Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          7zk86foiaofKDy/ewFtt4LhZYguX851/c9itcaE2n4s=
Subject key identifier:   EF:F8:18:CA:3A:8C:19:75:A4:1A:97:0D:5D:82:3E:37:2A:64:41:70
Certificate issuer:       /CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Certificate serial:       60D3160196142C5B551726AEA84EE3CC4EBA5B65
Authority key identifier: CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Thu 06 Mar 2025 17:58:53 +0000
ROA not before:           Thu 06 Mar 2025 17:53:53 +0000
ROA not after:            Thu 05 Mar 2026 17:58:53 +0000
asID:                     10103
IP address blocks:        2607:74c0:120::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl
                          rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 19:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d3:16:01:96:14:2c:5b:55:17:26:ae:a8:4e:e3:cc:4e:ba:5b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
        Validity
            Not Before: Mar  6 17:53:53 2025 GMT
            Not After : Mar  5 17:58:53 2026 GMT
        Subject: CN=EFF818CA3A8C1975A41A970D5D823E372A644170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:9d:86:88:d4:89:32:f3:bf:e4:1a:41:32:
                    1b:36:e1:e7:08:ca:f6:75:b0:80:e1:53:eb:9b:74:
                    2c:b2:e4:89:5d:8e:cc:5a:cc:69:38:29:c0:22:b5:
                    ae:27:c2:16:39:66:d5:17:1c:c0:78:f7:8f:45:45:
                    e2:2a:d2:4b:84:88:b1:97:c3:68:e7:e4:d3:7a:a6:
                    27:a5:14:fc:c2:4c:fa:14:c6:c7:2d:cd:02:09:5f:
                    26:a3:8f:e9:4c:e5:0d:a0:92:61:a4:f6:9a:96:5f:
                    85:09:49:28:09:b1:a3:05:8f:f9:f3:a2:9e:e0:50:
                    a4:95:35:9d:91:de:fd:22:58:4b:cc:48:a3:34:65:
                    25:24:3a:7e:4e:ad:f3:63:84:89:40:22:ba:e5:77:
                    37:85:39:3b:cb:97:d4:b2:84:5e:48:8b:63:97:38:
                    6c:ee:45:b4:be:09:51:39:a3:f3:6a:00:6f:ea:2c:
                    2b:53:40:5f:80:a7:a2:a6:77:af:1e:e6:0d:57:17:
                    7b:50:91:20:45:9c:89:f9:ab:f2:96:fd:68:0a:06:
                    07:fb:30:56:60:b8:d5:22:0a:47:14:aa:44:5e:9d:
                    38:0e:fc:e9:f4:23:7c:10:8b:a8:0c:5c:f7:92:2c:
                    9b:cd:a4:bc:17:d4:bb:3d:eb:b2:b5:cf:1e:2b:07:
                    b5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F8:18:CA:3A:8C:19:75:A4:1A:97:0D:5D:82:3E:37:2A:64:41:70
            X509v3 Authority Key Identifier:
                keyid:CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3132303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:120::/44

    Signature Algorithm: sha256WithRSAEncryption
         81:3f:74:15:67:86:04:b7:8e:ce:c3:e3:74:7e:24:5c:88:e7:
         2a:fa:73:f2:23:52:ae:9d:98:b4:f3:3c:f9:be:8b:b0:bb:be:
         02:5d:fd:e2:11:b3:53:10:57:f1:b2:78:58:6a:e2:6c:52:b1:
         b8:f7:73:38:7c:8f:b0:93:dc:44:e6:bf:d2:c3:ea:3b:56:5e:
         3f:cb:db:1f:d8:d1:b2:cb:04:55:47:50:1b:ce:41:cb:93:26:
         a3:c9:94:d7:31:df:04:58:8a:53:02:70:b5:fb:90:98:04:85:
         81:60:9c:1e:7a:84:21:21:74:8e:94:6f:98:e3:9c:5c:30:ba:
         f0:84:bd:73:ea:cb:ef:d6:7e:2b:66:13:dd:e2:3b:f3:eb:08:
         2e:f6:8b:9a:5b:4f:31:d5:92:6a:af:be:77:26:42:e1:e2:39:
         6d:b5:90:05:7e:d9:5c:ea:d2:e7:2d:2a:87:fe:c9:9d:63:b8:
         35:5a:17:49:f3:8d:5b:63:e2:9c:47:8d:3a:38:fd:1b:7d:9e:
         20:60:b7:39:9b:33:37:c9:6d:39:bd:f8:b7:54:5e:41:30:e4:
         2c:37:56:e7:c9:43:60:86:4d:16:1d:8c:97:21:6e:a6:08:01:
         07:02:86:c9:25:38:75:ba:e2:1f:23:00:73:09:69:1e:00:7f:
         ff:e7:8d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:07:13 2025 by rpki-client