Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3330303a3a2f34302d3430203d3e2037303138.roa
File:                     323630373a373463303a3330303a3a2f34302d3430203d3e2037303138.roa (raw, json)
Hash identifier:          R36JfwH1GGUPkQOHo7UBqqGxTLwIuMnrlKhB63+e89M=
Subject key identifier:   21:0E:DE:C5:76:3C:FE:AB:5F:42:89:57:5A:8B:CA:67:8A:39:AE:4D
Certificate issuer:       /CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
Certificate serial:       6C92A152734AB02271E64BAD3D09177C4953D3C2
Authority key identifier: CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3330303a3a2f34302d3430203d3e2037303138.roa
Signing time:             Thu 06 Mar 2025 17:58:53 +0000
ROA not before:           Thu 06 Mar 2025 17:53:53 +0000
ROA not after:            Thu 05 Mar 2026 17:58:53 +0000
asID:                     7018
IP address blocks:        2607:74c0:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl
                          rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/279c14a7-c6da-4155-b875-85d75078eb36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:47:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:92:a1:52:73:4a:b0:22:71:e6:4b:ad:3d:09:17:7c:49:53:d3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f
        Validity
            Not Before: Mar  6 17:53:53 2025 GMT
            Not After : Mar  5 17:58:53 2026 GMT
        Subject: CN=210EDEC5763CFEAB5F4289575A8BCA678A39AE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:61:a2:f6:8e:ab:69:e3:0b:41:d0:07:75:
                    fe:42:72:dd:59:3f:c7:90:a9:f2:92:fe:65:00:ac:
                    f0:92:f2:99:8d:7e:e0:0a:bb:f6:6b:07:3d:8b:96:
                    93:f2:82:e7:d7:18:73:1f:85:a6:6e:1f:7f:1e:5b:
                    f2:d9:68:87:dd:e6:03:7d:ad:91:c4:14:29:43:bc:
                    29:78:05:78:f1:81:60:eb:64:9e:9e:81:4c:65:08:
                    d1:4f:ea:b1:cb:f3:9a:d2:88:bb:53:4d:d2:4a:7e:
                    99:fe:c0:1f:cf:72:a9:6e:7e:93:d6:e1:a3:ab:17:
                    47:07:e6:48:54:a0:f6:2b:70:62:a0:a4:87:7c:0d:
                    ce:9f:b5:b7:5e:2f:3c:4e:30:e6:2c:4a:ef:af:5c:
                    74:d3:63:bb:c8:38:2e:60:5a:1d:5b:7f:52:23:db:
                    0d:15:09:c0:a3:ba:e5:6c:b9:62:8c:a1:25:0b:8b:
                    1b:70:f7:8c:a1:c9:46:76:7e:99:6a:6a:25:b5:17:
                    9f:23:20:52:c1:2e:fe:ce:fa:59:14:39:4a:93:85:
                    df:dc:0a:5b:08:49:62:51:86:61:18:d2:de:4a:4c:
                    71:35:2e:91:d0:d4:a1:e8:87:37:2b:b9:f9:ef:6b:
                    24:79:e1:94:72:bb:07:e0:ff:be:ab:02:82:15:7f:
                    d9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:0E:DE:C5:76:3C:FE:AB:5F:42:89:57:5A:8B:CA:67:8A:39:AE:4D
            X509v3 Authority Key Identifier:
                keyid:CC:EB:9A:BE:E5:3B:A8:94:D3:BC:C0:93:06:1F:6D:DE:71:B7:0E:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/CCEB9ABEE53BA894D3BCC093061F6DDE71B70E6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/279c14a7-c6da-4155-b875-85d75078eb36/dedcb2f7c03a4b6f4933d80546da40a441354f85f7e885677f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/821eef7e060345e4be569cd347ccbe36/0/323630373a373463303a3330303a3a2f34302d3430203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:74c0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         8a:a7:df:98:61:53:1e:02:bb:2d:c5:15:92:b3:f2:62:01:d4:
         92:72:0d:dc:31:b2:ed:74:8f:f6:9e:82:b4:9f:0c:ba:4e:7f:
         d0:3f:e8:5c:e7:58:1f:16:ed:fd:32:80:03:c1:b5:c3:19:07:
         ff:db:3f:87:73:4b:c1:75:ec:b1:04:75:4a:ff:f4:af:d5:94:
         5f:ea:b1:6d:7f:9d:c3:49:55:00:31:94:d3:dc:7e:0e:99:c9:
         74:bf:9f:1e:80:0e:ee:5d:78:4d:37:eb:05:87:fe:f6:08:77:
         86:b8:1a:c3:a3:6f:15:82:0a:46:68:00:4f:a4:b4:d1:24:25:
         4b:9c:b5:af:fd:1c:8e:c5:d7:3f:9a:5c:60:2f:b4:f9:62:d3:
         6c:3e:8d:5a:f9:79:36:f4:21:bb:d6:a2:6d:8d:da:aa:03:10:
         f4:bc:bd:57:8e:ce:49:5b:12:64:40:a9:dd:9b:0a:8a:98:f4:
         22:89:87:04:9b:98:3d:13:94:f9:a3:f7:23:09:8f:d9:3f:29:
         52:9b:a4:a9:6a:36:20:d0:45:57:fb:a2:91:48:83:1f:b4:00:
         3b:e6:ef:31:28:97:4e:8f:72:7c:84:45:02:39:dc:ab:21:ce:
         ac:21:9a:eb:32:50:38:a8:60:5c:98:78:3e:b0:fb:d3:9a:24:
         d5:7e:7b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:03:49 2025 by rpki-client