Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a32613a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a32613a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          PSWq2CdUxfSzzIQvfcUKoFNC4ur4jia4pUXFN++iAvI=
Subject key identifier:   EA:99:2D:1D:61:C8:B7:92:02:3A:0A:D4:64:3F:8C:E4:9C:48:F2:9B
Certificate issuer:       /CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
Certificate serial:       54F628D80D73D7C5B48386A3EF2966D8D8DB860F
Authority key identifier: 0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a32613a3a2f34382d3438203d3e203131393637.roa
Signing time:             Wed 15 Oct 2025 20:24:37 +0000
ROA not before:           Wed 15 Oct 2025 20:19:37 +0000
ROA not after:            Wed 14 Oct 2026 20:24:37 +0000
asID:                     11967
IP address blocks:        2602:f72e:2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f6:28:d8:0d:73:d7:c5:b4:83:86:a3:ef:29:66:d8:d8:db:86:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
        Validity
            Not Before: Oct 15 20:19:37 2025 GMT
            Not After : Oct 14 20:24:37 2026 GMT
        Subject: CN=EA992D1D61C8B792023A0AD4643F8CE49C48F29B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b7:d4:ab:80:8e:a4:3a:2a:73:11:95:11:b1:
                    cc:86:3a:50:d2:d9:03:66:61:94:d6:87:3b:2f:61:
                    84:d8:75:94:74:27:cb:70:e1:5c:ca:8b:b7:1c:bb:
                    76:a0:f7:63:07:c0:71:66:84:3e:24:ff:4f:28:68:
                    ba:f1:a5:6f:54:5c:ca:84:99:76:4e:9a:90:e3:16:
                    c9:3a:12:ae:e5:59:12:43:2b:47:d7:7e:a2:6d:66:
                    db:bc:d5:8e:eb:8a:56:70:9f:88:5e:8f:38:32:d8:
                    86:65:8e:7b:b0:c7:a9:b7:55:68:cd:ba:ca:6e:20:
                    09:ed:0d:97:ef:ed:e2:10:51:a4:4f:ef:d3:1a:80:
                    dc:c7:00:39:2a:41:28:d0:9e:03:81:c5:ff:72:32:
                    ef:7f:12:72:31:ae:48:96:93:6a:ae:78:1d:9f:74:
                    19:de:b0:df:b6:68:e6:8f:e2:92:92:c9:b1:e1:ea:
                    5e:46:0e:b9:f4:61:20:a9:97:39:98:f1:42:59:90:
                    08:10:50:7d:62:af:75:09:fe:74:ed:e2:1c:15:37:
                    d4:9b:18:6a:a8:11:95:cc:48:22:84:5a:ee:92:7d:
                    bd:84:93:18:68:bd:0d:5d:e1:b2:e3:ae:d0:df:cf:
                    dc:4c:c4:de:84:d5:e9:61:76:30:2e:02:a4:58:8d:
                    91:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:99:2D:1D:61:C8:B7:92:02:3A:0A:D4:64:3F:8C:E4:9C:48:F2:9B
            X509v3 Authority Key Identifier:
                keyid:0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a32613a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:df:4b:c3:c0:15:5f:94:45:dd:7a:34:9e:5e:2b:9b:3b:2f:
         9a:43:c6:84:58:92:c8:28:c8:e0:ca:95:a6:ba:3d:9b:ee:3f:
         b1:47:8d:d2:3c:4d:81:54:c5:50:f8:a2:86:6a:8a:ce:54:c3:
         a6:eb:21:e6:b7:1b:31:34:bd:e2:8c:c9:c3:9d:a7:42:22:54:
         8a:98:aa:68:bc:3b:17:ca:a8:b2:94:42:54:a6:fd:c7:39:f0:
         58:2e:7d:27:4e:1c:06:2d:78:3a:c1:34:0f:a2:5b:9b:cb:12:
         36:bb:eb:33:94:64:fa:bd:6c:35:91:8e:28:f3:fd:bb:66:0f:
         dc:56:94:91:64:1c:40:23:90:1d:5a:6a:b9:ff:15:51:e1:a2:
         70:52:9b:c8:55:d7:d0:b4:e4:f6:eb:d1:0d:02:30:e6:6f:ae:
         59:89:59:4a:64:60:72:4e:88:91:22:95:37:34:de:99:f4:75:
         5b:99:cd:b0:bc:df:f8:44:be:31:8a:da:8f:39:71:34:31:d4:
         26:51:62:ca:29:67:53:fa:57:fa:de:7c:52:62:57:17:e4:2b:
         1b:fe:41:a6:d5:10:36:af:46:9a:66:cb:e6:d2:73:cf:b8:68:
         e3:bc:bf:04:dd:2e:c8:c8:44:16:a7:aa:bb:92:89:9f:fb:b9:
         0e:92:e2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 13:49:58 2025 by rpki-client