6:83:e4:a9:dd:a9:82:6c:3d:44:14:3d:5e:48:1e:
         8f:2c:14:68:3b:a1:8d:85:2f:41:ad:90:73:a0:d7:4e:21:ab:
         75:08:76:4b:7c:9c:c9:93:82:02:dd:25:8c:87:b7:af:68:cb:
         4c:96:5f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 19:07:53 2025 by rpki-client