Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130623a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          VZ8F4sLCUeU2OcLxzir3RcaZyhr1Pwddbndw+H/+oIo=
Subject key identifier:   FE:A3:7C:61:44:5C:49:EA:5D:B1:E7:1A:86:D4:1C:FA:35:43:85:49
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       27D574B78CB10179C64DCAA84CAB69EFB1659C2C
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 19 May 2025 20:28:33 +0000
ROA not before:           Mon 19 May 2025 20:23:33 +0000
ROA not after:            Mon 18 May 2026 20:28:33 +0000
asID:                     29802
IP address blocks:        2602:ff62:10b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d5:74:b7:8c:b1:01:79:c6:4d:ca:a8:4c:ab:69:ef:b1:65:9c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 19 20:23:33 2025 GMT
            Not After : May 18 20:28:33 2026 GMT
        Subject: CN=FEA37C61445C49EA5DB1E71A86D41CFA35438549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:9e:f0:0c:47:9f:0a:07:20:33:e8:eb:c1:
                    b2:e2:6f:62:78:9d:ef:dd:10:0b:0e:1b:3e:66:bd:
                    5c:51:60:7f:3d:be:dd:d6:7c:60:f4:b8:e8:f4:1a:
                    45:a5:e4:02:47:c0:59:73:be:dd:89:8d:ab:bc:5c:
                    9c:ac:f7:f9:40:26:bc:04:80:53:52:c4:b8:73:39:
                    60:9e:8e:28:16:75:b8:e6:21:15:5b:b4:ce:b9:ae:
                    77:78:4e:60:28:b1:3c:07:7f:7a:c0:25:8e:c5:ce:
                    1d:b4:73:68:0f:87:27:bb:4b:f5:f8:a9:1c:39:af:
                    a4:08:d0:7e:65:36:38:cf:59:4d:37:16:f4:f3:6b:
                    b8:32:ec:33:cc:69:0a:6c:47:2f:ee:1c:5f:9f:56:
                    34:74:ed:3a:34:e3:3a:ae:53:52:e0:81:58:ab:8e:
                    1c:ed:d4:fc:7f:6b:88:b0:2f:e0:e1:6c:91:3c:1e:
                    82:d0:90:e3:0e:da:7e:df:9f:22:42:c4:19:55:ac:
                    2a:18:e6:2b:b3:2d:52:00:d1:a3:ac:b6:46:97:51:
                    6b:63:49:bc:bf:70:f2:98:df:1c:5e:10:45:ad:3e:
                    6b:78:df:73:97:85:71:ab:81:e2:b7:fa:18:f3:87:
                    f6:c7:d0:95:f9:7e:1b:38:cf:fc:8a:14:92:9f:96:
                    c3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A3:7C:61:44:5C:49:EA:5D:B1:E7:1A:86:D4:1C:FA:35:43:85:49
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10b::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:62:29:74:49:32:29:61:e0:4a:22:e8:19:4e:1c:df:dd:73:
         ea:ff:fd:0d:6f:64:dd:13:7d:30:63:4c:ed:67:d1:0f:75:d0:
         46:b9:40:fb:92:b8:42:83:90:68:29:dd:79:bc:b2:eb:da:4d:
         48:c7:b7:07:d8:a3:a0:6c:55:29:7c:1f:70:a9:9a:35:07:bf:
         2c:cd:41:03:33:fb:8e:6b:4f:a5:e6:b0:11:7a:39:7b:26:87:
         f8:ac:6a:b7:a4:91:1d:99:49:68:4a:22:de:c2:46:00:d2:0c:
         71:40:1d:96:6b:2d:7b:0f:d3:7e:a8:59:9b:53:a5:e8:1c:fc:
         49:cf:25:14:56:e3:7e:72:8b:35:47:28:bd:67:3f:a2:5a:cf:
         33:c7:19:14:bd:18:b5:85:1a:26:b8:29:26:4e:8a:ce:13:f5:
         fa:ba:90:1d:80:46:56:60:43:98:62:da:3f:20:72:6d:61:04:
         3a:83:35:80:20:54:a0:b2:69:0a:f2:f5:85:b5:84:f7:03:af:
         3c:40:9b:61:60:c7:91:16:0c:c7:64:c1:fa:2b:a8:ab:a0:e4:
         ee:97:58:a7:d9:1e:f9:5f:07:57:9a:d9:27:2f:37:d3:15:65:
         69:89:95:e4:de:16:da:82:b7:d2:6b:ab:aa:22:3a:3d:da:56:
         7d:5e:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:09:05 2025 by rpki-client