Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a31303a3a2f34342d3434203d3e203131393637.roa
File:                     323630323a663732653a31303a3a2f34342d3434203d3e203131393637.roa (raw, json)
Hash identifier:          eI2NrNAvxS4xsmVKuf/I95YsYcpzqH1tpMdTXdWDg0A=
Subject key identifier:   10:C6:CD:EB:A6:A1:0B:4F:33:F1:78:53:4B:29:A3:DD:3D:AF:41:4F
Certificate issuer:       /CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
Certificate serial:       098E0C4B50DADD32B4975F7119CBF1A6D4F55940
Authority key identifier: 0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a31303a3a2f34342d3434203d3e203131393637.roa
Signing time:             Wed 15 Oct 2025 20:24:36 +0000
ROA not before:           Wed 15 Oct 2025 20:19:36 +0000
ROA not after:            Wed 14 Oct 2026 20:24:36 +0000
asID:                     11967
IP address blocks:        2602:f72e:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:8e:0c:4b:50:da:dd:32:b4:97:5f:71:19:cb:f1:a6:d4:f5:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
        Validity
            Not Before: Oct 15 20:19:36 2025 GMT
            Not After : Oct 14 20:24:36 2026 GMT
        Subject: CN=10C6CDEBA6A10B4F33F178534B29A3DD3DAF414F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:49:3f:71:f5:c9:b0:2d:73:8d:d7:ff:95:d2:
                    13:bf:6e:6c:96:85:9a:39:9f:98:bb:2a:c4:df:39:
                    72:79:b1:91:72:64:19:30:8a:ef:18:31:d8:54:d1:
                    53:3a:cb:b5:f3:fa:93:0d:73:36:19:a6:37:f5:37:
                    a1:3d:c3:7c:6f:27:cd:84:66:cc:2a:1e:bb:0f:2d:
                    af:40:ef:a9:e3:04:12:99:e1:c3:f1:7f:95:51:e4:
                    0f:83:d0:b4:7d:8b:d1:61:eb:21:59:4f:54:74:72:
                    5a:80:4a:2e:7a:a3:b8:1b:0a:db:06:8f:0b:4c:20:
                    7c:76:26:c6:fb:09:2d:a6:76:c1:f3:0b:ef:ee:b1:
                    4a:f1:41:b1:1b:6e:f4:86:2d:88:ea:59:f7:b4:31:
                    59:09:be:0a:9d:26:41:64:3e:8d:46:80:f2:9a:88:
                    a2:fd:ad:c2:50:5b:08:6a:ca:c9:f6:43:ba:20:99:
                    d9:94:03:ed:35:29:89:8e:70:d5:b3:31:89:73:fe:
                    ae:d3:d3:7a:2a:bb:06:7b:a8:71:e2:c2:9d:af:d1:
                    00:32:0f:58:bd:cb:88:9f:f2:76:5b:54:7e:7a:15:
                    08:f4:70:56:86:81:11:a9:dc:8f:7f:d0:1f:c3:99:
                    18:84:a1:d9:21:18:6c:c4:91:61:30:88:bb:de:dd:
                    e4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C6:CD:EB:A6:A1:0B:4F:33:F1:78:53:4B:29:A3:DD:3D:AF:41:4F
            X509v3 Authority Key Identifier:
                keyid:0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a31303a3a2f34342d3434203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         2f:c3:82:fa:b1:7e:a4:3e:86:f8:fd:86:29:4f:9b:59:fc:f1:
         cc:04:0e:9f:3a:80:69:e0:26:fd:5e:de:3b:cf:7a:b2:38:62:
         ba:fc:d2:e4:75:f6:20:83:79:88:5d:7e:26:c3:46:70:67:51:
         95:95:5c:59:ac:18:11:bc:29:37:cd:c0:cc:e5:1b:42:ae:48:
         8b:c2:e7:0a:e5:50:4b:c2:13:91:50:a5:f7:d8:92:62:17:6c:
         bf:c6:59:bc:7e:7e:d8:d2:a9:2a:36:d9:be:ff:8b:11:2b:43:
         c0:d6:c7:ae:32:45:ce:f4:c4:5c:ee:d9:06:1e:b3:ab:74:8f:
         35:34:46:54:c9:87:87:ef:9b:99:25:ba:b8:9a:49:2f:55:24:
         d1:04:d2:f5:fd:a6:35:f2:4a:d2:5e:70:ab:50:d8:d7:8f:8d:
         26:27:f1:ce:26:4d:09:10:59:77:d6:69:52:a7:c6:9e:f3:59:
         8a:15:2a:b7:1c:5e:7b:4e:7e:f7:77:85:8e:6f:9d:74:31:e2:
         34:6c:20:73:71:5f:10:73:59:cf:a2:e9:5f:be:e1:b7:8f:a6:
         33:8a:f2:e3:fa:83:c2:c2:02:9b:43:c3:d3:57:af:1e:32:52:
         3d:02:80:62:6e:50:e0:06:10:36:0b:b1:ca:66:ba:42:f7:c9:
         40:c5:8d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 13:49:57 2025 by rpki-client