Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130613a3a2f34382d3438203d3e20333936333536.roa
File:                     323630323a666636323a3130613a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier:          WC7yV4okfBRKv09M7skCg4ziC5DcYqYYsP7EMpF0paA=
Subject key identifier:   02:FB:A9:CA:6A:84:8C:13:D3:75:BB:E3:E1:96:9C:FD:84:23:67:5C
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       3B8D2F255373F6240B2C43E17BB22710CF91A09D
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130613a3a2f34382d3438203d3e20333936333536.roa
Signing time:             Tue 13 May 2025 10:28:33 +0000
ROA not before:           Tue 13 May 2025 10:23:33 +0000
ROA not after:            Tue 12 May 2026 10:28:33 +0000
asID:                     396356
IP address blocks:        2602:ff62:10a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 19:11:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8d:2f:25:53:73:f6:24:0b:2c:43:e1:7b:b2:27:10:cf:91:a0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 13 10:23:33 2025 GMT
            Not After : May 12 10:28:33 2026 GMT
        Subject: CN=02FBA9CA6A848C13D375BBE3E1969CFD8423675C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1f:1c:16:1c:c7:d6:f0:fa:52:18:2e:2f:68:
                    70:bd:c3:57:b1:24:4a:ea:91:fe:66:57:2b:b0:5d:
                    15:47:1a:3c:b5:f9:36:e9:17:ad:aa:e0:a7:f7:c2:
                    e8:9d:80:4f:05:0b:f5:9b:11:e1:c5:3d:a5:11:e6:
                    a6:78:78:80:29:ad:34:16:a0:a1:44:e2:dc:7a:3f:
                    49:ef:34:65:39:63:42:47:11:4a:f8:17:49:d2:ca:
                    71:fa:57:37:89:04:e6:e6:89:b4:eb:c5:e6:0b:c1:
                    a6:13:e6:13:3e:2d:1b:c2:85:7b:c4:8d:f3:7f:cc:
                    9a:8c:7b:70:3b:b1:ce:c3:98:a0:5d:89:6b:d7:22:
                    72:02:56:d1:69:22:8d:10:5a:a5:ff:8d:39:3f:5b:
                    ff:5b:7e:ba:2b:58:9e:4d:0d:9d:2f:41:78:7b:32:
                    f1:85:9b:e9:c3:d0:c1:0d:7a:96:8d:ca:62:02:bc:
                    91:f0:a2:0b:6f:b7:66:e8:b2:27:1b:63:2d:04:11:
                    86:53:7f:37:e2:38:87:8f:ab:df:15:d9:36:c5:96:
                    51:9e:e6:b0:0e:cb:8f:68:fc:1d:9c:ac:6c:de:87:
                    01:d2:45:a3:54:a5:19:57:f0:fb:29:65:ff:b5:db:
                    13:ec:69:62:a9:31:9b:5c:de:0c:03:51:eb:ff:30:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FB:A9:CA:6A:84:8C:13:D3:75:BB:E3:E1:96:9C:FD:84:23:67:5C
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130613a3a2f34382d3438203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10a::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:ce:92:24:71:63:0d:5e:2f:34:23:e2:40:52:ca:fe:ef:b2:
         ba:6a:85:70:a1:d3:9f:c1:bd:5e:67:48:68:50:d5:8a:f2:c9:
         c3:cf:8f:a5:9d:e3:49:0c:48:86:5d:d7:c6:37:12:0e:3a:7d:
         e2:70:12:47:a8:43:a5:1b:f1:8f:ab:b9:81:16:61:58:76:d3:
         13:23:2e:91:70:22:0a:2b:2b:20:ff:bc:b3:bf:f3:6a:5b:8f:
         a7:42:2a:37:fa:7d:be:b1:5a:6d:84:50:50:f1:50:39:63:ff:
         7b:78:34:35:73:14:db:1f:2b:24:3a:f7:19:0a:82:63:7c:c5:
         37:e7:92:85:cc:a5:ef:0f:91:d4:85:62:ec:b0:75:bf:57:54:
         60:17:46:5f:c2:e0:83:f3:55:25:19:87:49:23:a2:ef:d7:ec:
         7f:dc:29:d0:52:97:31:0b:12:5c:e6:19:4d:ed:d1:74:a9:ae:
         58:e9:fa:ca:eb:88:3f:07:e2:08:6a:06:97:f9:bf:1d:7e:dc:
         63:c2:24:2b:14:69:1e:b3:37:df:c6:49:30:d7:d6:b6:40:b1:
         67:9a:0a:57:b1:77:d8:ab:3c:77:9e:1d:56:ad:81:86:a2:ef:
         02:0c:35:72:d3:5d:7d:e3:ca:d3:a6:1a:d1:23:a4:f7:b0:80:
         9c:a4:db:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:39:38 2025 by rpki-client