Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a34303a3a2f34322d3432203d3e203131393637.roa
File:                     323630323a663732653a34303a3a2f34322d3432203d3e203131393637.roa (raw, json)
Hash identifier:          +27Dbg6oipm4e0qhCaVb2NvULsGILpc+adMv0HaMD6w=
Subject key identifier:   36:E7:73:E2:10:56:96:08:AC:A8:D6:7A:48:BD:63:97:FE:34:FB:0C
Certificate issuer:       /CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
Certificate serial:       74A3BCCD23B1C677B39FC425F5FAD3DA2FD69249
Authority key identifier: 0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a34303a3a2f34322d3432203d3e203131393637.roa
Signing time:             Wed 15 Oct 2025 20:24:36 +0000
ROA not before:           Wed 15 Oct 2025 20:19:36 +0000
ROA not after:            Wed 14 Oct 2026 20:24:36 +0000
asID:                     11967
IP address blocks:        2602:f72e:40::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl
                          rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/c576633f-343d-4ac3-a936-98958e5630e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a3:bc:cd:23:b1:c6:77:b3:9f:c4:25:f5:fa:d3:da:2f:d6:92:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05
        Validity
            Not Before: Oct 15 20:19:36 2025 GMT
            Not After : Oct 14 20:24:36 2026 GMT
        Subject: CN=36E773E210569608ACA8D67A48BD6397FE34FB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:34:fa:22:78:62:1f:a4:35:42:39:dd:89:
                    f3:f0:de:7e:7f:50:1a:25:67:19:a8:20:d9:40:52:
                    36:35:b8:1a:27:5a:31:4a:93:b5:5b:e9:06:52:bc:
                    36:c7:52:38:86:99:75:e6:f5:91:56:57:0c:53:b7:
                    92:3e:75:8a:5c:cf:6d:de:3f:15:d6:86:df:9c:86:
                    d7:50:3d:ec:ad:ad:df:4a:90:b4:da:00:e6:74:03:
                    14:2e:53:ac:82:fb:05:d6:04:49:b6:35:28:3d:46:
                    44:e1:b9:72:bd:5c:68:a9:f3:98:00:af:f0:f0:13:
                    df:3a:60:d9:32:d7:c8:13:c5:25:e2:aa:8f:c3:fd:
                    eb:81:1e:7e:25:4e:fb:f6:a3:02:53:1f:71:94:c4:
                    2b:ce:72:d8:08:88:a4:0e:44:f1:fd:26:52:8c:5f:
                    95:0a:e3:dc:55:5f:73:8a:3b:70:2b:f3:52:f6:60:
                    d8:0f:17:cc:91:c4:19:bc:ea:0f:cd:20:a2:51:0f:
                    d2:8f:17:1e:4a:4a:a5:05:dd:16:70:3d:97:65:40:
                    39:06:9a:46:ea:53:ef:34:a0:b8:68:66:84:1d:7e:
                    62:e4:ae:ee:4f:9b:d5:16:9e:d3:0d:8f:76:de:f6:
                    46:10:38:48:9d:e4:85:aa:bf:2c:16:0e:19:ad:60:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E7:73:E2:10:56:96:08:AC:A8:D6:7A:48:BD:63:97:FE:34:FB:0C
            X509v3 Authority Key Identifier:
                keyid:0C:25:99:48:97:66:50:2B:98:E4:9A:AD:26:D3:E9:B3:05:B1:40:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/0C2599489766502B98E49AAD26D3E9B305B1404F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec13ec426c02092d6188b9eb34bb31c64dcaa32ee05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/4/323630323a663732653a34303a3a2f34322d3432203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:40::/42

    Signature Algorithm: sha256WithRSAEncryption
         55:eb:d1:14:42:ab:2f:ea:f7:14:2b:31:d4:e5:f4:af:a9:91:
         6a:45:7f:03:f2:a8:02:cb:8a:39:b6:5b:d5:dd:4d:db:71:40:
         2e:8c:d9:23:a4:e5:48:d4:61:4f:dd:fe:77:bf:b8:b5:79:cf:
         09:8c:17:f2:a0:65:0e:ad:99:0c:fe:7c:e5:57:fd:3d:b7:48:
         23:50:88:c0:a9:d5:30:62:9d:0e:b8:b4:17:e0:36:88:ca:a8:
         47:86:98:a0:0f:a0:bd:92:ca:7a:94:0c:cf:ca:cc:67:14:d1:
         d0:79:12:26:b6:21:2f:7d:fb:c5:5c:54:06:cb:c5:72:23:bf:
         79:4d:a1:a4:37:40:1f:3d:7e:6d:6e:76:ca:c7:c4:c0:9a:28:
         e6:b3:f1:21:af:df:27:f7:f9:39:d6:0d:66:4e:f2:63:f4:ca:
         62:1b:cc:5f:aa:83:b2:a9:c8:22:7e:07:8d:3b:9c:05:e6:5b:
         bb:67:e2:c1:bb:9c:41:36:46:6c:ec:64:c7:19:52:6e:61:dc:
         f2:ab:5f:de:86:ca:e2:ec:f1:34:12:fc:8f:76:6d:0c:91:8b:
         db:78:2d:5f:25:9f:da:fb:fa:82:50:81:53:6c:94:75:ed:a1:
         08:be:38:59:c7:db:2f:be:b0:51:5f:7b:96:0b:d7:d7:2e:4c:
         e4:35:8c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 13:50:03 2025 by rpki-client