Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          eqcri3YgjOgTo1ubAXPXKrd7non20Oti0jvXppnhTr4=
Subject key identifier:   54:80:16:64:10:F8:2B:88:89:61:FC:77:5E:43:EC:38:5B:7C:10:51
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       03A33857724AA27DBE8E35A20B4B3B13FEB8145D
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 19 May 2025 20:28:33 +0000
ROA not before:           Mon 19 May 2025 20:23:33 +0000
ROA not after:            Mon 18 May 2026 20:28:33 +0000
asID:                     29802
IP address blocks:        2602:ff62:108::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a3:38:57:72:4a:a2:7d:be:8e:35:a2:0b:4b:3b:13:fe:b8:14:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 19 20:23:33 2025 GMT
            Not After : May 18 20:28:33 2026 GMT
        Subject: CN=5480166410F82B888961FC775E43EC385B7C1051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:59:27:71:6d:b5:7e:e0:62:12:50:c3:0f:e8:
                    14:6f:69:0f:f9:5d:e3:28:31:9b:9b:85:86:28:e4:
                    28:8b:fc:b3:5c:a5:cf:9c:e3:ab:49:10:6b:16:3b:
                    0f:be:d8:83:21:0c:00:b0:93:63:12:89:8e:2c:65:
                    1f:f6:4e:10:24:2f:10:82:ee:9b:d7:63:11:84:65:
                    73:93:24:28:61:ab:dd:33:d1:1d:4b:5e:b9:c9:ea:
                    2d:ac:78:7e:4f:d2:39:32:4a:3e:1b:18:79:b5:f2:
                    eb:70:24:9c:f4:8b:b6:9e:62:3d:3e:8d:da:25:98:
                    36:27:cb:c9:3a:59:ff:3a:1b:72:a2:67:8a:b2:72:
                    77:62:fa:c9:0f:15:dc:db:4c:d3:56:3f:92:dd:5c:
                    ce:9a:9e:6a:53:b7:bb:7e:2c:50:ec:4b:2c:44:44:
                    d5:36:1a:9a:b7:05:c6:90:55:d5:a0:a5:1d:b9:5a:
                    a9:c6:d7:42:e9:85:7f:ec:ed:be:29:fc:ee:dc:15:
                    9a:fe:41:e4:bb:af:04:3e:ce:ee:49:77:4b:00:0c:
                    c2:73:32:37:32:26:df:01:16:37:ff:8c:4c:08:ee:
                    54:6b:4d:70:2e:d2:5c:a4:69:dd:56:61:f2:b6:dc:
                    1e:11:1c:bc:a1:3d:3e:b6:43:d1:6c:32:4d:f6:4c:
                    ab:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:80:16:64:10:F8:2B:88:89:61:FC:77:5E:43:EC:38:5B:7C:10:51
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130383a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:108::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:3e:c0:d8:85:9d:94:fd:0f:a9:1a:c5:2b:b8:3e:0b:62:43:
         26:1f:4d:9b:84:56:6c:fa:33:9c:4d:46:f2:5a:ec:dd:69:9a:
         de:36:06:9b:13:76:1a:f1:16:a4:73:c4:54:a3:eb:ea:c1:17:
         5e:1e:7f:36:b7:7b:94:9a:96:26:e2:50:c3:cd:01:cb:da:b5:
         e8:77:9c:a5:ef:a1:e8:a4:7b:79:79:62:cd:3f:17:ec:10:9a:
         02:c5:41:c1:59:58:2e:0e:b2:81:33:0f:47:c2:6c:f4:31:40:
         b2:26:6e:3d:6c:27:b1:71:e0:77:fc:c5:4e:cd:70:88:34:5a:
         ad:82:18:3f:8a:27:17:a2:37:1d:3a:67:cc:38:7d:c7:33:a3:
         cd:22:42:64:79:ea:da:5c:42:68:15:be:d8:89:8d:7b:02:11:
         2c:9f:87:91:97:d4:53:90:ca:67:d2:b7:eb:bb:e5:4b:06:38:
         f9:64:9d:e1:ca:dd:b3:2d:7f:ad:06:02:d7:26:fc:3f:91:11:
         2a:d3:62:85:b7:6e:61:0e:1c:5c:32:c1:c6:11:82:fd:2e:c3:
         e1:ba:40:aa:fd:26:75:ad:a6:de:94:38:1f:81:3b:ab:50:9f:
         23:f1:1c:60:a8:2c:7f:6a:6c:07:73:eb:f8:60:39:36:8d:82:
         19:62:07:43
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUA6M4V3JKon2+jjWiC0s7E/64FF0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjUwNTE5MjAyMzMzWhcNMjYwNTE4MjAyODMz
WjAzMTEwLwYDVQQDEyg1NDgwMTY2NDEwRjgyQjg4ODk2MUZDNzc1RTQzRUMzODVC
N0MxMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VkncW21fuBi
ElDDD+gUb2kP+V3jKDGbm4WGKOQoi/yzXKXPnOOrSRBrFjsPvtiDIQwAsJNjEomO
LGUf9k4QJC8Qgu6b12MRhGVzkyQoYavdM9EdS165yeotrHh+T9I5Mko+Gxh5tfLr
cCSc9Iu2nmI9Po3aJZg2J8vJOln/OhtyomeKsnJ3YvrJDxXc20zTVj+S3VzOmp5q
U7e7fixQ7EssRETVNhqatwXGkFXVoKUduVqpxtdC6YV/7O2+Kfzu3BWa/kHku68E
Ps7uSXdLAAzCczI3MibfARY3/4xMCO5Ua01wLtJcpGndVmHyttweERy8oT0+tkPR
bDJN9kyrlQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFFSAFmQQ+CuIiWH8d15D7Dhb
fBBRMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMDM4M2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACYC/2IBCDANBgkq
hkiG9w0BAQsFAAOCAQEAWT7A2IWdlP0PqRrFK7g+C2JDJh9Nm4RWbPoznE1G8lrs
3Wma3jYGmxN2GvEWpHPEVKPr6sEXXh5/Nrd7lJqWJuJQw80By9q16Hecpe+h6KR7
eXlizT8X7BCaAsVBwVlYLg6ygTMPR8Js9DFAsiZuPWwnsXHgd/zFTs1wiDRarYIY
P4onF6I3HTpnzDh9xzOjzSJCZHnq2lxCaBW+2ImNewIRLJ+HkZfUU5DKZ9K367vl
SwY4+WSd4crdsy1/rQYC1yb8P5ERKtNihbduYQ4cXDLBxhGC/S7D4bpAqv0mda2m
3pQ4H4E7q1CfI/EcYKgsf2psB3Pr+GA5No2CGWIHQw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:13:49 2025 by rpki-client