Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666636323a3130653a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          xaam2GKGjEqjyJiSPaW5ZRXCoFxpehxFy0h08Kx+gu4=
Subject key identifier:   CF:CA:88:C5:1C:6F:7F:D3:BF:8A:44:93:87:3A:E8:69:5F:B0:6E:BD
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       334E868419F5947DE2D9D260D689948DAAA8BF39
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e203239383032.roa
Signing time:             Mon 19 May 2025 20:28:33 +0000
ROA not before:           Mon 19 May 2025 20:23:33 +0000
ROA not after:            Mon 18 May 2026 20:28:33 +0000
asID:                     29802
IP address blocks:        2602:ff62:10e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:23:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:4e:86:84:19:f5:94:7d:e2:d9:d2:60:d6:89:94:8d:aa:a8:bf:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: May 19 20:23:33 2025 GMT
            Not After : May 18 20:28:33 2026 GMT
        Subject: CN=CFCA88C51C6F7FD3BF8A4493873AE8695FB06EBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f0:d6:27:15:6f:3c:ac:89:8b:dd:57:5c:a2:
                    2d:5a:27:ac:57:8f:3c:e5:07:3e:ea:27:46:e6:60:
                    92:cb:a4:5d:cb:ff:2e:7b:25:22:d9:c6:ab:48:35:
                    00:0d:3d:8d:cc:7d:56:fd:f7:db:12:46:b1:ce:94:
                    9c:45:97:c7:e1:76:07:d8:89:5f:0b:15:58:55:59:
                    02:19:ba:82:37:4b:c9:7e:4c:da:ad:37:cb:ca:b7:
                    38:c9:db:49:fb:12:38:c5:a9:69:ab:5b:83:c4:47:
                    e2:a9:cc:07:c6:ee:c3:c8:50:2f:df:99:54:0b:f8:
                    51:51:cd:52:e6:c5:55:53:69:6f:70:63:78:83:05:
                    8e:fb:0d:fe:e2:a6:74:7b:e0:69:73:92:e1:2e:80:
                    48:29:b0:0d:81:56:a4:86:15:c1:d8:30:55:b6:02:
                    7c:ec:40:b9:0c:8f:f2:bc:ac:a1:32:f6:9a:bf:81:
                    c4:57:74:8e:b8:3e:db:de:9e:77:b4:07:27:92:38:
                    2d:fe:8b:82:8a:b5:dd:f4:83:c7:4a:87:2f:fe:38:
                    9a:83:5e:ed:a1:6a:ad:c8:c8:0c:6f:ef:96:92:b0:
                    81:c4:28:78:7e:03:1e:dd:fa:0e:a3:b9:44:cf:aa:
                    d8:2e:f4:e8:6a:85:57:2e:e1:36:16:75:3f:07:29:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CA:88:C5:1C:6F:7F:D3:BF:8A:44:93:87:3A:E8:69:5F:B0:6E:BD
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/323630323a666636323a3130653a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62:10e::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:89:5d:15:5b:40:cb:7a:76:db:c9:79:8f:29:3d:07:7c:01:
         92:76:e7:ae:a2:e7:af:9e:1b:63:8c:75:37:45:9f:9f:d2:57:
         82:f4:4e:e2:dc:eb:b7:50:39:0e:ee:31:f1:fb:35:9d:9a:ae:
         36:4e:8b:97:50:55:db:8a:92:04:25:5b:10:02:57:fa:52:26:
         4a:2d:06:b1:a9:0a:2d:2d:19:7b:8b:59:3c:93:2b:c1:a0:60:
         a4:05:bd:8b:4c:6f:b3:f6:69:f0:e0:a8:72:d2:4b:2e:50:05:
         2a:11:2b:36:bb:2f:15:9c:fd:08:44:20:d9:44:41:81:84:8f:
         08:c0:91:63:a9:0c:1c:9e:50:72:0d:44:c6:77:fd:d5:7e:84:
         63:43:e1:67:9c:ea:dd:a6:bf:4d:b6:9e:c9:6b:a5:6c:bd:b3:
         4d:6b:0b:7a:4f:cd:57:c7:d5:28:c0:dd:28:33:3b:0b:eb:86:
         aa:f1:19:87:ba:37:37:a2:2a:63:e4:4f:c9:bc:ce:b3:b9:53:
         44:44:d4:bb:c0:6c:35:f6:39:94:e0:27:56:dc:d7:49:6b:16:
         ae:50:6b:32:ea:f5:05:9c:45:a3:0c:71:10:f9:59:61:29:a4:
         af:c6:87:d9:12:d5:47:5c:85:37:27:ad:c1:29:ee:0a:bf:f7:
         54:1c:3b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:09:06 2025 by rpki-client