Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e20333936333536.roa
File:                     323630323a666636323a3130623a3a2f34382d3438203d3e20333936333536.roa (raw, json)
Hash identifier:          +yD/xXJx4hDnSZhcDas+VQd0/oWjfEqsNeohazYYTQs=
Subject key identifier:   88:67:24:60:CF:17:21:01:15:96:7D:79:01:C3:22:13:84:95:D6:BE
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       60CD395A560B042A8CA8877A4DE20C8B0FCABE04
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e20333936333536.roa
Signing time:             Tue 13 May 2025 10:28:33 +0000
ROA not before:           Tue 13 May 2025 10:23:33 +0000
ROA not after:            Tue 12 May 2026 10:28:33 +0000
asID:                     396356
IP address blocks:        2602:ff62:10b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:cd:39:5a:56:0b:04:2a:8c:a8:87:7a:4d:e2:0c:8b:0f:ca:be:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 13 10:23:33 2025 GMT
            Not After : May 12 10:28:33 2026 GMT
        Subject: CN=88672460CF17210115967D7901C322138495D6BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a9:e2:49:1a:0c:8b:94:2d:54:91:1d:f9:70:
                    46:1f:2b:5e:8c:65:4d:24:ce:5e:97:af:4d:20:c8:
                    ab:1e:95:bb:54:d0:0d:8b:dc:da:8c:7b:bb:54:f4:
                    94:70:ac:df:d5:7e:ce:08:0e:2b:be:ce:ae:89:69:
                    37:8a:58:51:69:48:d4:00:52:0e:54:69:c0:b5:14:
                    97:6b:0d:04:c8:64:04:69:c4:68:b4:24:4f:ca:b5:
                    23:ed:ac:36:15:19:e8:9a:fe:85:85:80:52:fa:89:
                    c8:65:93:0a:78:ed:2b:77:ec:3a:20:92:b8:21:a7:
                    ad:7f:e7:70:f2:02:b7:9b:4d:ec:8d:77:51:56:66:
                    9c:52:91:34:55:25:7c:ce:1c:2a:e6:ed:6c:72:79:
                    7e:90:1e:46:01:42:87:24:a1:e8:47:df:60:38:35:
                    f3:69:eb:58:c9:62:e4:74:a3:0f:f1:d3:9f:44:e9:
                    56:4b:2b:4c:24:7b:94:dc:b8:71:73:19:c9:24:1f:
                    03:f6:9b:92:5c:1e:ec:04:5b:34:ab:63:54:1b:24:
                    e4:87:4b:f7:c0:9c:49:18:c1:bc:bd:9f:e5:37:ba:
                    4c:a3:58:82:7c:07:7d:d1:9d:1f:87:9f:cb:ab:9d:
                    c7:a2:fe:58:53:45:8b:21:54:d2:e2:f9:d2:f0:ad:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:67:24:60:CF:17:21:01:15:96:7D:79:01:C3:22:13:84:95:D6:BE
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130623a3a2f34382d3438203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10b::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:0e:a5:e3:54:3c:1d:24:e3:f8:1f:48:a3:bf:d0:d0:49:09:
         f0:45:0d:ee:90:7c:11:86:24:7b:64:9c:aa:37:40:4b:5b:d1:
         a6:95:c4:8e:8d:95:66:13:4e:7d:5f:b9:20:ea:9f:37:3b:ac:
         84:6a:0a:58:18:9f:63:43:d7:50:c1:0c:9b:63:75:6a:37:bc:
         7c:ce:bf:d6:61:aa:85:32:97:df:65:ac:20:bc:d9:45:42:08:
         d1:43:16:1a:d3:01:46:58:cf:8a:d5:ec:2e:43:59:b4:a9:4e:
         4c:23:dc:a6:d7:00:cb:c4:66:ab:11:d3:f5:01:ae:f1:16:73:
         ad:6e:31:f6:6c:67:7e:be:2e:d4:5e:75:da:7d:ca:39:66:48:
         50:a4:12:1a:f0:91:53:9b:86:8d:f2:9f:07:12:d2:86:b2:ac:
         15:62:dc:31:3b:2b:e4:6b:dc:e4:f3:36:f0:bd:0b:ea:a1:76:
         25:87:3d:e8:71:ed:85:8b:84:44:6b:19:51:a7:7e:44:11:dd:
         59:e9:5b:22:f1:c1:8d:d6:aa:47:c1:f6:cc:a1:42:ac:b6:90:
         a8:9f:dd:6c:85:47:ce:b3:e6:5e:37:0c:53:57:fb:0e:ae:37:
         c9:b9:15:15:81:16:e9:af:b3:92:19:da:f8:68:62:1c:27:1b:
         5d:e7:85:70
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgIUYM05WlYLBCqMqId6TeIMiw/KvgQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjUwNTEzMTAyMzMzWhcNMjYwNTEyMTAyODMz
WjAzMTEwLwYDVQQDEyg4ODY3MjQ2MENGMTcyMTAxMTU5NjdENzkwMUMzMjIxMzg0
OTVENkJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6niSRoMi5Qt
VJEd+XBGHytejGVNJM5el69NIMirHpW7VNANi9zajHu7VPSUcKzf1X7OCA4rvs6u
iWk3ilhRaUjUAFIOVGnAtRSXaw0EyGQEacRotCRPyrUj7aw2FRnomv6FhYBS+onI
ZZMKeO0rd+w6IJK4Iaetf+dw8gK3m03sjXdRVmacUpE0VSV8zhwq5u1scnl+kB5G
AUKHJKHoR99gODXzaetYyWLkdKMP8dOfROlWSytMJHuU3LhxcxnJJB8D9puSXB7s
BFs0q2NUGyTkh0v3wJxJGMG8vZ/lN7pMo1iCfAd90Z0fh5/Lq53Hov5YU0WLIVTS
4vnS8K1MDwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFIhnJGDPFyEBFZZ9eQHDIhOE
lda+MB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwYWU5MWRmMDE4MGRi
ZDQzMGM4MjJmYS8zLzMyMzYzMDMyM2E2NjY2MzYzMjNhMzEzMDYyM2EzYTJmMzQz
ODJkMzQzODIwM2QzZTIwMzMzOTM2MzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL/YgELMA0G
CSqGSIb3DQEBCwUAA4IBAQCsDqXjVDwdJOP4H0ijv9DQSQnwRQ3ukHwRhiR7ZJyq
N0BLW9GmlcSOjZVmE059X7kg6p83O6yEagpYGJ9jQ9dQwQybY3VqN7x8zr/WYaqF
MpffZawgvNlFQgjRQxYa0wFGWM+K1ewuQ1m0qU5MI9ym1wDLxGarEdP1Aa7xFnOt
bjH2bGd+vi7UXnXafco5ZkhQpBIa8JFTm4aN8p8HEtKGsqwVYtwxOyvka9zk8zbw
vQvqoXYlhz3oce2Fi4REaxlRp35EEd1Z6Vsi8cGN1qpHwfbMoUKstpCon91shUfO
s+ZeNwxTV/sOrjfJuRUVgRbpr7OSGdr4aGIcJxtd54Vw
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:14:39 2025 by rpki-client