Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3134303a3a2f34342d3434203d3e203130313033.roa
File:                     323630373a373463303a3134303a3a2f34342d3434203d3e203130313033.roa (raw, json)
Hash identifier:          3VDXwaKmQS9esMiMzJ5MzP4wNej1nUhPJUnccd8lLu8=
Subject key identifier:   8A:03:CA:21:36:0B:A5:76:7C:A0:F2:34:5E:37:94:9E:56:A8:0D:43
Certificate issuer:       /CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Certificate serial:       345482D579392CBCE583EC26D9B43281763750BD
Authority key identifier: CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3134303a3a2f34342d3434203d3e203130313033.roa
Signing time:             Thu 06 Mar 2025 17:58:53 +0000
ROA not before:           Thu 06 Mar 2025 17:53:53 +0000
ROA not after:            Thu 05 Mar 2026 17:58:53 +0000
asID:                     10103
IP address blocks:        2607:74c0:140::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl
                          rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:54:82:d5:79:39:2c:bc:e5:83:ec:26:d9:b4:32:81:76:37:50:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
        Validity
            Not Before: Mar  6 17:53:53 2025 GMT
            Not After : Mar  5 17:58:53 2026 GMT
        Subject: CN=8A03CA21360BA5767CA0F2345E37949E56A80D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:54:a1:16:6b:81:e8:8c:02:58:ee:f8:c2:d7:
                    b0:b7:ab:17:fb:d9:57:04:23:0e:d4:69:33:ab:19:
                    2a:86:c9:c3:61:49:4e:8f:be:25:ba:1a:c5:71:d5:
                    f8:47:94:18:70:4b:30:df:c7:af:df:a3:38:f8:15:
                    04:cf:a4:99:75:5f:54:fb:3e:58:46:d9:e2:3a:6a:
                    fb:d9:6f:62:f4:c1:d2:80:96:87:42:f6:a7:53:21:
                    15:b1:dc:59:20:c2:58:a4:a8:be:da:34:17:e4:3d:
                    d3:a3:9c:67:f5:fa:dd:6d:25:3e:c5:a2:c2:b6:be:
                    34:5f:45:4f:af:aa:8c:1c:ef:8f:23:b8:e3:2b:a9:
                    32:e0:12:fc:2c:e5:3c:4a:18:38:88:9f:f0:a8:3a:
                    c9:82:0e:ba:e1:6b:33:f0:0e:de:7f:56:06:35:a4:
                    53:e5:4d:f6:6d:27:62:cd:03:e4:18:92:53:18:0c:
                    1b:9e:aa:36:1e:ae:39:6e:bd:29:73:70:83:8a:00:
                    53:c3:8e:da:50:c9:2f:62:5b:d3:66:5e:68:e2:21:
                    86:89:61:59:61:fc:cf:ea:8f:76:f7:2d:e0:e5:0e:
                    7e:8b:d4:36:2c:8b:3d:cc:6c:2f:67:93:f6:86:02:
                    1c:41:5f:8b:7e:0a:1e:ae:66:cc:3d:75:6b:d8:13:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:03:CA:21:36:0B:A5:76:7C:A0:F2:34:5E:37:94:9E:56:A8:0D:43
            X509v3 Authority Key Identifier:
                keyid:CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3134303a3a2f34342d3434203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:140::/44

    Signature Algorithm: sha256WithRSAEncryption
         8e:02:28:eb:41:77:d9:72:49:fd:23:20:df:97:f4:b9:bd:51:
         c3:19:21:21:d9:61:3b:43:63:31:16:3c:f7:f2:f7:90:ca:c2:
         1c:96:4c:ca:a1:b0:eb:5f:97:df:52:61:26:03:ac:42:a4:6d:
         1e:b9:f3:b6:6f:4e:28:42:99:d9:ac:7e:2e:bc:41:a4:e0:41:
         21:6a:13:5a:95:23:31:64:80:93:72:20:5c:a8:09:bc:75:62:
         55:5a:cf:fc:77:93:8c:ec:53:f2:4e:02:bf:9d:28:8c:62:0a:
         69:4c:00:26:a1:bb:85:10:b1:c2:2d:8f:16:f8:96:6b:d0:d4:
         96:30:5c:f5:d4:a3:50:79:14:e4:24:83:59:b1:2e:9f:36:15:
         dd:ea:eb:f6:a0:4f:c1:33:cb:50:35:31:a5:79:17:45:62:20:
         05:4d:34:08:80:d9:60:04:87:36:49:fb:b8:a5:64:c1:33:24:
         d0:c4:db:21:45:1f:16:2a:c1:fc:2f:7e:58:c1:5b:23:39:5b:
         bc:17:1b:81:ae:d4:1c:4c:30:ba:90:f0:a1:be:64:2b:85:90:
         f0:48:6c:8d:8f:58:57:43:2c:00:34:9a:53:df:15:a0:06:55:
         23:ab:4e:9a:8c:e4:f4:67:47:d3:da:c4:74:2a:16:1d:8e:83:
         7e:ee:72:e0
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUNFSC1Xk5LLzlg+wm2bQygXY3UL0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGVkY2IyZjdjMDNhNGI2ZjQ5MzNkODA1NDZkYTQwYTQ0
MTM1NGY4NWY3ZTg4NTY3N2YwHhcNMjUwMzA2MTc1MzUzWhcNMjYwMzA1MTc1ODUz
WjAzMTEwLwYDVQQDEyg4QTAzQ0EyMTM2MEJBNTc2N0NBMEYyMzQ1RTM3OTQ5RTU2
QTgwRDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFShFmuB6IwC
WO74wtewt6sX+9lXBCMO1GkzqxkqhsnDYUlOj74luhrFcdX4R5QYcEsw38ev36M4
+BUEz6SZdV9U+z5YRtniOmr72W9i9MHSgJaHQvanUyEVsdxZIMJYpKi+2jQX5D3T
o5xn9frdbSU+xaLCtr40X0VPr6qMHO+PI7jjK6ky4BL8LOU8Shg4iJ/wqDrJgg66
4Wsz8A7ef1YGNaRT5U32bSdizQPkGJJTGAwbnqo2Hq45br0pc3CDigBTw47aUMkv
YlvTZl5o4iGGiWFZYfzP6o929y3g5Q5+i9Q2LIs9zGwvZ5P2hgIcQV+LfgoermbM
PXVr2BOy0QIDAQABo4ICuzCCArcwHQYDVR0OBBYEFIoDyiE2C6V2fKDyNF43lJ5W
qA1DMB8GA1UdIwQYMBaAFMzrmr7lO6iU07zAkwYfbd5xtw5qMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzgyMWVlZjdlMDYwMzQ1ZTRiZTU2OWNkMzQ3Y2NiZTM2LzAv
Q0NFQjlBQkVFNTNCQTg5NEQzQkNDMDkzMDYxRjZEREU3MUI3MEU2QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzI3OWMxNGE3LWM2ZGEtNDE1NS1iODc1LTg1ZDc1MDc4ZWIzNi9kZWRj
YjJmN2MwM2E0YjZmNDkzM2Q4MDU0NmRhNDBhNDQxMzU0Zjg1ZjdlODg1Njc3Zi5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84MjFlZWY3ZTA2MDM0NWU0YmU1Njlj
ZDM0N2NjYmUzNi8wLzMyMzYzMDM3M2EzNzM0NjMzMDNhMzEzNDMwM2EzYTJmMzQz
NDJkMzQzNDIwM2QzZTIwMzEzMDMxMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCYHdMABQDANBgkq
hkiG9w0BAQsFAAOCAQEAjgIo60F32XJJ/SMg35f0ub1RwxkhIdlhO0NjMRY89/L3
kMrCHJZMyqGw61+X31JhJgOsQqRtHrnztm9OKEKZ2ax+LrxBpOBBIWoTWpUjMWSA
k3IgXKgJvHViVVrP/HeTjOxT8k4Cv50ojGIKaUwAJqG7hRCxwi2PFviWa9DUljBc
9dSjUHkU5CSDWbEunzYV3err9qBPwTPLUDUxpXkXRWIgBU00CIDZYASHNkn7uKVk
wTMk0MTbIUUfFirB/C9+WMFbIzlbvBcbga7UHEwwupDwob5kK4WQ8EhsjY9YV0Ms
ADSaU98VoAZVI6tOmozk9GdH09rEdCoWHY6Dfu5y4A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:54 2025 by rpki-client